Skip to main content

Security Services Configuration

Security services configuration objects for managing security policies, profiles, and rules in Strata Cloud Manager.

Overview​

This section covers security services provided by the Palo Alto Networks Strata Cloud Manager SDK. Each configuration object corresponds to a resource in Strata Cloud Manager and provides methods for managing security policies and profiles.

Security Rules and Policy Management​

Security Rule​

Manage security rules that define core security policies for network traffic, including source/destination zones, applications, services, and security profiles.

App Override Rule​

Manage app override rules to force application identification for specific traffic based on zone, address, port, and protocol.

Authentication Rule​

Manage authentication rules to define identity-based policies for network traffic.

Decryption Rule​

Manage decryption rules to control SSL/TLS traffic inspection policies.

Security Profiles​

Anti-Spyware Profile​

Configure anti-spyware profiles to protect against spyware, command-and-control traffic, and data exfiltration.

Decryption Profile​

Manage SSL/TLS decryption profiles to control encrypted traffic inspection and certificate validation.

DNS Security Profile​

Configure DNS security profiles to protect against DNS tunneling, DGA, and malicious domains.

File Blocking Profile​

Manage file blocking profiles to control file transfers based on file type and direction.

URL Access Profile​

Configure URL access profiles to control website access by category with credential enforcement.

URL Categories​

Manage custom URL categories for granular policy control.

Vulnerability Protection Profile​

Manage vulnerability protection profiles to protect against known CVEs and exploit attempts.

Wildfire Antivirus Profile​

Configure WildFire and antivirus profiles for real-time malware analysis and zero-day protection.

Common Features​

All security services configuration objects provide:

  • Standard CRUD operations (create, read, update, delete)
  • Pagination support for large collections
  • Filtering capabilities
  • Container-aware operations (folder, snippet, or device)
  • Validation of configuration parameters

Usage Pattern​

from scm.client import Scm

client = Scm(
    client_id="your_client_id",
    client_secret="your_client_secret",
    tsg_id="your_tsg_id"
)

# Access any security service through the client
rules = client.security_rule.list(folder="Texas", rulebase="pre")
profiles = client.anti_spyware_profile.list(folder="Texas")