{"resources":{"unifi":{"id":"unifi","name":"unifi","fields":{"apGroup":{"name":"apGroup","type":"\u001bunifi.apGroup","title":"UniFi access point group","desc":"Named group of access points that share a broadcast configuration. WLANs are assigned to AP groups to control which access points air a given SSID. Query `devices` for the member access points and `wlans` for the SSIDs broadcast on the group.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"apGroups":{"name":"apGroups","type":"\u0019\u001bunifi.apGroup","title":"Access point groups","provider":"go.mondoo.com/cnquery/providers/unifi"},"backup":{"name":"backup","type":"\u001bunifi.backup","title":"UniFi controller configuration backup","desc":"A single configuration backup file produced by the controller, from the controller's list-backups command. Selected by `id`, which is the backup filename. Use `type` to tell scheduled auto-backups from manual ones and `createdAt` to audit backup recency, for example `unifi.backups.where(type == \"autobackup\")` to check that automatic backups exist.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"backups":{"name":"backups","type":"\u0019\u001bunifi.backup","title":"Controller backups","provider":"go.mondoo.com/cnquery/providers/unifi"},"client":{"name":"client","type":"\u001bunifi.client","title":"UniFi connected client (station)","desc":"Wired or wireless station currently associated with the network. Exposes addressing, vendor, network and WLAN membership, the access point or switch port it connects through, and wireless signal metrics. Selected by `mac`. Audit guest or unknown clients, for example `unifi.clients.where(isGuest == true)`.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"clients":{"name":"clients","type":"\u0019\u001bunifi.client","title":"Connected clients (stations)","desc":"Wired and wireless devices currently associated with the network, including their addressing, network and WLAN membership, and signal metrics.","provider":"go.mondoo.com/cnquery/providers/unifi"},"controller":{"name":"controller","type":"\u001bunifi.controller","title":"Controller identity (version, model, hostname, build)","provider":"go.mondoo.com/cnquery/providers/unifi"},"controllerSettings":{"name":"controllerSettings","type":"\u001bunifi.controllerSettings","title":"Controller-level settings","desc":"Deprecated, please use `controller` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"device":{"name":"device","type":"\u001bunifi.device","title":"UniFi device (access point, switch, gateway, etc.)","desc":"Adopted UniFi hardware managed by the controller. Exposes model and firmware details, adoption and health state, SSH host key presence, and (where applicable) switch ports, access-point radios, the uplink, and connected clients. Selected by `id`. Audit for outdated or end-of-life hardware, for example `unifi.devices.where(upgradable == true)` or `unifi.devices.where(modelEol == true)`.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"devices":{"name":"devices","type":"\u0019\u001bunifi.device","title":"Adopted devices (access points, switches, gateways)","desc":"Every device the controller manages, with its model, firmware, adoption state, ports, and radios. Audit for outdated firmware, end-of-life hardware, or overheating equipment.","provider":"go.mondoo.com/cnquery/providers/unifi"},"dnsRecord":{"name":"dnsRecord","type":"\u001bunifi.dnsRecord","title":"UniFi DNS record","desc":"Local DNS record served by the controller's built-in resolver, from the site's static DNS configuration. Each record is selected by `id`. `key` holds the hostname and `recordType` the record class, for example `unifi.dnsRecords.where(recordType == \"A\")`. Useful for confirming that internal name resolution matches intended addresses.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"dnsRecords":{"name":"dnsRecords","type":"\u0019\u001bunifi.dnsRecord","title":"DNS records","provider":"go.mondoo.com/cnquery/providers/unifi"},"dynamicDns":{"name":"dynamicDns","type":"\u001bunifi.dynamicDns","title":"UniFi gateway dynamic DNS entry","desc":"A dynamic DNS updater configured on the gateway that keeps an external hostname pointed at the WAN interface's current public IP. Selected by `id`. Use it to audit which hostnames the gateway publishes, which provider each uses, and whether the entry is active.