{"resources":{"bigip":{"id":"bigip","name":"bigip","fields":{"certificate":{"name":"certificate","type":"\u001bbigip.certificate","title":"BIG-IP SSL certificate","desc":"An X.509 certificate installed on the device for use by SSL profiles. Exposes the key size and type, SHA-1 fingerprint, subject and subject alternative names, issuer, serial number, and expiration as both an epoch timestamp and a human-readable string. The primary object for auditing TLS certificate expiry and weak keys, for example `.where(keySize \u003c 2048)`.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"certificates":{"name":"certificates","type":"\u0019\u001bbigip.certificate","title":"SSL/TLS certificates installed in the certificate store","provider":"go.mondoo.com/cnquery/providers/bigip"},"clientSslProfile":{"name":"clientSslProfile","type":"\u001bbigip.clientSslProfile","title":"BIG-IP client SSL profile","desc":"TLS settings applied to traffic between clients and a virtual server: the server certificate, private key, and chain presented to clients, the permitted cipher string, SNI defaulting and enforcement, and SSL forward-proxy (outbound interception) settings. The primary object for auditing client-facing TLS posture, for example `bigip.clientSslProfiles.where(ciphers == \"DEFAULT\")` to find listeners that have not hardened their cipher string.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"clientSslProfiles":{"name":"clientSslProfiles","type":"\u0019\u001bbigip.clientSslProfile","title":"Client SSL profiles (BIG-IP-side TLS termination for incoming connections)","provider":"go.mondoo.com/cnquery/providers/bigip"},"dns":{"name":"dns","type":"\u001bbigip.dns","title":"DNS resolver configuration (name servers and search domains)","provider":"go.mondoo.com/cnquery/providers/bigip"},"interfaces":{"name":"interfaces","type":"\u0019\u001bbigip.netInterface","title":"Physical and virtual network interfaces on the device","provider":"go.mondoo.com/cnquery/providers/bigip"},"irule":{"name":"irule","type":"\u001bbigip.irule","title":"BIG-IP iRule","desc":"A TCL event script attached to virtual servers to customize traffic handling: HTTP redirects and header rewrites, content-based routing and pool selection, connection filtering, and inline security logic. The rule field holds the full script source (the iControl REST apiAnonymous body), which can be searched for insecure or unexpected logic such as hardcoded credentials or overly broad matches. Selected by fullPath, for example `bigip.irules.where(fullPath == \"/Common/_sys_https_redirect\")`.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"irules":{"name":"irules","type":"\u0019\u001bbigip.irule","title":"iRules (TCL traffic-management scripts) configured on the device","provider":"go.mondoo.com/cnquery/providers/bigip"},"key":{"name":"key","type":"\u001bbigip.key","title":"SSL private key installed on the BIG-IP","desc":"A private key stored in the system key store and paired with a certificate for use by client-ssl and server-ssl profiles. Exposes the key algorithm and size, the storage/protection class (normal software storage versus a FIPS card or network HSM), and the named curve for elliptic-curve keys. The primary object for auditing key strength and confirming that sensitive keys are hardware protected, for example `bigip.keys.where(securityType == \"normal\" \u0026\u0026 keySize \u003c 2048)` to find weak software-stored RSA keys.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"keys":{"name":"keys","type":"\u0019\u001bbigip.key","title":"SSL/TLS private keys installed in the key store","provider":"go.mondoo.com/cnquery/providers/bigip"},"monitor":{"name":"monitor","type":"\u001bbigip.monitor","title":"BIG-IP LTM health monitor","desc":"A health check that Local Traffic Manager runs against nodes and pool members to determine availability. Exposes the check type, interval and timeout, and for active application checks the send and expected-receive strings. The monitorType is derived from the parent monitor the check inherits from.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"monitors":{"name":"monitors","type":"\u0019\u001bbigip.monitor","title":"Local Traffic Manager health monitors","provider":"go.mondoo.com/cnquery/providers/bigip"},"netInterface":{"name":"netInterface","type":"\u001bbigip.netInterface","title":"BIG-IP network interface","desc":"A physical or management network interface on the device, with its administrative enabled state, MAC address, active media type, and MTU, for auditing which interfaces are up and their negotiated link settings.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"node":{"name":"node","type":"\u001bbigip.node","title":"BIG-IP LTM node","desc":"A backend server address known to Local Traffic Manager. A node is the address half of a pool member (address plus health monitor and load-balancing settings) and can be referenced by multiple pools. Selected by its partition-qualified fullPath. Use it to audit which backend addresses are reachable, their health-monitor assignment, and administrative or operational state.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"nodes":{"name":"nodes","type":"\u0019\u001bbigip.node","title":"Local Traffic Manager backend node addresses","provider":"go.mondoo.com/cnquery/providers/bigip"},"ntp":{"name":"ntp","type":"\u001bbigip.ntp","title":"NTP time-synchronization configuration","provider":"go.mondoo.com/cnquery/providers/bigip"},"pool":{"name":"pool","type":"\u001bbigip.pool","title":"BIG-IP LTM pool","desc":"A group of backend members that Local Traffic Manager load-balances traffic across. Exposes the load-balancing algorithm, assigned health monitors, NAT/SNAT permissions, and behavior when members go down, plus the member list. Selected by fullPath (for example `.where(fullPath == \"/Common/web_pool\")`). Use it to audit load-balancing configuration and member health.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"poolMember":{"name":"poolMember","type":"\u001bbigip.poolMember","title":"BIG-IP LTM pool member","desc":"A single backend endpoint (address and port) within a pool, together with its health-monitor assignment, priority group, ratio weight, and current session and operational state. Use it to audit which endpoints a pool forwards to and whether any are administratively disabled or failing health checks.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"pools":{"name":"pools","type":"\u0019\u001bbigip.pool","title":"Local Traffic Manager load-balancing pools","provider":"go.mondoo.com/cnquery/providers/bigip"},"provision":{"name":"provision","type":"\u001bbigip.provision","title":"BIG-IP provisioned module","desc":"Resource allocation for one licensed software module. Exposes the provisioning level and the CPU, disk, and memory ratios reserved for the module. Collected for the common modules ltm, asm, afm, gtm, apm, avr, and ilx; only modules the device responds for appear. Use it to confirm which modules are provisioned and how device resources are shared among them, for example `bigip.provisions.where(name == \"asm\" \u0026\u0026 level != \"none\")` to check that the application security module is enabled.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"provisions":{"name":"provisions","type":"\u0019\u001bbigip.provision","title":"Provisioned software modules and their resource allocation levels","provider":"go.mondoo.com/cnquery/providers/bigip"},"route":{"name":"route","type":"\u001bbigip.route","title":"BIG-IP network route","desc":"A static route in the TMM routing table, giving the destination network, the gateway it forwards to, MTU, and whether it is a blackhole route that silently drops matching traffic. The primary object for auditing static routing and confirming no unexpected default or blackhole routes exist.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"routeDomain":{"name":"routeDomain","type":"\u001bbigip.routeDomain","title":"BIG-IP route domain","desc":"An isolated routing table that lets overlapping IP address spaces coexist on one device. Exposes the numeric domain ID, whether strict isolation is enforced, and the VLANs assigned to the domain, for auditing multi-tenant network isolation.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"routeDomains":{"name":"routeDomains","type":"\u0019\u001bbigip.routeDomain","title":"Route domains that segment the device into isolated address spaces","provider":"go.mondoo.com/cnquery/providers/bigip"},"routes":{"name":"routes","type":"\u0019\u001bbigip.route","title":"Static network routes in the management and traffic route tables","provider":"go.mondoo.com/cnquery/providers/bigip"},"selfIp":{"name":"selfIp","type":"\u001bbigip.selfIp","title":"BIG-IP self IP","desc":"An IP address the device owns on a VLAN, used as the local endpoint for routing, health monitoring, and high-availability traffic. Exposes the address with CIDR, the VLAN it lives on, its traffic group, and whether it is a floating (shared) address, mapping the device's own network presence.