TQL Fields For Device Viewer

The following fields are available via TQL.

All Fields

Field Name Description Values / Format
excludedForViolation Device is excluded from violations, due to an appropriate USP exception true, false
model Device model

ACI, ACI_TENANT, ARISTA_CVP, ARISTA_EOS, ASA, AWS_ACCOUNT, AWS_GATEWAY_LOAD_BALANCER, AWS_TRANSIT_GATEWAY, AZURE_ACCOUNT, AZURE_FIREWALL, AZURE_LOAD_BALANCER, AZURE_POLICY, AZURE_ROOT_POLICY, AZURE_VHUB, AZURE_VNET, AZURE_VWAN, BIG_IP, CMA, FMC, FORTIGATE, FORTIMANAGER, FTD, GCP_PROJECT, GCP_VPC, IOS_XE_SDWAN, MDS, MERAKI_ACCOUNT, MERAKI_NETWORK, MERAKI_ORGANIZATION, MX, NETSCREEN, NETSCREEN_CLUSTER, NEXUS, PANORAMA, PANOS, ROUTER, SMART_CENTER, SMART_ONE, SRX, STONESOFT, UNKNOWN, VMWARE_CLOUD_ON_AWS, VMWARE_NSX_DISTRIBUTED_FIREWALL, VMWARE_NSX_EDGE, VMWARE_NSX_GATEWAY_FIREWALL, VMWARE_NSX_LOGICAL_ROUTER, VMWARE_NSX_MANAGEMENT, ZSCALER_INTERNET_ACCESS

domain.name

The name of the domain to which the device has been assigned

String

name Device name String
protectionMode Violation calculation mode CONNECTED_ ZONES, ROUTABLE_ZONES
deviceType Device type

CLOUD_VIRTUAL_NETWORK, CLUSTER, FIREWALL, FIREWALL_GLOBAL_CONTEXT, FIREWALL_VIRTUAL_CONTEXT, MANAGEMENT, MANAGEMENT_DOMAIN, MANAGEMENT_GLOBAL_DOMAIN

vendor Device vendor

AMAZON, ARISTA, BARRACUDA, CHECKPOINT, CISCO, F5, FORCEPOINT, FORTINET, GOOGLE, JUNIPER, MICROSOFT, PALO_ALTO, VMWARE, UNKNOWN, ZSCALER

Sort Fields

Fields than can be used with the 'order by' operator.

  • model
  • name
  • vendor

Query Examples

  • List firewall devices from specified vendors only.

    name = 'firewall-01' and vendor in ('FORTINET', 'CHECKPOINT')

  • List certain models only.

    model in ('FORTIGATE', 'FORTIMANAGER')