< Back

Get-NsxApplicableSecurityAction

Sat Jan 18, 2020 9:01 pm

NAME Get-NsxApplicableSecurityAction



SYNOPSIS

Retrieves Security Policy actions (rules) associated with NSX Security

Groups, Security Policies, or Virtual Machines.





SYNTAX

Get-NsxApplicableSecurityAction [-Object] <Object[]> [[-Connection] <PSObject>] [<CommonParameters>]





DESCRIPTION

A security policy is a policy construct that can define one or more rules in

several different categories, that can then be applied to an arbitrary

number of Security Groups in order to enforce the defined policy.



The three categories of rules that can be included in a Security Policy are:



- Guest Introspection - data security, anti-virus, and vulnerability

management and rules based on third party Guest Introspection capability.

- Firewall rules - creates appropriate distributed firewall rules when

the policy is applied to a security group.

- Network introspection services - Thirdparty firewall, IPS/IDS etc.



Get-NsxApplicableFSecurityAction retrieves the security actions applicable

to a given object. Actions may be firewall, traffic redirection or guest

introspection.





PARAMETERS

-Object <Object[]>

Object(s) to retrieve applicable rules for. Can be a SecurityGroup, Security Policy or Virtual Machine



Required? true

Position? 1

Default value

Accept pipeline input? true (ByValue)

Accept wildcard characters? false



-Connection <PSObject>

PowerNSX Connection object



Required? false

Position? 2

Default value $defaultNSXConnection

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).



INPUTS



OUTPUTS



-------------------------- EXAMPLE 1 --------------------------



PS C:\\>$SG_Test = Get-NsxSecurityGroup "SG_Test"



PS C:\\> $SG_Test | Get-NsxApplicableSecurityAction









-------------------------- EXAMPLE 2 --------------------------



PS C:\\>$VM_Test = Get-VM -name "VM_Test"



PS C:\\> $VM_Test | Get-NsxApplicableSecurityAction









-------------------------- EXAMPLE 3 --------------------------



PS C:\\>$SP_Test = Get-NsxSecurityPolicy -name "SP_Test"



PS C:\\> Get-NsxApplicableSecurityAction -SecurityPolicy $SP_Test











RELATED LINKS