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"selfIps":{"name":"selfIps","type":"\u0019\u001bbigip.selfIp","title":"Self IP addresses assigned to VLANs","provider":"go.mondoo.com/cnquery/providers/bigip"},"serverSslProfile":{"name":"serverSslProfile","type":"\u001bbigip.serverSslProfile","title":"BIG-IP server SSL profile","desc":"TLS settings applied to traffic between the virtual server and backend pool members: the client certificate and key the device presents to backends, the chain and cipher string, and how the backend server's certificate is authenticated. Use it to audit server-side TLS posture, including whether backend certificates are validated and how deep a chain is accepted, for example `bigip.serverSslProfiles.where(authenticate == \"once\")`.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"serverSslProfiles":{"name":"serverSslProfiles","type":"\u0019\u001bbigip.serverSslProfile","title":"Server SSL profiles (BIG-IP-side TLS toward pool members)","provider":"go.mondoo.com/cnquery/providers/bigip"},"snmp":{"name":"snmp","type":"\u001bbigip.snmp","title":"SNMP agent configuration (contact, location, and allowed managers)","provider":"go.mondoo.com/cnquery/providers/bigip"},"syslog":{"name":"syslog","type":"\u001bbigip.syslog","title":"Syslog remote-logging configuration","provider":"go.mondoo.com/cnquery/providers/bigip"},"system":{"name":"system","type":"\u001bbigip.system","title":"System identity, software version, platform, and licensed modules of the connected device","provider":"go.mondoo.com/cnquery/providers/bigip"},"trunk":{"name":"trunk","type":"\u001bbigip.trunk","title":"BIG-IP network trunk","desc":"A link aggregation group that bundles multiple physical interfaces into one logical link for bandwidth and redundancy. Exposes aggregated bandwidth, member count and interface list, LACP settings, and spanning-tree state, for auditing interface bonding and LACP configuration.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"trunks":{"name":"trunks","type":"\u0019\u001bbigip.trunk","title":"Link-aggregation trunks bonding physical interfaces","provider":"go.mondoo.com/cnquery/providers/bigip"},"virtualServer":{"name":"virtualServer","type":"\u001bbigip.virtualServer","title":"BIG-IP LTM virtual server","desc":"A listener that accepts client traffic on a destination address and port and applies profiles, iRules, source-address translation, and a default pool. The primary object for auditing external exposure: destination, IP protocol, enabled state, VLAN restriction, SNAT configuration, and attached SSL and other profiles. Selected by fullPath (for example `.where(fullPath == \"/Common/https_vs\")`).","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"virtualServerProfile":{"name":"virtualServerProfile","type":"\u001bbigip.virtualServerProfile","title":"BIG-IP virtual server profile association","desc":"The binding between a virtual server and one profile (SSL, TCP, HTTP, and so on), including the traffic-flow context the profile applies to. Use it to confirm which client-side or server-side SSL profile a virtual server uses.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"virtualServers":{"name":"virtualServers","type":"\u0019\u001bbigip.virtualServer","title":"Local Traffic Manager virtual servers (traffic listeners)","provider":"go.mondoo.com/cnquery/providers/bigip"},"vlan":{"name":"vlan","type":"\u001bbigip.vlan","title":"BIG-IP network VLAN","desc":"A layer-2 broadcast domain on the device, carrying its 802.1Q tag, MTU, and failsafe and source-checking settings. VLANs are referenced by self IPs and by virtual servers to scope where traffic is accepted, so they are the basis for auditing network segmentation and failsafe (loss-of-traffic) monitoring.","provider":"go.mondoo.com/cnquery/providers/bigip","is_implicit_resource":true},"vlans":{"name":"vlans","type":"\u0019\u001bbigip.vlan","title":"Layer 2 VLANs configured on the device","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"F5 BIG-IP","desc":"Configuration and state of an F5 BIG-IP application delivery and security device, read over its iControl REST management API. The resource groups the device into system information, Local Traffic Manager (LTM) objects (nodes, pools, virtual servers, monitors, iRules), network configuration (VLANs, self IPs, routes, trunks, route domains, interfaces), SSL material (certificates, keys, client and server SSL profiles), and management-plane settings (NTP, DNS, SNMP, syslog, provisioned modules). Use it to audit traffic exposure, TLS posture, certificate expiry, and hardening of the management plane.","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.certificate":{"id":"bigip.certificate","name":"bigip.certificate","fields":{"expirationDate":{"name":"expirationDate","type":"\u0005","is_mandatory":true,"title":"Expiration time as a Unix epoch timestamp, in seconds","provider":"go.mondoo.com/cnquery/providers/bigip"},"expirationString":{"name":"expirationString","type":"\u0007","is_mandatory":true,"title":"Expiration time as a human-readable date string","provider":"go.mondoo.com/cnquery/providers/bigip"},"fingerprint":{"name":"fingerprint","type":"\u0007","is_mandatory":true,"title":"SHA-1 fingerprint of the certificate","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path including partition (for example \"/Common/default.crt\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"isBundle":{"name":"isBundle","type":"\u0007","is_mandatory":true,"title":"Whether this object is a certificate bundle containing more than one certificate","desc":"One of \"true\" or \"false\".","provider":"go.mondoo.com/cnquery/providers/bigip"},"issuer":{"name":"issuer","type":"\u0007","is_mandatory":true,"title":"Distinguished name of the issuing certificate authority","provider":"go.mondoo.com/cnquery/providers/bigip"},"issuerCert":{"name":"issuerCert","type":"\u0007","is_mandatory":true,"title":"Name of the issuer certificate object on the device, when the issuing certificate is present locally","provider":"go.mondoo.com/cnquery/providers/bigip"},"keySize":{"name":"keySize","type":"\u0005","is_mandatory":true,"title":"Public key size in bits (for example 2048; below 2048 is considered weak for RSA)","provider":"go.mondoo.com/cnquery/providers/bigip"},"keyType":{"name":"keyType","type":"\u0007","is_mandatory":true,"title":"Public key algorithm","desc":"Algorithm of the certificate's public key, for example \"rsa-public\" for an RSA certificate or an EC value for an elliptic-curve certificate.","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Certificate name","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the certificate belongs to (for example \"Common\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Certificate serial number","provider":"go.mondoo.com/cnquery/providers/bigip"},"subject":{"name":"subject","type":"\u0007","is_mandatory":true,"title":"Distinguished name of the certificate subject (for example \"CN=www.example.com,O=Example\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"subjectAlternativeName":{"name":"subjectAlternativeName","type":"\u0007","is_mandatory":true,"title":"Subject alternative names on the certificate","desc":"The X.509 subjectAltName extension (RFC 5280), listing additional identities the certificate is valid for, such as DNS names or IP addresses. Empty when the certificate has no SAN extension.","provider":"go.mondoo.com/cnquery/providers/bigip"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"X.509 version number of the certificate (for example 3)","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP SSL certificate","desc":"An X.509 certificate installed on the device for use by SSL profiles. Exposes the key size and type, SHA-1 fingerprint, subject and subject alternative names, issuer, serial number, and expiration as both an epoch timestamp and a human-readable string. The primary object for auditing TLS certificate expiry and weak keys, for example `.where(keySize \u003c 2048)`.","defaults":"name expirationString","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.clientSslProfile":{"id":"bigip.clientSslProfile","name":"bigip.clientSslProfile","fields":{"cert":{"name":"cert","type":"\u0007","is_mandatory":true,"title":"Full path of the certificate presented to clients","provider":"go.mondoo.com/cnquery/providers/bigip"},"chain":{"name":"chain","type":"\u0007","is_mandatory":true,"title":"Full path of the certificate chain sent to clients","provider":"go.mondoo.com/cnquery/providers/bigip"},"ciphers":{"name":"ciphers","type":"\u0007","is_mandatory":true,"title":"Cipher