TQL Fields For Device Viewer

The following fields are available via TQL.

All Fields

Field Name	Description	Values / Format
excludedForViolation	Device is excluded from violations, due to an appropriate USP exception	true, false
model	Device model	ASA, AWS, AWS_VPC, AZURE_ACCOUNT, AZURE_VNET, CMA, FORTIGATE, FORTIMANAGER, GCP_PROJECT, GCP_VPC, MDS, NEXUS, PANORAMA, PANOS, ROUTER, SMART_CENTER, VMWARE_NSX_DISTRIBUTED_FIREWALL,VMWARE_NSX_EDGE, VMWARE_NSX_MANAGEMENT, UNKNOWN
domain.name	The name of the domain to which the device has been assigned	String
name	Device name	String
protectionMode	Violation calculation mode	CONNECTED_ ZONES, ROUTABLE_ZONES
deviceType	Device type	CLOUD_VIRTUAL_NETWORK, CLUSTER, FIREWALL, FIREWALL_GLOBAL_CONTEXT, FIREWALL_VIRTUAL_CONTEXT, MANAGEMENT, MANAGEMENT_DOMAIN, MANAGEMENT_GLOBAL_DOMAIN
vendor	Device vendor	AMAZON, BARRACUDA, CHECKPOINT, CISCO, FORTINET, GOOGLE, MICROSOFT, PALO_ALTO, VMWARE, UNKNOWN
version	Device version	String

Sort Fields

Fields than can be used with the 'order by' operator.

• model
• name
• vendor

Query Examples

• List firewall devices from specified vendors only.

  device.name = 'FIREWALL' and vendor in ('FORTINET', 'CHECKPOINT')

• List certain models only.

  device.model in ('FORTIGATE', 'FORTIMANAGER')