DnatRule
Dnat Rule resource for Zscaler Internet Access.
Resource operations
This resource supports the following standard methods: create(), load(), update(), delete(). They operate on the instance state — set properties with dot notation, then call the method with no arguments.
Quick Start
import zssdk
import logging
# Enable debug logging for DnatRule
logging.getLogger('zssdk.zia').setLevel(logging.DEBUG)
logging.basicConfig(level=logging.DEBUG)
session = zssdk.Session(
vanity_domain="your-vanity-domain",
client_id="your-client-id",
client_secret="your-client-secret",
)
# Get a specific DnatRule
resource = session.zia.DnatRule(id="your-resource-id")
resource.load()
print(resource)
# Debug output shows HTTP request/response details
Identifiers
| Name | Type | Description |
|---|---|---|
id | string | Unique identifier |
Actions
create()
Creates a new DnatRule. Set properties on the resource instance, then call create() — this method takes no arguments.
Properties for creation:
| Name | Type | Required | Description |
|---|---|---|---|
access_control | string | No | - |
action | string | No | - |
block_response_code | string | No | - |
default_rule | boolean | No | - |
departments | EntityReferenceWrapperCollection | No | - |
description | string | No | - |
dest_addresses | stringCollection | No | - |
dest_countries | DestCountriesEnumCollection | No | - |
dest_ip_categories | FirewallUrlCategoryWrapperCollection | No | - |
dest_ip_groups | EntityReferenceWrapperCollection | No | - |
dest_ipv6_groups | EntityReferenceWrapperCollection | No | - |
device_groups | EntityReferenceWrapperCollection | No | - |
devices | EntityReferenceWrapperCollection | No | - |
dns_gateway | EntityReference | No | - |
enable_full_logging | boolean | No | - |
end_point_application_groups | EndPointApplicationGroupWrapperCollection | No | - |
end_point_application_threat_levels | ThreatLevelEnumCollection | No | - |
end_point_applications | EndPointApplicationLiteWrapperCollection | No | - |
exclude_context_shield_end_point | boolean | No | - |
groups | EntityReferenceWrapperCollection | No | - |
id | integer | No | - |
labels | EntityReferenceWrapperCollection | No | - |
last_modified_by | EntityReference | No | - |
last_modified_time | integer | No | - |
location_groups | EntityReferenceWrapperCollection | No | - |
locations | EntityReferenceWrapperCollection | No | - |
name | string | Yes | - |
nw_service_groups | EntityReferenceWrapperCollection | No | - |
nw_services | EntityReferenceWrapperCollection | No | - |
order | integer | No | - |
predefined | boolean | No | - |
rank | integer | Yes | - |
redirect_fqdn | string | No | - |
redirect_ip | string | No | - |
redirect_port | integer | No | - |
res_categories | FirewallUrlCategoryWrapperCollection | No | - |
res_groups | EntityReferenceWrapperCollection | No | - |
source_countries | DestCountriesEnumCollection | No | - |
src_ip_groups | EntityReferenceWrapperCollection | No | - |
src_ips | stringCollection | No | - |
src_ipv6_groups | EntityReferenceWrapperCollection | No | - |
state | string | No | - |
template_synced_rule_flag | string | No | - |
time_windows | EntityReferenceWrapperCollection | No | - |
trusted_resolver_rule | boolean | No | - |
users | EntityReferenceWrapperCollection | No | - |
Returns: DnatRule
Example:
resource = session.zia.DnatRule()
resource.name = "example-name"
resource.rank = 3600
resource.create()
print(f"Created with ID: {resource.id}")
delete()
Deletes a DnatRule by id. Only the id identifier is required; delete() takes no other arguments.
Example:
resource = session.zia.DnatRule(id="your-resource-id")
resource.delete()
load()
Fetches an existing DnatRule by id. Only the id identifier is required; load() takes no other arguments.
Returns: DnatRule
Example:
resource = session.zia.DnatRule(id="your-resource-id")
resource.load()
print(resource.name)
update()
Updates an existing DnatRule. Call load() first, modify properties, then call update() — this method takes no arguments.