string","desc":"OpenSSL-style cipher suite specification that constrains which cipher suites and protocol versions may be negotiated. The default value \"DEFAULT\" selects the system's built-in cipher set; a hardened deployment sets an explicit list. Central to TLS hardening audits.","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path (partition/name)","provider":"go.mondoo.com/cnquery/providers/bigip"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"Full path of the private key paired with the certificate","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Profile name","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the profile belongs to","provider":"go.mondoo.com/cnquery/providers/bigip"},"sniDefault":{"name":"sniDefault","type":"\u0007","is_mandatory":true,"title":"Whether this profile is the default when a client sends no SNI (\"true\" or \"false\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"sniRequire":{"name":"sniRequire","type":"\u0007","is_mandatory":true,"title":"Whether the client must send an SNI matching this profile (\"true\" or \"false\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"sslForwardProxy":{"name":"sslForwardProxy","type":"\u0007","is_mandatory":true,"title":"Whether SSL forward proxy (outbound TLS interception) is enabled (\"enabled\" or \"disabled\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"sslForwardProxyBypass":{"name":"sslForwardProxyBypass","type":"\u0007","is_mandatory":true,"title":"Whether SSL forward proxy may bypass interception for some traffic (\"enabled\" or \"disabled\")","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP client SSL profile","desc":"TLS settings applied to traffic between clients and a virtual server: the server certificate, private key, and chain presented to clients, the permitted cipher string, SNI defaulting and enforcement, and SSL forward-proxy (outbound interception) settings. The primary object for auditing client-facing TLS posture, for example `bigip.clientSslProfiles.where(ciphers == \"DEFAULT\")` to find listeners that have not hardened their cipher string.","defaults":"name","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.dns":{"id":"bigip.dns","name":"bigip.dns","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the DNS configuration","provider":"go.mondoo.com/cnquery/providers/bigip"},"nameServers":{"name":"nameServers","type":"\u0019\u0007","is_mandatory":true,"title":"IP addresses of the configured DNS name servers","provider":"go.mondoo.com/cnquery/providers/bigip"},"search":{"name":"search","type":"\u0019\u0007","is_mandatory":true,"title":"DNS search domains appended to unqualified hostnames","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP DNS configuration","desc":"System DNS resolver settings: the name servers the management plane queries and the search domains appended to unqualified lookups. Use it to confirm the device resolves names through expected DNS servers.","defaults":"nameServers","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.irule":{"id":"bigip.irule","name":"bigip.irule","fields":{"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path including partition (for example \"/Common/my_rule\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"iRule name","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the iRule belongs to (for example \"Common\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"rule":{"name":"rule","type":"\u0007","is_mandatory":true,"title":"Full TCL source code of the iRule","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP iRule","desc":"A TCL event script attached to virtual servers to customize traffic handling: HTTP redirects and header rewrites, content-based routing and pool selection, connection filtering, and inline security logic. The rule field holds the full script source (the iControl REST apiAnonymous body), which can be searched for insecure or unexpected logic such as hardcoded credentials or overly broad matches. Selected by fullPath, for example `bigip.irules.where(fullPath == \"/Common/_sys_https_redirect\")`.","defaults":"name","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.key":{"id":"bigip.key","name":"bigip.key","fields":{"curveName":{"name":"curveName","type":"\u0007","is_mandatory":true,"title":"Named elliptic curve for EC keys","desc":"One of \"prime256v1\", \"secp384r1\", or \"secp521r1\". Empty for non-EC (RSA or DSA) keys.","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path (partition/name)","provider":"go.mondoo.com/cnquery/providers/bigip"},"keySize":{"name":"keySize","type":"\u0005","is_mandatory":true,"title":"Key size in bits","desc":"For RSA and DSA keys one of 512, 1024, 2048, or 4096. For elliptic-curve keys the size is derived from the curve (256 for prime256v1, 384 for secp384r1, 521 for secp521r1). Values below 2048 for RSA are considered weak.","provider":"go.mondoo.com/cnquery/providers/bigip"},"keyType":{"name":"keyType","type":"\u0007","is_mandatory":true,"title":"Key algorithm","desc":"One of \"rsa-private\", \"ec-private\", or \"dsa-private\".","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Key name","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the key belongs to","provider":"go.mondoo.com/cnquery/providers/bigip"},"securityType":{"name":"securityType","type":"\u0007","is_mandatory":true,"title":"Security type","desc":"Storage and protection class of the private key. One of \"normal\" (unencrypted software storage), \"password\" (passphrase-encrypted software storage), \"fips\" (stored on a FIPS card), or \"nethsm\" (stored on a network HSM). FIPS and network-HSM keys are hardware protected and cannot be exported in the clear.","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"SSL private key installed on the BIG-IP","desc":"A private key stored in the system key store and paired with a certificate for use by client-ssl and server-ssl profiles. Exposes the key algorithm and size, the storage/protection class (normal software storage versus a FIPS card or network HSM), and the named curve for elliptic-curve keys. The primary object for auditing key strength and confirming that sensitive keys are hardware protected, for example `bigip.keys.where(securityType == \"normal\" \u0026\u0026 keySize \u003c 2048)` to find weak software-stored RSA keys.","defaults":"name keyType keySize","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.monitor":{"id":"bigip.monitor","name":"bigip.monitor","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form description configured for the monitor","provider":"go.mondoo.com/cnquery/providers/bigip"},"destination":{"name":"destination","type":"\u0007","is_mandatory":true,"title":"Monitor destination","desc":"Address and port the check targets, for example \"*:*\" to use each member's own address and port, or \"*:443\" to check a fixed port on each member's address. A concrete address and port targets a single endpoint (as with a gateway check).","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path (partition/name)","provider":"go.mondoo.com/cnquery/providers/bigip"},"interval":{"name":"interval","type":"\u0005","is_mandatory":true,"title":"Interval between consecutive checks, in seconds","provider":"go.mondoo.com/cnquery/providers/bigip"},"monitorType":{"name":"monitorType","type":"\u0007","is_mandatory":true,"title":"Monitor type","desc":"Kind of health check, derived from the last path segment of the parent monitor. Common values are \"icmp\" and \"gateway-icmp\" (address checks), \"tcp\", \"udp\", and \"tcp-half-open\" (service checks), \"http\" and \"https\" (content checks), and \"external\" (a user-supplied script). Other types include \"ldap\", \"mysql\", \"mssql\", \"oracle\", \"postgresql\", \"sip\", \"smtp\", \"radius\", \"diameter\", \"dns\", \"ftp\", \"snmp-dca\", and \"wmi\".","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Monitor name","provider":"go.mondoo.com/cnquery/providers/bigip"},"parentMonitor":{"name":"parentMonitor","type":"\u0007","is_mandatory":true,"title":"Full path of the parent monitor this monitor inherits defaults from (for example \"/Common/http\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the monitor belongs to","provider":"go.mondoo.com/cnquery/providers/bigip"},"receiveString":{"name":"receiveString","type":"\u0007","is_mandatory":true,"title":"Expected receive string","desc":"Response content that marks the check as successful. Matched as a plain substring or, for some monitor types, an expression against the response (for example \"200 OK\" or \"HTTP/1.1 200\"). Empty when no content match is required.","provider":"go.mondoo.com/cnquery/providers/bigip"},"sendString":{"name":"sendString","type":"\u0007","is_mandatory":true,"title":"Send string","desc":"Request payload the active