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"dynamicDnsEntries":{"name":"dynamicDnsEntries","type":"\u0019\u001bunifi.dynamicDns","title":"Dynamic DNS configurations","provider":"go.mondoo.com/cnquery/providers/unifi"},"firewallGroup":{"name":"firewallGroup","type":"\u001bunifi.firewallGroup","title":"UniFi firewall group","desc":"Reusable named collection of addresses or ports referenced by firewall rules and policies. Selected by `id`. The meaning of `members` depends on `groupType`.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"firewallGroups":{"name":"firewallGroups","type":"\u0019\u001bunifi.firewallGroup","title":"Firewall address and port groups","desc":"Reusable named collections of addresses or ports referenced by firewall rules and policies.","provider":"go.mondoo.com/cnquery/providers/unifi"},"firewallPolicies":{"name":"firewallPolicies","type":"\u0019\u001bunifi.firewallPolicy","title":"Firewall policies (zone-based firewall)","desc":"Ordered allow/block/reject policies matched between firewall zones on controllers running the v2 zone-based firewall. See `firewallRules` for the legacy rule-based firewall.","provider":"go.mondoo.com/cnquery/providers/unifi"},"firewallPolicy":{"name":"firewallPolicy","type":"\u001bunifi.firewallPolicy","title":"UniFi firewall policy (zone-based firewall)","desc":"Single policy in the v2 zone-based firewall, matched between a source and destination zone and evaluated in order. Exposes the action, protocol, IP version, and connection-state matching. Selected by `id`. Audit permissive policies, for example `unifi.firewallPolicies.where(enabled \u0026\u0026 action == \"ALLOW\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"firewallRule":{"name":"firewallRule","type":"\u001bunifi.firewallRule","title":"UniFi firewall rule (legacy rule-based firewall)","desc":"Single rule in the classic rule-based firewall, evaluated in order within its ruleset. Exposes the action, protocol, source and destination matches, and connection-state matching. Selected by `id`. Audit permissive rules, for example `unifi.firewallRules.where(ruleset == \"WAN_IN\" \u0026\u0026 action == \"accept\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"firewallRules":{"name":"firewallRules","type":"\u0019\u001bunifi.firewallRule","title":"Firewall rules (legacy rule-based firewall)","desc":"Ordered accept/drop/reject rules grouped by ruleset (for example WAN_IN, LAN_IN). Used by controllers running the classic firewall. See `firewallPolicies` for the zone-based firewall.","provider":"go.mondoo.com/cnquery/providers/unifi"},"firewallZone":{"name":"firewallZone","type":"\u001bunifi.firewallZone","title":"UniFi firewall zone (zone-based firewall)","desc":"Named grouping of networks used as the source and destination matches for zone-based firewall policies. Selected by `id`. Traverse `networks` to see the member networks.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"firewallZones":{"name":"firewallZones","type":"\u0019\u001bunifi.firewallZone","title":"Firewall zones (zone-based firewall)","desc":"Named groupings of networks used as the source and destination matches for zone-based firewall policies.","provider":"go.mondoo.com/cnquery/providers/unifi"},"hostname":{"name":"hostname","type":"\u0007","title":"Hostname of the connected controller","desc":"Hostname the controller reports for itself, read from its system information. Empty when the controller does not expose sysinfo (for example when reached through a limited API-key scope).","provider":"go.mondoo.com/cnquery/providers/unifi"},"nat":{"name":"nat","type":"\u001bunifi.nat","title":"UniFi NAT rule","desc":"Network address translation rule on the gateway, from the gateway's NAT configuration. Each rule is selected by `id`. Use `type` to distinguish source NAT (rewrites the source address of outbound traffic), destination NAT (rewrites the destination of inbound traffic), and masquerade (the default many-to-one source NAT that follows the WAN's current address). Review NAT rules alongside port forwards and firewall rules when auditing how traffic crosses the gateway.