Properties for update:
| Name | Type | Required | Description |
|---|---|---|---|
access_control | string | No | - |
action | string | No | - |
block_response_code | string | No | - |
default_rule | boolean | No | - |
departments | EntityReferenceWrapperCollection | No | - |
description | string | No | - |
dest_addresses | stringCollection | No | - |
dest_countries | DestCountriesEnumCollection | No | - |
dest_ip_categories | FirewallUrlCategoryWrapperCollection | No | - |
dest_ip_groups | EntityReferenceWrapperCollection | No | - |
dest_ipv6_groups | EntityReferenceWrapperCollection | No | - |
device_groups | EntityReferenceWrapperCollection | No | - |
devices | EntityReferenceWrapperCollection | No | - |
dns_gateway | EntityReference | No | - |
enable_full_logging | boolean | No | - |
end_point_application_groups | EndPointApplicationGroupWrapperCollection | No | - |
end_point_application_threat_levels | ThreatLevelEnumCollection | No | - |
end_point_applications | EndPointApplicationLiteWrapperCollection | No | - |
exclude_context_shield_end_point | boolean | No | - |
groups | EntityReferenceWrapperCollection | No | - |
id | integer | No | - |
labels | EntityReferenceWrapperCollection | No | - |
last_modified_by | EntityReference | No | - |
last_modified_time | integer | No | - |
location_groups | EntityReferenceWrapperCollection | No | - |
locations | EntityReferenceWrapperCollection | No | - |
name | string | Yes | - |
nw_service_groups | EntityReferenceWrapperCollection | No | - |
nw_services | EntityReferenceWrapperCollection | No | - |
order | integer | No | - |
predefined | boolean | No | - |
rank | integer | Yes | - |
redirect_fqdn | string | No | - |
redirect_ip | string | No | - |
redirect_port | integer | No | - |
res_categories | FirewallUrlCategoryWrapperCollection | No | - |
res_groups | EntityReferenceWrapperCollection | No | - |
source_countries | DestCountriesEnumCollection | No | - |
src_ip_groups | EntityReferenceWrapperCollection | No | - |
src_ips | stringCollection | No | - |
src_ipv6_groups | EntityReferenceWrapperCollection | No | - |
state | string | No | - |
template_synced_rule_flag | string | No | - |
time_windows | EntityReferenceWrapperCollection | No | - |
trusted_resolver_rule | boolean | No | - |
users | EntityReferenceWrapperCollection | No | - |
Returns: DnatRule
Example:
resource = session.zia.DnatRule(id="your-resource-id")
resource.load()
resource.name = "Updated value"
resource.update()
Attributes
| Name | Type | Required | Description |
|---|---|---|---|
access_control | string | No | - |
action | string | No | - |
block_response_code | string | No | - |
default_rule | boolean | No | - |
departments | EntityReferenceWrapperCollection | No | - |
description | string | No | - |
dest_addresses | stringCollection | No | - |
dest_countries | DestCountriesEnumCollection | No | - |
dest_ip_categories | FirewallUrlCategoryWrapperCollection | No | - |
dest_ip_groups | EntityReferenceWrapperCollection | No | - |
dest_ipv6_groups | EntityReferenceWrapperCollection | No | - |
device_groups | EntityReferenceWrapperCollection | No | - |
devices | EntityReferenceWrapperCollection | No | - |
dns_gateway | EntityReference | No | - |
enable_full_logging | boolean | No | - |
end_point_application_groups | EndPointApplicationGroupWrapperCollection | No | - |
end_point_application_threat_levels | ThreatLevelEnumCollection | No | - |
end_point_applications | EndPointApplicationLiteWrapperCollection | No | - |
exclude_context_shield_end_point | boolean | No | - |
groups | EntityReferenceWrapperCollection | No | - |
id | integer | No | - |
labels | EntityReferenceWrapperCollection | No | - |
last_modified_by | EntityReference | No | - |
last_modified_time | integer | No | - |
location_groups | EntityReferenceWrapperCollection | No | - |
locations | EntityReferenceWrapperCollection | No | - |
name | string | Yes | - |
nw_service_groups | EntityReferenceWrapperCollection | No | - |
nw_services | EntityReferenceWrapperCollection | No | - |
order | integer | No | - |
predefined | boolean | No | - |
rank | integer | Yes | - |
redirect_fqdn | string | No | - |
redirect_ip | string | No | - |
redirect_port | integer | No | - |
res_categories | FirewallUrlCategoryWrapperCollection | No | - |
res_groups | EntityReferenceWrapperCollection | No | - |
source_countries | DestCountriesEnumCollection | No | - |
src_ip_groups | EntityReferenceWrapperCollection | No | - |
src_ips | stringCollection | No | - |
src_ipv6_groups | EntityReferenceWrapperCollection | No | - |
state | string | No | - |
template_synced_rule_flag | string | No | - |
time_windows | EntityReferenceWrapperCollection | No | - |
trusted_resolver_rule | boolean | No | - |
users | EntityReferenceWrapperCollection | No | - |
Related
- DnatRule - Data structure definition
- Logging guide - enable verbose logs while debugging this resource