check sends, for example an HTTP request line such as \"GET /health HTTP/1.1\\r\\n\\r\\n\". Empty for checks such as ICMP that send no application payload.","provider":"go.mondoo.com/cnquery/providers/bigip"},"timeout":{"name":"timeout","type":"\u0005","is_mandatory":true,"title":"Timeout, in seconds","desc":"Time without a successful response before the target is marked down. Conventionally set to (3 * interval) + 1 so that three missed checks trigger a down state.","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP LTM health monitor","desc":"A health check that Local Traffic Manager runs against nodes and pool members to determine availability. Exposes the check type, interval and timeout, and for active application checks the send and expected-receive strings. The monitorType is derived from the parent monitor the check inherits from.","defaults":"name monitorType","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.netInterface":{"id":"bigip.netInterface","name":"bigip.netInterface","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the interface is administratively enabled","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path of the interface (interfaces are not partitioned; typically the bare name)","provider":"go.mondoo.com/cnquery/providers/bigip"},"macAddress":{"name":"macAddress","type":"\u0007","is_mandatory":true,"title":"MAC address of the interface","provider":"go.mondoo.com/cnquery/providers/bigip"},"mediaActive":{"name":"mediaActive","type":"\u0007","is_mandatory":true,"title":"Active media type","desc":"Currently negotiated speed and duplex, for example \"10000T-FD\" for 10 Gbps full duplex or \"100TX-FD\" for 100 Mbps full duplex, or \"none\" when the link is down.","provider":"go.mondoo.com/cnquery/providers/bigip"},"mtu":{"name":"mtu","type":"\u0005","is_mandatory":true,"title":"Maximum transmission unit, in bytes","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Interface name (for example \"1.1\" for a data-plane port or \"mgmt\" for management)","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP network interface","desc":"A physical or management network interface on the device, with its administrative enabled state, MAC address, active media type, and MTU, for auditing which interfaces are up and their negotiated link settings.","defaults":"name macAddress","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.node":{"id":"bigip.node","name":"bigip.node","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"IP address (or FQDN-resolved address) of the backend node","provider":"go.mondoo.com/cnquery/providers/bigip"},"connectionLimit":{"name":"connectionLimit","type":"\u0005","is_mandatory":true,"title":"Connection limit","desc":"Maximum number of concurrent connections allowed to this node across all pools. 0 means unlimited.","provider":"go.mondoo.com/cnquery/providers/bigip"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form description configured for the node","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path (partition/name, for example \"/Common/web1\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"monitor":{"name":"monitor","type":"\u0007","is_mandatory":true,"title":"Health monitor assigned to the node","desc":"Full path of the monitor used to check node health, for example \"/Common/icmp\". \"default\" means the node inherits the default node monitor; empty or \"none\" means no node-level monitor is assigned.","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Node name (label assigned in the configuration, defaults to the IP address if unnamed)","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the node belongs to (for example \"Common\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"rateLimit":{"name":"rateLimit","type":"\u0007","is_mandatory":true,"title":"Rate limit for new connections per second (\"disabled\" when no rate limit is enforced)","provider":"go.mondoo.com/cnquery/providers/bigip"},"ratio":{"name":"ratio","type":"\u0005","is_mandatory":true,"title":"Ratio weight","desc":"Static weight used by the ratio-member and ratio-node load-balancing modes to proportion traffic across nodes. Higher values receive proportionally more connections.","provider":"go.mondoo.com/cnquery/providers/bigip"},"session":{"name":"session","type":"\u0007","is_mandatory":true,"title":"Session status","desc":"Administrative availability of the node. Values include \"user-enabled\" (administratively enabled), \"user-disabled\" (administratively disabled, takes no new connections), \"monitor-enabled\", and \"monitor-disabled\". This is the administrative half of node status; state is the monitored half.","provider":"go.mondoo.com/cnquery/providers/bigip"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Operational state","desc":"Current health of the node as determined by its monitor. Values include \"up\" (monitor passing), \"down\" (monitor failing), \"unchecked\" (no monitor assigned or check not yet run), \"checking\", \"user-down\" (forced down by an administrator), and \"forced-down\".","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP LTM node","desc":"A backend server address known to Local Traffic Manager. A node is the address half of a pool member (address plus health monitor and load-balancing settings) and can be referenced by multiple pools. Selected by its partition-qualified fullPath. Use it to audit which backend addresses are reachable, their health-monitor assignment, and administrative or operational state.","defaults":"name address","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.ntp":{"id":"bigip.ntp","name":"bigip.ntp","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the NTP configuration","provider":"go.mondoo.com/cnquery/providers/bigip"},"servers":{"name":"servers","type":"\u0019\u0007","is_mandatory":true,"title":"Addresses or hostnames of the configured upstream NTP servers","provider":"go.mondoo.com/cnquery/providers/bigip"},"timezone":{"name":"timezone","type":"\u0007","is_mandatory":true,"title":"Configured time zone (for example \"America/Los_Angeles\")","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP NTP configuration","desc":"System time synchronization settings: the configured upstream NTP servers and the device time zone. Use it to confirm the device syncs time from expected sources, which underpins accurate log timestamps, certificate validity checks, and time-based authentication.","defaults":"servers","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.pool":{"id":"bigip.pool","name":"bigip.pool","fields":{"allowNat":{"name":"allowNat","type":"\u0007","is_mandatory":true,"title":"Whether address translation (NAT) is allowed for connections to this pool (\"yes\" or \"no\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"allowSnat":{"name":"allowSnat","type":"\u0007","is_mandatory":true,"title":"Whether source address translation (SNAT) is allowed for connections to this pool (\"yes\" or \"no\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form description configured for the pool","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path (partition/name, for example \"/Common/web_pool\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"loadBalancingMode":{"name":"loadBalancingMode","type":"\u0007","is_mandatory":true,"title":"Load balancing mode","desc":"Algorithm used to distribute connections across pool members. One of round-robin (the default), ratio-member, ratio-node, ratio-session, ratio-least-connections-member, ratio-least-connections-node, least-connections-member, least-connections-node, weighted-least-connections-member, weighted-least-connections-node, least-sessions, observed-member, observed-node, predictive-member, predictive-node, dynamic-ratio-member, dynamic-ratio-node, fastest-node, or fastest-app-response. \"-member\" variants weigh per pool membership; \"-node\" variants weigh across all pools the node belongs to.","provider":"go.mondoo.com/cnquery/providers/bigip"},"members":{"name":"members","type":"\u0019\u001bbigip.poolMember","title":"Backend endpoints (address and port) that belong to this pool","provider":"go.mondoo.com/cnquery/providers/bigip"},"minActiveMembers":{"name":"minActiveMembers","type":"\u0005","is_mandatory":true,"title":"Minimum active members for priority-group activation","desc":"Threshold used with priority groups: while the number of available members in the highest-priority group is at least this value, traffic is confined to that group; when it drops below, the next-lower priority group is activated. 0 disables priority-group activation.","provider":"go.mondoo.com/cnquery/providers/bigip"},"minUpMembers":{"name":"minUpMembers","type":"\u0005","is_mandatory":true,"title":"Minimum up members","desc":"Threshold that, when the number of members in the up state falls below it, triggers the pool's min-up-members action (such as failover, reboot, or restarting all members). 