CASBMalwareRule

C A S B Malware Rule resource for Zscaler Internet Access.

Resource operations

This resource supports the following standard methods: create(), load(), update(), delete(). They operate on the instance state — set properties with dot notation, then call the method with no arguments.

Quick Start

import zssdk
import logging

# Enable debug logging for CASBMalwareRule
logging.getLogger('zssdk.zia').setLevel(logging.DEBUG)
logging.basicConfig(level=logging.DEBUG)

session = zssdk.Session(
    vanity_domain="your-vanity-domain",
    client_id="your-client-id",
    client_secret="your-client-secret",
)

# Get a specific CASBMalwareRule
resource = session.zia.CASBMalwareRule(id="your-resource-id")
resource.load()
print(resource)

# Debug output shows HTTP request/response details

Identifiers

Name	Type	Description
id	string	Unique identifier

Actions

create()

Creates a new CASBMalwareRule. Set properties on the resource instance, then call create() — this method takes no arguments.

Properties for creation:

Name	Type	Required	Description
access_control	string	No	-
action	string	No	-
buckets	EntityReferenceWrapperCollection	No	-
casb_email_label	EntityReference	No	-
casb_tombstone_template	EntityReference	No	-
cloud_app_tenants	EntityReferenceWrapperCollection	No	-
cloud_application_tenant	CloudApplicationTenantWrapperCollection	No	-
labels	EntityReferenceWrapperCollection	No	-
last_modified_by	EntityReference	No	-
last_modified_time	integer	No	-
name	string	Yes	-
order	integer	Yes	-
quarantine_location	string	No	-
scan_inbound_email_link	string	No	-
state	string	No	-
template_synced_rule_flag	string	No	-
type	string	No	-

Returns: CASBMalwareRule

Example:

resource = session.zia.CASBMalwareRule()
resource.name = "example-name"
resource.order = 3600
resource.create()
print(f"Created with ID: {resource.id}")

delete()

Deletes a CASBMalwareRule by id. Only the id identifier is required; delete() takes no other arguments.

Example:

resource = session.zia.CASBMalwareRule(id="your-resource-id")
resource.delete()

load()

Fetches an existing CASBMalwareRule by id. Only the id identifier is required; load() takes no other arguments.

Returns: CASBMalwareRule

Example:

resource = session.zia.CASBMalwareRule(id="your-resource-id")
resource.load()
print(resource.name)

update()

Updates an existing CASBMalwareRule. Call load() first, modify properties, then call update() — this method takes no arguments.

Properties for update:

Name	Type	Required	Description
access_control	string	No	-
action	string	No	-
buckets	EntityReferenceWrapperCollection	No	-
casb_email_label	EntityReference	No	-
casb_tombstone_template	EntityReference	No	-
cloud_app_tenants	EntityReferenceWrapperCollection	No	-
cloud_application_tenant	CloudApplicationTenantWrapperCollection	No	-
labels	EntityReferenceWrapperCollection	No	-
last_modified_by	EntityReference	No	-
last_modified_time	integer	No	-
name	string	Yes	-
order	integer	Yes	-
quarantine_location	string	No	-
scan_inbound_email_link	string	No	-
state	string	No	-
template_synced_rule_flag	string	No	-
type	string	No	-

Returns: CASBMalwareRule

Example:

resource = session.zia.CASBMalwareRule(id="your-resource-id")
resource.load()
resource.name = "Updated value"
resource.update()

Attributes

Name	Type	Required	Description
access_control	string	No	-
action	string	No	-
buckets	EntityReferenceWrapperCollection	No	-
casb_email_label	EntityReference	No	-
casb_tombstone_template	EntityReference	No	-
cloud_app_tenants	EntityReferenceWrapperCollection	No	-
cloud_application_tenant	CloudApplicationTenantWrapperCollection	No	-
id	integer	No	-
labels	EntityReferenceWrapperCollection	No	-
last_modified_by	EntityReference	No	-
last_modified_time	integer	No	-
name	string	Yes	-
order	integer	Yes	-
quarantine_location	string	No	-
scan_inbound_email_link	string	No	-
state	string	No	-
template_synced_rule_flag	string	No	-
type	string	No	-

Related

• CASBMalwareRule - Data structure definition
• Logging guide - enable verbose logs while debugging this resource