NETWORK object

Key name

Value type

Title

Required

Possible values

APP_PROTO

Object

Network protocol filtering settings.

Yes

-

filtered_protos

Object

Object containing information about network protocol filtering

Yes

-

ftp

Literal

FTP protocol filtering

Yes

true: protocol filtering enabled; false: protocol filtering disabled.

http

Literal

HTTP/HTTPS protocol filtering

Yes

imap

Literal

IMAP protocol filtering

Yes

modbus

Literal

Modbus protocol filtering

Yes

mqtt

Literal

MQTT protocol filtering

Only MQTT protocol version 3.1.1 filtering is supported.

Yes

pop3

Literal

POP3 protocol filtering

Yes

smtp

Literal

SMTP protocol filtering

Only basic SMTP protocol filtering is supported.

Yes

CARP

Object

Network cluster settings.

Yes

-

advskew

Integer

Priority of Kaspersky IoT Secure Gateway 1000 in the cluster

Yes

From 0 to 254, where 0 is the maximum priority and 254 is the minimum priority.

clusterId

String

Cluster identifier. This is required for cluster nodes to uniquely recognize each other.

The use of the ID does not guarantee protection against the actions of third parties. When setting up the network, you also need to secure the cluster network loop.

Yes

Cluster identifier.

To avoid ID overlap, we recommend specifying a custom clusterId value.

enabled

Literal

Enables or disables the network cluster.

Yes

true: network cluster enabled; false: network cluster disabled.

ip

String

Cluster IP address.

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "ip": "192.168.110.120"

mask

String

Cluster subnet mask.

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "mask": "255.255.255.0"

FIREWALL

Object

Firewall rules.

Yes

-

rules

Object list

List of firewall rules. The maximum size of the list is 512 objects.

Yes

-

status

Literal

Enables or disables firewall rules.

Yes, if rules contains at least one record

true: the rule is on; false: the rule is off.

action

String

Rule type

accept: allow rule; deny: deny rule.

ipAddrSource

String

Source IP address.

String formatted as XXX.XXX.XXX.XXX, for example: "ipAddrSource": "192.168.110.125"

ipAddrDest

String

Destination IP address.

String formatted as XXX.XXX.XXX.XXX, for example: "ipAddrDest": "192.168.110.126"

portSource

String

Source port

Number that defines the source port

portDest

String

Target port

Number that defines the target port

protocol

String

Communication protocol

Available rule options: any, icmp, tcp, udp

zone

String

Rule scope

Available rule options: In, Out

IDS_PROXY

Object

Settings for address denylists and allowlists Used only if Kaspersky IoT Secure Gateway Network Protector is installed.

Yes

-

IPSFlag

Literal

Enables or disables address denylists and allowlists.

Yes

true: lists enabled; false: lists disabled

IPSStatusFlag

Literal

Flag that indicates the active status of address denylists and allowlists.

No

Always set to true

blockedList

Object list

List of denied addresses.

Yes

-

ipAddrSource

String

Denied IP address.

Yes, if blockedList contains at least one record

String formatted as XXX.XXX.XXX.XXX, for example: "ipAddrSource": "192.168.1.201"

timestamp

Date and time

Timestamp

POSIX timestamp

signatureName

String

Name of the signature that was blocked

Signature name

blockedListFlag

Literal

Enables or disables access to resources on the list of blocked addresses

Yes

true: access to resources disabled; false: access to resources enabled

allowList

Object list

Address allowlist.

Yes

-

ipAddrSource

String

Allowed IP address.

Yes, if allowList contains at least one record

String formatted as XXX.XXX.XXX.XXX, for example: "ipAddrSource": "192.168.1.200"

LAN

Object

Internal network settings.

Yes

-

DHCPFlag

Literal

Enables or disables automatically obtaining an IP address over DHCP.

Yes

true: automatic obtaining of an IP address enabled; false: automatic obtaining of an IP address disabled

FirstDHCPAddress

String

DHCP server primary IP address

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "FirstDHCPAddress": "192.168.1.20"

FirstDNSServer

String

DNS server primary IP address

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "FirstDNSServer": "192.168.1.20"

IP

String

Internal network adapter IP address

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "IP": "192.168.1.1"

LastDHCPAddress

String

DHCP server secondary IP address

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "LastDHCPAddress": "192.168.1.40"

MAC

String

Internal network adapter MAC address

No

String formatted as XX:XX:XX:XX:XX:XX, for example: "MAC": "1A:2B:3C:4D:5E:6F".

Mask

String

Internal network subnet mask

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "Mask": "255.255.255.0"

SecondDNSServer

String

DNS server secondary IP address

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "SecondDNSServer": "192.168.1.40"

NAPT

Object

Masquerading rules

Yes

-

rules

Object list

List of masquerading rules The maximum size of the list is 256 rules.

Yes

-

comment

String

Comments to the rule

Yes, if rules contains at least one record

Arbitrary string

ipAddrInternal

String

Internal network host IP address

String formatted as XXX.XXX.XXX.XXX, for example: "ipAddrInternal": "192.168.1.4"

portExternal

Integer

External port

Number that defines the external port

portInternal

Integer

Internal port

Number that defines the internal port

protocol

String

Rule protocol

Available rule options: tcp, udp

zone

String

Interface to which the rule is applied.

Available rule options: modem, wan

NAT

Object

Turns masquerading on or off.

Yes

-

masquerading

Literal

Yes

true: masquerading on; false: masquerading off

ROUTING_TABLE

Object

Routing table

Yes

-

routes

Object list

List of routes

Yes

-

action

String

Route action

Yes, if routes contains at least one record

add: add route; delete: delete route; no action; no action required

ipaddr

String

IP address.

Yes, if routes contains at least one record and the action key value is not equal to no action

String formatted as XXX.XXX.XXX.XXX, for example: "ipaddr": "192.168.2.1"

mask

String

Subnet mask.

String formatted as XXX.XXX.XXX.XXX, for example: "mask": "255.255.255.0"

gateway

String

Gateway IP address.

String formatted as XXX.XXX.XXX.XXX, for example: "gateway": "192.168.1.100"

state

String

Route status.

No

failed: an error occurred while performing an action on the route; active: the route is active; pending: no action is being performed on the route

type

String

Route type.

No

static: static route; dynamic: dynamic route

error

String

Error message

No

Message about an error that occurred while performing an action on the route

WAN

Object

External network settings.

Yes

-

DHCPFlag

Literal

Enables or disables automatically obtaining an IP address over DHCP.

Yes

true: automatic obtaining of an IP address enabled; false: automatic obtaining of an IP address disabled

DefaultGateway

String

IP address of the default gateway.

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "DefaultGateway": "192.168.1.111"

FirstDNSAddress

String

DNS server primary IP address

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "FirstDNSServer": "8.8.8.8"

IP

String

External network adapter IP address

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "IP": "192.168.1.1"

MAC

String

External network adapter MAC address

No

String formatted as XX:XX:XX:XX:XX:XX, for example: "MAC": "1A:2B:3C:4D:5E:6F".

Mask

String

External subnet mask

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "Mask": "255.255.255.0"

SecondDNSAddress

String

DNS server secondary IP address

Yes

String formatted as XXX.XXX.XXX.XXX, for example: "SecondDNSServer": "8.8.4.4"