0 disables this check.","provider":"go.mondoo.com/cnquery/providers/bigip"},"monitor":{"name":"monitor","type":"\u0007","is_mandatory":true,"title":"Health monitor(s) assigned to the pool","desc":"Full path of the monitor, or a rule combining several (for example \"/Common/http\" or \"min 1 of { /Common/http /Common/tcp }\"). Empty or \"none\" when the pool has no monitor and members are always considered up.","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Pool name","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the pool belongs to (for example \"Common\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"serviceDownAction":{"name":"serviceDownAction","type":"\u0007","is_mandatory":true,"title":"Service down action","desc":"Action taken on existing connections to a member when that member's service is marked down. One of \"none\" (default, leave connections in place), \"reset\" (send a TCP RST), \"drop\" (silently drop packets), or \"reselect\" (for Layer 4 connections, pick a new member for the next packet).","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP LTM pool","desc":"A group of backend members that Local Traffic Manager load-balances traffic across. Exposes the load-balancing algorithm, assigned health monitors, NAT/SNAT permissions, and behavior when members go down, plus the member list. Selected by fullPath (for example `.where(fullPath == \"/Common/web_pool\")`). Use it to audit load-balancing configuration and member health.","defaults":"name","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.poolMember":{"id":"bigip.poolMember","name":"bigip.poolMember","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"IP address of the member (the node address underlying this member)","provider":"go.mondoo.com/cnquery/providers/bigip"},"connectionLimit":{"name":"connectionLimit","type":"\u0005","is_mandatory":true,"title":"Connection limit","desc":"Maximum concurrent connections allowed to this member. 0 means unlimited.","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path (partition/name)","provider":"go.mondoo.com/cnquery/providers/bigip"},"monitor":{"name":"monitor","type":"\u0007","is_mandatory":true,"title":"Health monitor assigned to the member","desc":"Full path of a member-specific monitor. \"default\" means the member inherits the monitor from its pool; empty or \"none\" means no monitor override at the member level.","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Member name (address:port, for example \"10.0.0.5:80\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the member belongs to","provider":"go.mondoo.com/cnquery/providers/bigip"},"pool":{"name":"pool","type":"\u0007","is_mandatory":true,"title":"Full path of the pool this member belongs to","provider":"go.mondoo.com/cnquery/providers/bigip"},"priorityGroup":{"name":"priorityGroup","type":"\u0005","is_mandatory":true,"title":"Priority group number","desc":"Priority group this member belongs to. Higher-numbered groups are preferred; lower groups activate only when the higher group falls below the pool's minActiveMembers threshold.","provider":"go.mondoo.com/cnquery/providers/bigip"},"ratio":{"name":"ratio","type":"\u0005","is_mandatory":true,"title":"Ratio weight","desc":"Static weight used by the ratio-based load-balancing modes to proportion traffic across members within the pool.","provider":"go.mondoo.com/cnquery/providers/bigip"},"session":{"name":"session","type":"\u0007","is_mandatory":true,"title":"Session status","desc":"Administrative availability of the member. Values include \"user-enabled\", \"user-disabled\" (administratively disabled, takes no new connections), \"monitor-enabled\", and \"monitor-disabled\".","provider":"go.mondoo.com/cnquery/providers/bigip"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Operational state","desc":"Current health of the member as determined by its monitor. Values include \"up\", \"down\", \"unchecked\" (no monitor or not yet checked), \"checking\", \"user-down\" (forced down), and \"forced-down\".","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP LTM pool member","desc":"A single backend endpoint (address and port) within a pool, together with its health-monitor assignment, priority group, ratio weight, and current session and operational state. Use it to audit which endpoints a pool forwards to and whether any are administratively disabled or failing health checks.","defaults":"name address","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.provision":{"id":"bigip.provision","name":"bigip.provision","fields":{"cpuRatio":{"name":"cpuRatio","type":"\u0005","is_mandatory":true,"title":"Share of CPU reserved for the module","provider":"go.mondoo.com/cnquery/providers/bigip"},"diskRatio":{"name":"diskRatio","type":"\u0005","is_mandatory":true,"title":"Share of disk reserved for the module","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path of the provisioning object","provider":"go.mondoo.com/cnquery/providers/bigip"},"level":{"name":"level","type":"\u0007","is_mandatory":true,"title":"Provisioning level","desc":"Amount of resources reserved for the module: \"none\" (not provisioned), \"minimum\", \"nominal\", or \"dedicated\" (reserves all available resources for this one module).","provider":"go.mondoo.com/cnquery/providers/bigip"},"memoryRatio":{"name":"memoryRatio","type":"\u0005","is_mandatory":true,"title":"Share of memory reserved for the module","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Module name","desc":"Short module identifier: \"ltm\" (Local Traffic Manager), \"asm\" (Application Security Manager), \"afm\" (Advanced Firewall Manager), \"gtm\" (Global Traffic Manager / DNS), \"apm\" (Access Policy Manager), \"avr\" (Application Visibility and Reporting), or \"ilx\" (iRules LX).","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP provisioned module","desc":"Resource allocation for one licensed software module. Exposes the provisioning level and the CPU, disk, and memory ratios reserved for the module. Collected for the common modules ltm, asm, afm, gtm, apm, avr, and ilx; only modules the device responds for appear. Use it to confirm which modules are provisioned and how device resources are shared among them, for example `bigip.provisions.where(name == \"asm\" \u0026\u0026 level != \"none\")` to check that the application security module is enabled.","defaults":"name level","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.route":{"id":"bigip.route","name":"bigip.route","fields":{"blackhole":{"name":"blackhole","type":"\u0004","is_mandatory":true,"title":"Whether this is a blackhole route that discards matching traffic instead of forwarding it","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path including partition (for example \"/Common/default_route\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"gateway":{"name":"gateway","type":"\u0007","is_mandatory":true,"title":"Gateway IP address the route forwards matching traffic to","provider":"go.mondoo.com/cnquery/providers/bigip"},"mtu":{"name":"mtu","type":"\u0005","is_mandatory":true,"title":"Maximum transmission unit for the route, in bytes (0 when inherited from the egress VLAN)","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Route name","provider":"go.mondoo.com/cnquery/providers/bigip"},"network":{"name":"network","type":"\u0007","is_mandatory":true,"title":"Destination network in CIDR notation (for example \"10.0.0.0/8\", or \"default\" for the default route)","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the route belongs to (for example \"Common\")","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP network route","desc":"A static route in the TMM routing table, giving the destination network, the gateway it forwards to, MTU, and whether it is a blackhole route that silently drops matching traffic. The primary object for auditing static routing and confirming no unexpected default or blackhole routes exist.","defaults":"name network","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.routeDomain":{"id":"bigip.routeDomain","name":"bigip.routeDomain","fields":{"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path including partition (for example \"/Common/0\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Numeric route domain identifier","desc":"Appended to addresses as \"%id\" (for example \"10.0.0.1%1\"). Route domain 0 is the default domain.","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Route domain name","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the route domain belongs to (for example \"Common\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"strict":{"name":"strict","type":"\u0007","is_mandatory":true,"title":"Whether