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"nats":{"name":"nats","type":"\u0019\u001bunifi.nat","title":"NAT rules","provider":"go.mondoo.com/cnquery/providers/unifi"},"network":{"name":"network","type":"\u001bunifi.network","title":"UniFi network and VLAN","desc":"Layer 3 network or VLAN with its subnet, DHCP configuration, gateway addressing, NAT, and isolation settings. Selected by `id`. Audit segmentation and DHCP posture, and traverse `wlans` and `clients` to see what rides on the network.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"networks":{"name":"networks","type":"\u0019\u001bunifi.network","title":"Networks and VLANs","desc":"Layer 3 networks and VLANs with their subnets, DHCP configuration, gateway addressing, NAT, and isolation settings.","provider":"go.mondoo.com/cnquery/providers/unifi"},"portForward":{"name":"portForward","type":"\u001bunifi.portForward","title":"UniFi port forwarding rule","desc":"Inbound destination-NAT rule that publishes an internal host and port to the WAN, defined under the gateway's port-forwarding configuration. Each rule is selected by `id`. These rules are the primary way internal services become reachable from the internet, so they are a core target for exposure auditing: enumerate active forwards and confirm the source scope and forwarded target are intended, for example `unifi.portForwards.where(enabled == true \u0026\u0026 src == \"any\")` to find forwards open to any WAN source.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"portForwards":{"name":"portForwards","type":"\u0019\u001bunifi.portForward","title":"Port forwarding rules","desc":"Inbound NAT rules that expose an internal host and port to the WAN. Audit for unintended exposure of internal services.","provider":"go.mondoo.com/cnquery/providers/unifi"},"radiusProfile":{"name":"radiusProfile","type":"\u001bunifi.radiusProfile","title":"UniFi RADIUS profile","desc":"RADIUS authentication and accounting server configuration referenced by WLANs (for 802.1X or MAC-based auth), wired 802.1X, and the guest portal. Each profile is selected by `id`. Server entries in `authServers` and `acctServers` are formatted as \"IP:port\". Audit which profiles have accounting enabled and whether RADIUS-assigned VLANs are in use when reviewing network access control.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"radiusProfiles":{"name":"radiusProfiles","type":"\u0019\u001bunifi.radiusProfile","title":"RADIUS profiles","provider":"go.mondoo.com/cnquery/providers/unifi"},"route":{"name":"route","type":"\u001bunifi.route","title":"UniFi static route","desc":"Manually configured route on the gateway, from the gateway routing table. Each route is selected by `id`. Use `staticRouteType` to distinguish next-hop routes (forward to a gateway IP), interface routes (send out a named interface), and blackhole routes (silently discard matching traffic). Review static routes when auditing how traffic to specific networks is directed or dropped.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"routes":{"name":"routes","type":"\u0019\u001bunifi.route","title":"Static routes","provider":"go.mondoo.com/cnquery/providers/unifi"},"site":{"name":"site","type":"\u001bunifi.site","title":"UniFi site","desc":"Isolated management domain on the controller with its own devices, networks, clients, and settings. Selected by `id`. Use `name` for the short identifier and `description` for the human-readable label shown in the UniFi UI.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"siteSettings":{"name":"siteSettings","type":"\u001bunifi.siteSettings","title":"Site-level settings","desc":"Management, gateway/firewall, IDS/IPS, guest access, switching, logging, and other configuration scoped to the connected site.","provider":"go.mondoo.com/cnquery/providers/unifi"},"sites":{"name":"sites","type":"\u0019\u001bunifi.site","title":"Sites configured on the controller","desc":"Each site is an isolated management domain with its own devices, networks, and settings. A single controller can host many sites (for example one per building or tenant).","provider":"go.mondoo.com/cnquery/providers/unifi"},"trafficRoute":{"name":"trafficRoute","type":"\u001bunifi.trafficRoute","title":"UniFi policy-based traffic route","desc":"Route that steers matched traffic to a specific next hop or VPN tunnel, selected by domain, region, or network. Selected by `id`. The `killSwitchEnabled` flag blocks matched traffic when the route's path is unavailable.