Palo Alto Networks · Schema

PolicyRecommendation

PolicyRecommendation schema from Palo Alto Networks IoT Security API

Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

Properties

Name Type Description
id string Unique recommendation identifier.
deviceid string Device identifier the recommendation applies to.
profile string Device profile the recommendation applies to.
source_zone string Recommended source security zone.
destination_zone string Recommended destination security zone.
applications array Recommended allowed applications.
services array Recommended allowed services and ports.
action string Recommended policy action.
confidence number Confidence score for the recommendation.
description string Human-readable recommendation description.
View JSON Schema on GitHub

JSON Schema

iot-security-api-policy-recommendation-schema.json Raw ↑ 
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "PolicyRecommendation",
  "description": "PolicyRecommendation schema from Palo Alto Networks IoT Security API",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/iot-security-api-policy-recommendation-schema.json",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "Unique recommendation identifier."
    },
    "deviceid": {
      "type": "string",
      "description": "Device identifier the recommendation applies to."
    },
    "profile": {
      "type": "string",
      "description": "Device profile the recommendation applies to."
    },
    "source_zone": {
      "type": "string",
      "description": "Recommended source security zone."
    },
    "destination_zone": {
      "type": "string",
      "description": "Recommended destination security zone."
    },
    "applications": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Recommended allowed applications."
    },
    "services": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Recommended allowed services and ports."
    },
    "action": {
      "type": "string",
      "enum": [
        "allow",
        "deny",
        "alert"
      ],
      "description": "Recommended policy action."
    },
    "confidence": {
      "type": "number",
      "format": "float",
      "description": "Confidence score for the recommendation."
    },
    "description": {
      "type": "string",
      "description": "Human-readable recommendation description."
    }
  }
}