strict isolation is enforced","desc":"One of \"enabled\" (traffic cannot cross into other route domains) or \"disabled\" (traffic may be routed to parent route domains). Disabling strict isolation weakens multi-tenant separation.","provider":"go.mondoo.com/cnquery/providers/bigip"},"vlans":{"name":"vlans","type":"\u0019\u0007","is_mandatory":true,"title":"Full paths of the VLANs assigned to this route domain","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP route domain","desc":"An isolated routing table that lets overlapping IP address spaces coexist on one device. Exposes the numeric domain ID, whether strict isolation is enforced, and the VLANs assigned to the domain, for auditing multi-tenant network isolation.","defaults":"name id","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.selfIp":{"id":"bigip.selfIp","name":"bigip.selfIp","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"IP address with CIDR prefix (for example \"10.0.0.1/24\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"floating":{"name":"floating","type":"\u0007","is_mandatory":true,"title":"Whether this is a floating self IP shared across an HA pair","desc":"One of \"enabled\" (a floating address that only the active device answers on) or \"disabled\" (a non-floating address unique to this device).","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path including partition (for example \"/Common/internal-self\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Self IP name","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the self IP belongs to (for example \"Common\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"trafficGroup":{"name":"trafficGroup","type":"\u0007","is_mandatory":true,"title":"Traffic group that owns this self IP","desc":"Full path of the traffic group (for example \"/Common/traffic-group-1\"). Relevant for high-availability failover: a floating self IP moves with its traffic group to the active device.","provider":"go.mondoo.com/cnquery/providers/bigip"},"vlan":{"name":"vlan","type":"\u0007","is_mandatory":true,"title":"Full path of the VLAN this self IP is bound to (for example \"/Common/internal\")","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP self IP","desc":"An IP address the device owns on a VLAN, used as the local endpoint for routing, health monitoring, and high-availability traffic. Exposes the address with CIDR, the VLAN it lives on, its traffic group, and whether it is a floating (shared) address, mapping the device's own network presence.","defaults":"name address","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.serverSslProfile":{"id":"bigip.serverSslProfile","name":"bigip.serverSslProfile","fields":{"authenticate":{"name":"authenticate","type":"\u0007","is_mandatory":true,"title":"Certificate authentication frequency","desc":"How often the device authenticates the backend server's certificate during an SSL session. \"once\" (the default) authenticates only when the session is first established; \"always\" re-authenticates on each session reuse. Whether the certificate is required at all is governed separately by the peer-certificate mode.","provider":"go.mondoo.com/cnquery/providers/bigip"},"authenticateDepth":{"name":"authenticateDepth","type":"\u0005","is_mandatory":true,"title":"Maximum depth of the certificate chain the device traverses when validating the backend server's certificate (default 9)","provider":"go.mondoo.com/cnquery/providers/bigip"},"caFile":{"name":"caFile","type":"\u0007","is_mandatory":true,"title":"Full path of the CA bundle used to validate the backend server's certificate, empty when none is set","desc":"A \"require\" peer-certificate mode has nothing to validate against unless a bundle is configured here.","provider":"go.mondoo.com/cnquery/providers/bigip"},"cert":{"name":"cert","type":"\u0007","is_mandatory":true,"title":"Full path of the certificate the device presents to backend servers","provider":"go.mondoo.com/cnquery/providers/bigip"},"chain":{"name":"chain","type":"\u0007","is_mandatory":true,"title":"Full path of the certificate chain sent to backend servers","provider":"go.mondoo.com/cnquery/providers/bigip"},"ciphers":{"name":"ciphers","type":"\u0007","is_mandatory":true,"title":"Cipher string constraining which cipher suites and protocol versions are negotiated with backends","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path (partition/name)","provider":"go.mondoo.com/cnquery/providers/bigip"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"Full path of the private key paired with the certificate","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Profile name","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the profile belongs to","provider":"go.mondoo.com/cnquery/providers/bigip"},"peerCertMode":{"name":"peerCertMode","type":"\u0007","is_mandatory":true,"title":"Whether the backend server's certificate is required and validated","desc":"\"require\" makes the device demand a certificate from the backend and reject the connection when it does not validate. \"ignore\", which is the default, completes the handshake with whatever certificate the backend presents, including none. This is the setting that governs whether backend verification happens at all; `authenticate` only governs how often an already-required certificate is re-checked.","provider":"go.mondoo.com/cnquery/providers/bigip"},"serverName":{"name":"serverName","type":"\u0007","is_mandatory":true,"title":"Server name used for SNI when connecting to the backend, empty when none","provider":"go.mondoo.com/cnquery/providers/bigip"},"sniDefault":{"name":"sniDefault","type":"\u0007","is_mandatory":true,"title":"Whether this profile is the default when no SNI is sent (\"true\" or \"false\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"sniRequire":{"name":"sniRequire","type":"\u0007","is_mandatory":true,"title":"Whether a matching SNI is required (\"true\" or \"false\")","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP server SSL profile","desc":"TLS settings applied to traffic between the virtual server and backend pool members: the client certificate and key the device presents to backends, the chain and cipher string, and how the backend server's certificate is authenticated. Use it to audit server-side TLS posture, including whether backend certificates are validated and how deep a chain is accepted, for example `bigip.serverSslProfiles.where(authenticate == \"once\")`.","defaults":"name","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.snmp":{"id":"bigip.snmp","name":"bigip.snmp","fields":{"allowedAddresses":{"name":"allowedAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Client addresses or subnets (CIDR) permitted to query the device over SNMP","provider":"go.mondoo.com/cnquery/providers/bigip"},"sysContact":{"name":"sysContact","type":"\u0007","is_mandatory":true,"title":"System contact string reported over SNMP","provider":"go.mondoo.com/cnquery/providers/bigip"},"sysLocation":{"name":"sysLocation","type":"\u0007","is_mandatory":true,"title":"System location string reported over SNMP","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP SNMP configuration","desc":"SNMP management-plane settings: the system contact and location strings reported to SNMP managers, and the client addresses permitted to query the device over SNMP. Use it to audit management access, for example confirming allowedAddresses is not overly broad such as containing 0.0.0.0/0.","defaults":"sysContact sysLocation","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.syslog":{"id":"bigip.syslog","name":"bigip.syslog","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Minimum severity level at which authentication and privilege (auth/authpriv) messages are logged","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP syslog configuration","desc":"Remote logging settings for the device. The description field carries the configured minimum severity level for authentication and privilege (auth/authpriv) log messages. Use it to confirm the device captures authentication events for retention and monitoring.","defaults":"description","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.system":{"id":"bigip.system","name":"bigip.system","fields":{"activeModules":{"name":"activeModules","type":"\u0019\u0007","is_mandatory":true,"title":"Active licensed modules","desc":"Names of the software modules currently licensed and active on the device, for example \"LTM\" (Local Traffic Manager), \"ASM\" (Application Security Manager), \"AFM\" (Advanced Firewall Manager), \"APM\" (Access Policy Manager), or \"GTM\"/\"DNS\". Use it to confirm that expected security modules such as the application firewall are licensed and enabled.","provider":"go.mondoo.com/cnquery/providers/bigip"},"baseMac":{"name":"baseMac","type":"\u0007","is_mandatory":true,"title":"Base