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"trafficRoutes":{"name":"trafficRoutes","type":"\u0019\u001bunifi.trafficRoute","title":"Policy-based traffic routes","desc":"Routes that steer matched traffic (by domain, region, or network) to a specific next hop or VPN tunnel, optionally with a kill switch.","provider":"go.mondoo.com/cnquery/providers/unifi"},"vpnClient":{"name":"vpnClient","type":"\u001bunifi.vpnClient","title":"UniFi site-to-site VPN client connection","desc":"A site-VPN network configured as a client that dials out to a remote VPN server, derived from networks with purpose \"site-vpn\" whose mode connects outbound. Selected by `id`. Exposes the protocol, the remote server address it connects to, and the remote subnets reachable through the tunnel. Use it to audit outbound site-to-site tunnels, for example `unifi.vpnClients.where(enabled)`.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"vpnClients":{"name":"vpnClients","type":"\u0019\u001bunifi.vpnClient","title":"Site-to-site VPN client connections","desc":"VPN networks configured to connect out to a remote server.","provider":"go.mondoo.com/cnquery/providers/unifi"},"vpnServer":{"name":"vpnServer","type":"\u001bunifi.vpnServer","title":"UniFi site-to-site VPN server connection","desc":"A site-VPN network configured as a server that accepts incoming connections from remote peers, derived from networks with purpose \"site-vpn\" that are not outbound clients. Selected by `id`. Exposes the protocol, the local subnets advertised to peers, and the remote subnets reachable from them. Use it to audit inbound site-to-site tunnels and the routes they expose.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"vpnServers":{"name":"vpnServers","type":"\u0019\u001bunifi.vpnServer","title":"Site-to-site VPN server connections","desc":"VPN networks configured to accept incoming connections and advertise local subnets to remote peers.","provider":"go.mondoo.com/cnquery/providers/unifi"},"wlan":{"name":"wlan","type":"\u001bunifi.wlan","title":"UniFi wireless network (WLAN)","desc":"Broadcast SSID with its security and encryption configuration, VLAN assignment, and roaming, filtering, and isolation options. Selected by `id`. Audit for weak or open security, for example `unifi.wlans.where(security == \"open\")` or `unifi.wlans.where(security == \"wep\")`.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"wlanGroup":{"name":"wlanGroup","type":"\u001bunifi.wlanGroup","title":"UniFi WLAN group","desc":"Named group that WLANs can belong to. Selected by `id`; use `name` for the human-readable label.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"wlanGroups":{"name":"wlanGroups","type":"\u0019\u001bunifi.wlanGroup","title":"WLAN groups","provider":"go.mondoo.com/cnquery/providers/unifi"},"wlans":{"name":"wlans","type":"\u0019\u001bunifi.wlan","title":"Wireless networks (WLANs)","desc":"Every broadcast SSID with its security mode, encryption, VLAN assignment, and roaming and filtering options. Audit for weak or open security modes.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"Ubiquiti UniFi network controller","desc":"UniFi network controller and everything it manages for the connected site: the controller identity and global settings, sites, devices (access points, switches, gateways), connected clients, wireless networks, VLANs, routing, firewall rules, zones and policies, VPN tunnels, RADIUS profiles, DNS records, and backups. Serves as the starting point for auditing a UniFi deployment's security posture.","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.apGroup":{"id":"unifi.apGroup","name":"unifi.apGroup","fields":{"deviceMacs":{"name":"deviceMacs","type":"\u0019\u0007","is_mandatory":true,"title":"MAC addresses of devices in this group","desc":"Deprecated, please use `devices` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"devices":{"name":"devices","type":"\u0019\u001bunifi.device","title":"Access points in this group","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"AP group ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"AP group name","provider":"go.mondoo.com/cnquery/providers/unifi"},"wlans":{"name":"wlans","type":"\u0019\u001bunifi.wlan","title":"WLANs broadcast on this AP group","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi access point