TQL Fields For Device Viewer

The following fields are available via TQL.

All fields

Field Name Description Values / Format

deviceType

Device type.

CLOUD_VIRTUAL_NETWORK, CLUSTER, FIREWALL, FIREWALL_GLOBAL_CONTEXT, FIREWALL_VIRTUAL_CONTEXT, MANAGEMENT, MANAGEMENT_DOMAIN, MANAGEMENT_GLOBAL_DOMAIN

domain.name

The name of the domain to which the device has been assigned.

String

excludedForViolation

Device is excluded from violations, due to an appropriate USP exception.

true, false

id

The unique internal identifier for the device.

String

model

Device model.

Auto-complete field. Start typing to see options

name

Device name.

String

protectionMode

Violation calculation mode.

CONNECTED_ ZONES, ROUTABLE_ZONES

vendor

Device vendor.

  • Up to version 5.2: Autocomplete displays all supported vendors.

  • Version 5.3 and later: Autocomplete displays only vendors, including OPM vendors, for which devices have been onboarded.
    Vendors for which no devices have been onboarded are not included.

Sort fields

Fields than can be used with the 'order by' operator.

  • model
  • name
  • vendor

Query examples

  • List firewall devices from specified vendors only.

    name = 'firewall-01' and vendor in ('FORTINET', 'CHECKPOINT')

  • List certain models only.

    model in ('FORTIGATE', 'FORTIMANAGER')