MAC address of the device (the factory-assigned MAC from which per-interface MACs are derived)","provider":"go.mondoo.com/cnquery/providers/bigip"},"build":{"name":"build","type":"\u0007","is_mandatory":true,"title":"Build number of the installed software image (identifies the exact point release or hotfix build)","provider":"go.mondoo.com/cnquery/providers/bigip"},"chassisId":{"name":"chassisId","type":"\u0007","is_mandatory":true,"title":"Chassis ID","desc":"Serial number of the chassis or, on a Virtual Edition, the generated unique appliance identifier. Also used as the system resource cache key.","provider":"go.mondoo.com/cnquery/providers/bigip"},"chassisType":{"name":"chassisType","type":"\u0007","is_mandatory":true,"title":"Chassis type (for example \"individual\" for a standalone unit or \"cluster\" for a multi-blade chassis)","provider":"go.mondoo.com/cnquery/providers/bigip"},"contact":{"name":"contact","type":"\u0007","is_mandatory":true,"title":"Administrative contact string for the device (name or email of the responsible administrator)","provider":"go.mondoo.com/cnquery/providers/bigip"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form administrative description configured for the device","provider":"go.mondoo.com/cnquery/providers/bigip"},"edition":{"name":"edition","type":"\u0007","is_mandatory":true,"title":"Software edition string","desc":"Release qualifier for the installed image, such as a point-release or engineering-hotfix label (for example \"Point Release 3\"). Empty on a base release with no hotfix applied.","provider":"go.mondoo.com/cnquery/providers/bigip"},"failoverState":{"name":"failoverState","type":"\u0007","is_mandatory":true,"title":"Failover state","desc":"High-availability role of this device in its traffic group, typically \"active\" (currently serving traffic) or \"standby\". Relevant when auditing a device pair to know which unit is live and to detect a split-brain or unexpectedly standby primary.","provider":"go.mondoo.com/cnquery/providers/bigip"},"hostname":{"name":"hostname","type":"\u0007","is_mandatory":true,"title":"Configured hostname of the device (fully qualified, for example \"bigip1.example.com\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Device location string (physical or logical location, as configured in system settings)","provider":"go.mondoo.com/cnquery/providers/bigip"},"managementIp":{"name":"managementIp","type":"\u0007","is_mandatory":true,"title":"Management IP address the device is administered on (the out-of-band or dedicated management-plane address)","provider":"go.mondoo.com/cnquery/providers/bigip"},"marketingName":{"name":"marketingName","type":"\u0007","is_mandatory":true,"title":"Marketing name of the platform (for example \"BIG-IP Virtual Edition\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Device object name as it appears in the device group (often equal to the hostname)","provider":"go.mondoo.com/cnquery/providers/bigip"},"optionalModules":{"name":"optionalModules","type":"\u0019\u0007","is_mandatory":true,"title":"Optional (unlicensed) modules","desc":"Names of software modules that are supported on the platform but not currently licensed, and therefore unavailable until a license is added.","provider":"go.mondoo.com/cnquery/providers/bigip"},"platformId":{"name":"platformId","type":"\u0007","is_mandatory":true,"title":"Platform ID","desc":"Short model identifier of the hardware or virtual platform, for example \"Z100\" for a Virtual Edition or a hardware code such as \"C124\". Pairs with marketingName for a human-readable model.","provider":"go.mondoo.com/cnquery/providers/bigip"},"product":{"name":"product","type":"\u0007","is_mandatory":true,"title":"Product name (for example \"BIG-IP\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"timeZone":{"name":"timeZone","type":"\u0007","is_mandatory":true,"title":"Device time zone (IANA zone name, for example \"America/Los_Angeles\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"BIG-IP software version","desc":"TMOS release of the installed software, for example \"17.1.0\". Compare against F5 end-of-life and known-vulnerability advisories to flag devices running unsupported or outdated releases.","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP system information","desc":"Identity, software, and hardware facts about the connected device: hostname, software version and build, platform model, chassis serial number, base MAC, management IP, high-availability failover state, and the set of licensed and optional software modules. Use it to fingerprint the device for version and end-of-life checks and to confirm which modules are licensed.","defaults":"hostname version platformId","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.trunk":{"id":"bigip.trunk","name":"bigip.trunk","fields":{"bandwidth":{"name":"bandwidth","type":"\u0005","is_mandatory":true,"title":"Aggregate bandwidth of the currently active member links, in Mbps","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path of the trunk (trunks are not partitioned; typically the bare name)","provider":"go.mondoo.com/cnquery/providers/bigip"},"interfaces":{"name":"interfaces","type":"\u0019\u0007","is_mandatory":true,"title":"Names of the physical interfaces that are members of the trunk (for example \"1.1\", \"1.2\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"lacp":{"name":"lacp","type":"\u0007","is_mandatory":true,"title":"Whether LACP (link aggregation control protocol) is enabled","desc":"One of \"enabled\" (negotiate aggregation dynamically with the peer via LACP) or \"disabled\" (static aggregation with no negotiation).","provider":"go.mondoo.com/cnquery/providers/bigip"},"lacpMode":{"name":"lacpMode","type":"\u0007","is_mandatory":true,"title":"LACP mode","desc":"How this device participates in LACP negotiation. One of \"active\" (sends LACP packets to start negotiation) or \"passive\" (only responds to received LACP packets).","provider":"go.mondoo.com/cnquery/providers/bigip"},"lacpTimeout":{"name":"lacpTimeout","type":"\u0007","is_mandatory":true,"title":"LACP timeout for detecting a failed peer","desc":"How quickly a down peer link is detected. One of \"short\" (fast, peer considered down after 3 seconds) or \"long\" (slow, peer considered down after 90 seconds).","provider":"go.mondoo.com/cnquery/providers/bigip"},"linkSelectPolicy":{"name":"linkSelectPolicy","type":"\u0007","is_mandatory":true,"title":"Link selection policy","desc":"How member links are chosen to carry traffic. One of \"auto\" (the device selects the set of working links) or \"maximum-bandwidth\" (favors the combination of links yielding the highest aggregate bandwidth).","provider":"go.mondoo.com/cnquery/providers/bigip"},"macAddress":{"name":"macAddress","type":"\u0007","is_mandatory":true,"title":"MAC address assigned to the trunk","provider":"go.mondoo.com/cnquery/providers/bigip"},"memberCount":{"name":"memberCount","type":"\u0005","is_mandatory":true,"title":"Number of interfaces configured as members of the trunk","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Trunk name","provider":"go.mondoo.com/cnquery/providers/bigip"},"stp":{"name":"stp","type":"\u0007","is_mandatory":true,"title":"Whether spanning tree protocol is enabled on the trunk","desc":"One of \"enabled\" or \"disabled\".","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP network trunk","desc":"A link aggregation group that bundles multiple physical interfaces into one logical link for bandwidth and redundancy. Exposes aggregated bandwidth, member count and interface list, LACP settings, and spanning-tree state, for auditing interface bonding and LACP configuration.","defaults":"name","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.virtualServer":{"id":"bigip.virtualServer","name":"bigip.virtualServer","fields":{"connectionLimit":{"name":"connectionLimit","type":"\u0005","is_mandatory":true,"title":"Connection limit","desc":"Maximum concurrent connections the virtual server accepts. 