TQL Fields For Device Viewer

The following fields are available via TQL.

All Fields

Field Name Description Values / Format
excludedForViolation Device is excluded from violations, due to an appropriate USP exception true, false
model Device model

ASA, AWS, AWS_VPC, AZURE_ACCOUNT, AZURE_VNET, CMA, FORTIGATE, FORTIMANAGER, GCP_PROJECT, GCP_VPC, MDS, NEXUS, PANORAMA, PANOS, ROUTER, SMART_CENTER, VMWARE_NSX_DISTRIBUTED_FIREWALL,VMWARE_NSX_EDGE, VMWARE_NSX_MANAGEMENT, UNKNOWN

domain.name

The name of the domain to which the device has been assigned

String

name Device name String
protectionMode Violation calculation mode CONNECTED_ ZONES, ROUTABLE_ZONES
deviceType Device type

CLOUD_VIRTUAL_NETWORK, CLUSTER, FIREWALL, FIREWALL_GLOBAL_CONTEXT, FIREWALL_VIRTUAL_CONTEXT, MANAGEMENT, MANAGEMENT_DOMAIN, MANAGEMENT_GLOBAL_DOMAIN

vendor Device vendor

AMAZON, BARRACUDA, CHECKPOINT, CISCO, FORTINET, GOOGLE, MICROSOFT, PALO_ALTO, VMWARE, UNKNOWN

Sort Fields

Fields than can be used with the 'order by' operator.

  • model
  • name
  • vendor

Query Examples

  • List firewall devices from specified vendors only.

    device.name = 'firewall-01' and vendor in ('FORTINET', 'CHECKPOINT')

  • List certain models only.

    device.model in ('FORTIGATE', 'FORTIMANAGER')