TQL Fields For Device Viewer

The following fields are available via TQL.

All Fields

Field Name Description Values / Format
deviceType Device type.

CLOUD_VIRTUAL_NETWORK, CLUSTER, FIREWALL, FIREWALL_GLOBAL_CONTEXT, FIREWALL_VIRTUAL_CONTEXT, MANAGEMENT, MANAGEMENT_DOMAIN, MANAGEMENT_GLOBAL_DOMAIN

domain.name

The name of the domain to which the device has been assigned.

String
excludedForViolation Device is excluded from violations, due to an appropriate USP exception. true, false

id

The unique internal identifier for the device.

String
model Device model.

ACI, ACI_TENANT, ARISTA_CVP, ARISTA_EOS, ASA, AWS_ACCOUNT, AWS_GATEWAY_LOAD_BALANCER, AWS_TRANSIT_GATEWAY, AZURE_ACCOUNT, AZURE_FIREWALL, AZURE_LOAD_BALANCER, AZURE_POLICY, AZURE_ROOT_POLICY, AZURE_VHUB, AZURE_VNET, AZURE_VWAN, BIG_IP, CMA, FMC, FORTIGATE, FORTIMANAGER, FTD, GCP_PROJECT, GCP_VPC, IOS_XE_SDWAN, MDS, MERAKI_ACCOUNT, MERAKI_NETWORK, MERAKI_ORGANIZATION, MX, NETSCREEN, NETSCREEN_CLUSTER, NEXUS, PANORAMA, PANOS, ROUTER, SMART_CENTER, SMART_ONE, SRX, STONESOFT, UNKNOWN, VMWARE_CLOUD_ON_AWS, VMWARE_NSX_DISTRIBUTED_FIREWALL, VMWARE_NSX_EDGE, VMWARE_NSX_GATEWAY_FIREWALL, VMWARE_NSX_LOGICAL_ROUTER, VMWARE_NSX_MANAGEMENT, ZSCALER_INTERNET_ACCESS
name Device name. String
protectionMode Violation calculation mode. CONNECTED_ ZONES, ROUTABLE_ZONES
vendor Device vendor.

AMAZON, ARISTA, BARRACUDA, CHECKPOINT, CISCO, F5, FORCEPOINT, FORTINET, GOOGLE, JUNIPER, MICROSOFT, PALO_ALTO, VMWARE, UNKNOWN, ZSCALER

Sort Fields

Fields than can be used with the 'order by' operator.

  • model
  • name
  • vendor

Query Examples

  • List firewall devices from specified vendors only.

    name = 'firewall-01' and vendor in ('FORTINET', 'CHECKPOINT')

  • List certain models only.

    model in ('FORTIGATE', 'FORTIMANAGER')