-
Notifications
You must be signed in to change notification settings - Fork 316
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
cc9f557
commit 31ee7ab
Showing
1 changed file
with
47 additions
and
0 deletions.
There are no files selected for viewing
47 changes: 47 additions & 0 deletions
47
... Firewall/Enable PAC file configuration while using Explicit Proxy on Azure Firewall.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,47 @@ | ||
{ | ||
"properties": { | ||
"displayName": "Audit Azure Firewall Policies with Explicit Proxy and PAC File", | ||
"policyType": "Custom", | ||
"mode": "All", | ||
"description": "This policy audits Azure Firewall Policies to ensure that if Explicit Proxy is enabled, then the PAC File must also be enabled.", | ||
"metadata": { | ||
"version": "1.0.0", | ||
"category": "Network" | ||
}, | ||
"parameters": { | ||
"effect": { | ||
"type": "String", | ||
"metadata": { | ||
"displayName": "Effect", | ||
"description": "Enable or disable the execution of the policy" | ||
}, | ||
"allowedValues": [ | ||
"Audit", | ||
"Disabled" | ||
], | ||
"defaultValue": "Audit" | ||
} | ||
}, | ||
"policyRule": { | ||
"if": { | ||
"allOf": [ | ||
{ | ||
"field": "type", | ||
"equals": "Microsoft.Network/firewallPolicies" | ||
}, | ||
{ | ||
"field": "Microsoft.Network/firewallPolicies/explicitProxy.enableExplicitProxy", | ||
"equals": true | ||
}, | ||
{ | ||
"field": "Microsoft.Network/firewallPolicies/explicitProxy.enablePacFile", | ||
"notEquals": true | ||
} | ||
] | ||
}, | ||
"then": { | ||
"effect": "[parameters('effect')]" | ||
} | ||
} | ||
} | ||
} |