dev-uxmt: AIP model

catalystwan/models/configuration/feature_profile/sdwan/policy_object/__init__.py

@@ -20,6 +20,7 @@
 from .policy.sla_class import FallbackBestTunnel, SLAAppProbeClass, SLAClassCriteria, SLAClassListEntry, SLAClassParcel
 from .policy.standard_community import StandardCommunityEntry, StandardCommunityParcel
 from .policy.tloc_list import TlocEntry, TlocParcel
+from .security.aip import AdvancedInspectionProfileParcel
 from .security.amp import AdvancedMalwareProtectionParcel
 from .security.application_list import (
     SecurityApplicationFamilyListEntry,
@@ -39,6 +40,7 @@
 
 AnyPolicyObjectParcel = Annotated[
     Union[
+        AdvancedInspectionProfileParcel,
         AdvancedMalwareProtectionParcel,
         URLParcel,
         ApplicationListParcel,
@@ -71,6 +73,7 @@
 ]
 
 __all__ = (
+    "AdvancedInspectionProfileParcel",
     "AdvancedMalwareProtectionParcel",
     "AnyPolicyObjectParcel",
     "ApplicationFamilyListEntry",

catalystwan/models/configuration/feature_profile/sdwan/policy_object/security/aip.py

@@ -0,0 +1,27 @@
+# Copyright 2024 Cisco Systems, Inc. and its affiliates
+
+from typing import Literal
+
+from pydantic import AliasPath, Field
+
+from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase
+from catalystwan.models.configuration.feature_profile.sdwan.transport.bgp import RefIdItem
+
+TlsDecryptionAction = Literal["decrypt", "neverDecrypt", "skipDecrypt"]
+
+
+class AdvancedInspectionProfileParcel(_ParcelBase):
+    type_: Literal["unified/advanced-inspection-profile"] = Field(
+        default="unified/advanced-inspection-profile", exclude=True
+    )
+    description: str = ""
+    tls_decryption_action: Global[TlsDecryptionAction] = Field(
+        default=Global[TlsDecryptionAction](value="skipDecrypt"),
+        validation_alias=AliasPath("data", "tlsDecryptionAction"),
+    )
+    intrusion_prevention: RefIdItem = Field(default=None, validation_alias=AliasPath("data", "intrusionPrevention"))
+    url_filtering: RefIdItem = Field(default=None, validation_alias=AliasPath("data", "urlFiltering"))
+    advanced_malware_protection: RefIdItem = Field(
+        default=None, validation_alias=AliasPath("data", "advancedMalwareProtection")
+    )
+    ssl_decryption_profile: RefIdItem = Field(default=None, validation_alias=AliasPath("data", "sslDecryptionProfile"))