Skip to main content

StigPolicyCondition

The condition (a set of constraints) under which a policy applies to a device in the network. The condition is true for a device when all constraint fields on this set are satisfied.

Fields​

nametypenullabledescription
ordinalIntegerfalseThe order in which this condition appears in the policy. Policy values are sourced from the first condition whose constraints are satisfied.
deviceNamePatternStringfalseA regular expression pattern. The constraint is satisfied for a device when the pattern matches its name. If empty, the constraint is satisfied for all devices.
ifaceNamePatternStringfalseA regular expression pattern. The constraint is satisfied for an interface when the pattern matches its name, or for a device when the pattern matches any interface on the device. If empty, the constraint is satisfied for all interfaces.
tagNamesList<String>falseA set of tag names. The constraint is satisfied for a device when it is tagged by any of the provided names. If empty, the constraint is satisfied for all devices.
locationNamesList<String>falseA set of location names. The constraint is satisfied for a device when its location is any of the provided names. If empty, the constraint is satisfied for all devices.

Used by​

network → stigDatabase → policy → devicePolicy → allowedServices → condition​

See also​

Data model path

network → stigDatabase → policy → devicePolicy → allowedCertificationAuthorityEnrollmentUrls → condition​

See also​

Data model path

network → stigDatabase → policy → devicePolicy → managementSubnets → condition​

See also​

Data model path

network → stigDatabase → policy → devicePolicy → isProviderEdge → condition​

See also​

Data model path

network → stigDatabase → policy → ifacePolicy → requiresDefaultVlan → condition​

See also​

Data model path

network → stigDatabase → policy → ifacePolicy → requiresMulticast → condition​

See also​

Data model path

network → stigDatabase → policy → ifacePolicy → pseudowireVirtualCircuitId → condition​

See also​

Data model path

network → stigDatabase → policy → ifacePolicy → connectivity → toExternalDevice → condition​

See also​

Data model path

network → stigDatabase → policy → ifacePolicy → connectivity → toAccessLayerSwitch → condition​

See also​

Data model path

network → stigDatabase → policy → ifacePolicy → connectivity → toUntrustedDevice → condition​

See also​

Data model path

network → stigDatabase → policy → ifacePolicy → connectivity → toCoreLayer → condition​

See also​

Data model path

network → stigDatabase → policy → ifacePolicy → connectivity → viaFiberOptics → condition​

See also​

Data model path

network → stigDatabase → policy → ifacePolicy → connectivity → toCustomerEdgeDevice → condition​

See also​

Data model path

network → stigDatabase → policy → ifacePolicy → connectivity → toDodinBackbone → condition​

See also​

Data model path