Edit FalconFirewallSetting

Edit-FalconFirewallSetting

SYNOPSIS

Modify Falcon Firewall Management policy settings

DESCRIPTION

All fields are required to modify policy settings. PSFalcon adds missing values automatically using data from your existing policy.

If adding or removing rule groups, all rule groups must be supplied in precedence order.

Requires 'Firewall Management: Write'.

PARAMETERS

Name	Type	Min	Max	Allowed	Pipeline	PipelineByName	Description
PlatformId	String			0 1		X	Operating System platform identifier
Enforce	Boolean					X	Policy enforcement status
RuleGroupId	String[]					X	Rule group identifier
DefaultInbound	String			ALLOW DENY		X	Default action for inbound traffic
DefaultOutbound	String			ALLOW DENY		X	Default action for outbound traffic
MonitorMode	Boolean					X	Override all block rules and enable monitoring
LocalLogging	Boolean					X	Enable local logging of firewall events
Id	String					X	Policy identifier

SYNTAX

Edit-FalconFirewallSetting [[-PlatformId] <String>] [[-Enforce] <Boolean>] [[-RuleGroupId] <String[]>] [[-DefaultInbound] <String>] [[-DefaultOutbound] <String>] [[-MonitorMode] <Boolean>] [[-LocalLogging] <Boolean>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

SDK Reference

falconpy

update-policy-container

USAGE

Modify firewall policy settings

Edit-FalconFirewallSetting -PolicyId <id> -Enforce $true -DefaultInbound DENY -DefaultOutbound ALLOW

2022-10-21: PSFalcon v2.2.3