0 means unlimited.","provider":"go.mondoo.com/cnquery/providers/bigip"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form description configured for the virtual server","provider":"go.mondoo.com/cnquery/providers/bigip"},"destination":{"name":"destination","type":"\u0007","is_mandatory":true,"title":"Destination the virtual server listens on","desc":"Partition-qualified address (or virtual-address object) and port the listener accepts traffic on, for example \"/Common/10.0.0.1:443\". A wildcard address (0.0.0.0) or port (0) indicates a network or any-port virtual server with broader reach.","provider":"go.mondoo.com/cnquery/providers/bigip"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the virtual server is administratively enabled and accepting traffic","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path (partition/name, for example \"/Common/https_vs\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"ipProtocol":{"name":"ipProtocol","type":"\u0007","is_mandatory":true,"title":"IP protocol","desc":"Layer 4 protocol the virtual server accepts, for example \"tcp\", \"udp\", \"sctp\", or \"any\" (all protocols). \"any\" combined with a wildcard destination indicates a forwarding or network virtual server.","provider":"go.mondoo.com/cnquery/providers/bigip"},"mask":{"name":"mask","type":"\u0007","is_mandatory":true,"title":"Network mask applied to the destination address (defines the network for a network virtual server)","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Virtual server name","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the virtual server belongs to","provider":"go.mondoo.com/cnquery/providers/bigip"},"pool":{"name":"pool","type":"\u0007","is_mandatory":true,"title":"Full path of the default pool this virtual server forwards to, empty when it has no default pool (for example a forwarding or reject virtual server)","provider":"go.mondoo.com/cnquery/providers/bigip"},"profiles":{"name":"profiles","type":"\u0019\u001bbigip.virtualServerProfile","title":"Profile associations (SSL, TCP, HTTP, and other profiles) bound to this virtual server","provider":"go.mondoo.com/cnquery/providers/bigip"},"rules":{"name":"rules","type":"\u0019\u0007","is_mandatory":true,"title":"Full paths of the iRules attached to this virtual server, in evaluation order","provider":"go.mondoo.com/cnquery/providers/bigip"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source address filter","desc":"CIDR of client source addresses the listener accepts. \"0.0.0.0/0\" (the default) accepts any source; a narrower prefix restricts who can reach the virtual server.","provider":"go.mondoo.com/cnquery/providers/bigip"},"sourceAddressTranslationPool":{"name":"sourceAddressTranslationPool","type":"\u0007","is_mandatory":true,"title":"Full path of the SNAT (or LSN) pool used when the translation type is \"snat\" or \"lsn\", empty otherwise","provider":"go.mondoo.com/cnquery/providers/bigip"},"sourceAddressTranslationType":{"name":"sourceAddressTranslationType","type":"\u0007","is_mandatory":true,"title":"Source address translation type","desc":"How client source addresses are translated toward pool members. One of \"none\" (preserve the client address, requires the BIG-IP to be the return path), \"automap\" (translate to a self IP of the egress VLAN), \"snat\" (use the SNAT pool named in sourceAddressTranslationPool), or \"lsn\" (use a large-scale NAT pool).","provider":"go.mondoo.com/cnquery/providers/bigip"},"translateAddress":{"name":"translateAddress","type":"\u0007","is_mandatory":true,"title":"Destination address translation state","desc":"\"enabled\" or \"disabled\". \"disabled\" indicates a forwarding virtual server that leaves the destination address intact.","provider":"go.mondoo.com/cnquery/providers/bigip"},"translatePort":{"name":"translatePort","type":"\u0007","is_mandatory":true,"title":"Whether destination port translation is enabled (\"enabled\" or \"disabled\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"vlans":{"name":"vlans","type":"\u0019\u0007","is_mandatory":true,"title":"Full paths of the VLANs this virtual server is restricted to or excluded from, interpreted according to vlansEnabled","provider":"go.mondoo.com/cnquery/providers/bigip"},"vlansEnabled":{"name":"vlansEnabled","type":"\u0004","is_mandatory":true,"title":"VLAN restriction mode","desc":"When true the virtual server listens only on the VLANs listed in vlans; when false those VLANs are excluded and it listens on all others. A virtual server with an empty vlans list listens on all VLANs and is more broadly exposed.","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP LTM virtual server","desc":"A listener that accepts client traffic on a destination address and port and applies profiles, iRules, source-address translation, and a default pool. The primary object for auditing external exposure: destination, IP protocol, enabled state, VLAN restriction, SNAT configuration, and attached SSL and other profiles. Selected by fullPath (for example `.where(fullPath == \"/Common/https_vs\")`).","defaults":"name destination","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.virtualServerProfile":{"id":"bigip.virtualServerProfile","name":"bigip.virtualServerProfile","fields":{"context":{"name":"context","type":"\u0007","is_mandatory":true,"title":"Profile context","desc":"Side of the connection the profile applies to: \"clientside\" (traffic between the client and the BIG-IP), \"serverside\" (BIG-IP to pool member), or \"all\" (both sides). For SSL profiles this distinguishes a client SSL profile (TLS termination) from a server SSL profile (re-encryption to the backend).","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path of the profile (partition/name)","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Profile name","provider":"go.mondoo.com/cnquery/providers/bigip"},"virtualServer":{"name":"virtualServer","type":"\u0007","is_mandatory":true,"title":"Full path of the virtual server this profile is associated with","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP virtual server profile association","desc":"The binding between a virtual server and one profile (SSL, TCP, HTTP, and so on), including the traffic-flow context the profile applies to. Use it to confirm which client-side or server-side SSL profile a virtual server uses.","defaults":"name context","provider":"go.mondoo.com/cnquery/providers/bigip"},"bigip.vlan":{"id":"bigip.vlan","name":"bigip.vlan","fields":{"autoLastHop":{"name":"autoLastHop","type":"\u0007","is_mandatory":true,"title":"Auto last hop setting","desc":"Whether replies are returned via the interface the request arrived on, regardless of the routing table. One of \"enabled\", \"disabled\", or \"default\" (inherit the global device setting).","provider":"go.mondoo.com/cnquery/providers/bigip"},"failsafe":{"name":"failsafe","type":"\u0007","is_mandatory":true,"title":"Whether VLAN failsafe monitoring is enabled","desc":"Loss-of-traffic detection on the VLAN. One of \"enabled\" or \"disabled\". When enabled, the device takes failsafeAction if no traffic is seen on the VLAN within failsafeTimeout.","provider":"go.mondoo.com/cnquery/providers/bigip"},"failsafeAction":{"name":"failsafeAction","type":"\u0007","is_mandatory":true,"title":"Failsafe action","desc":"Action taken when VLAN failsafe triggers. One of \"failover\" (fail over to another HA device group member), \"failover-restart-tm\" (fail over and restart the Traffic Management Microkernel), \"reboot\" (reboot the device), or \"restart-all\" (restart all system services). The default is \"reboot\".","provider":"go.mondoo.com/cnquery/providers/bigip"},"failsafeTimeout":{"name":"failsafeTimeout","type":"\u0005","is_mandatory":true,"title":"Time without traffic before failsafe triggers, in seconds","provider":"go.mondoo.com/cnquery/providers/bigip"},"fullPath":{"name":"fullPath","type":"\u0007","is_mandatory":true,"title":"Full path including partition (for example \"/Common/internal\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"mtu":{"name":"mtu","type":"\u0005","is_mandatory":true,"title":"Maximum transmission unit, in bytes (typically 1500, or up to 9198 for jumbo frames)","provider":"go.mondoo.com/cnquery/providers/bigip"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VLAN name","provider":"go.mondoo.com/cnquery/providers/bigip"},"partition":{"name":"partition","type":"\u0007","is_mandatory":true,"title":"Administrative partition the VLAN belongs to (for example \"Common\")","provider":"go.mondoo.com/cnquery/providers/bigip"},"sourceChecking":{"name":"sourceChecking","type":"\u0007","is_mandatory":true,"title":"Whether source-address checking against the routing table is enabled","desc":"Anti-spoofing check: when \"enabled\", the device verifies that a packet's source address is reachable through the VLAN it arrived on and drops it otherwise. One of \"enabled\" or \"disabled\".","provider":"go.mondoo.com/cnquery/providers/bigip"},"tag":{"name":"tag","type":"\u0005","is_mandatory":true,"title":"802.1Q VLAN tag number carried on tagged interfaces","provider":"go.mondoo.com/cnquery/providers/bigip"}},"title":"BIG-IP network VLAN","desc":"A layer-2 broadcast domain on the device, carrying its 802.1Q tag, MTU, and failsafe and source-checking settings. VLANs are referenced by self IPs and by virtual servers to scope where traffic is accepted, so they are the basis for auditing network segmentation and failsafe (loss-of-traffic) monitoring.","defaults":"name tag","provider":"go.mondoo.com/cnquery/providers/bigip"}}}