group","desc":"Named group of access points that share a broadcast configuration. WLANs are assigned to AP groups to control which access points air a given SSID. Query `devices` for the member access points and `wlans` for the SSIDs broadcast on the group.","private":true,"defaults":"name","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.backup":{"id":"unifi.backup","name":"unifi.backup","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"When the backup was created","desc":"Timestamp the backup was taken, derived from the controller's millisecond epoch `time` field.","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Backup identifier, which is the backup filename","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Backup filename","desc":"The name of the backup file on the controller (the same value as `id`).","provider":"go.mondoo.com/cnquery/providers/unifi"},"size":{"name":"size","type":"\u0005","is_mandatory":true,"title":"Backup file size in bytes","provider":"go.mondoo.com/cnquery/providers/unifi"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Backup origin","desc":"How the backup was created: \"autobackup\" for a scheduled automatic backup, or \"manual\" for one triggered by an administrator.","provider":"go.mondoo.com/cnquery/providers/unifi"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Controller software version at the time the backup was taken","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi controller configuration backup","desc":"A single configuration backup file produced by the controller, from the controller's list-backups command. Selected by `id`, which is the backup filename. Use `type` to tell scheduled auto-backups from manual ones and `createdAt` to audit backup recency, for example `unifi.backups.where(type == \"autobackup\")` to check that automatic backups exist.","private":true,"defaults":"name version","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.client":{"id":"unifi.client","name":"unifi.client","fields":{"accessPoint":{"name":"accessPoint","type":"\u001bunifi.device","title":"Access point the client is connected to (wireless clients)","provider":"go.mondoo.com/cnquery/providers/unifi"},"channel":{"name":"channel","type":"\u0005","is_mandatory":true,"title":"Wireless channel the client is on","provider":"go.mondoo.com/cnquery/providers/unifi"},"dot1xIdentity":{"name":"dot1xIdentity","type":"\u0007","is_mandatory":true,"title":"802.1X identity used for authentication","provider":"go.mondoo.com/cnquery/providers/unifi"},"firstSeen":{"name":"firstSeen","type":"\t","is_mandatory":true,"title":"When the client was first seen","desc":"Null when the controller has no first-seen timestamp for the client (distinct from the Unix epoch).","provider":"go.mondoo.com/cnquery/providers/unifi"},"fixedIp":{"name":"fixedIp","type":"\u0007","is_mandatory":true,"title":"Statically assigned (reserved) IP address","provider":"go.mondoo.com/cnquery/providers/unifi"},"hostname":{"name":"hostname","type":"\u0007","is_mandatory":true,"title":"Client hostname","provider":"go.mondoo.com/cnquery/providers/unifi"},"ip":{"name":"ip","type":"\u0007","is_mandatory":true,"title":"Current IP address","provider":"go.mondoo.com/cnquery/providers/unifi"},"ipv6Addresses":{"name":"ipv6Addresses","type":"\u0019\u0007","is_mandatory":true,"title":"IPv6 addresses","provider":"go.mondoo.com/cnquery/providers/unifi"},"is11r":{"name":"is11r","type":"\u0004","is_mandatory":true,"title":"Whether 802.11r fast roaming is in use","provider":"go.mondoo.com/cnquery/providers/unifi"},"isGuest":{"name":"isGuest","type":"\u0004","is_mandatory":true,"title":"Whether the client is on a guest network","provider":"go.mondoo.com/cnquery/providers/unifi"},"isMlo":{"name":"isMlo","type":"\u0004","is_mandatory":true,"title":"Whether multi-link operation (Wi-Fi 7) is in use","provider":"go.mondoo.com/cnquery/providers/unifi"},"isWired":{"name":"isWired","type":"\u0004","is_mandatory":true,"title":"Whether the client is connected over a wired link","provider":"go.mondoo.com/cnquery/providers/unifi"},"lastSeen":{"name":"lastSeen","type":"\t","is_mandatory":true,"title":"When the client was last seen","desc":"Null when the controller has no last-seen timestamp for the client (distinct from the Unix epoch).","provider":"go.mondoo.com/cnquery/providers/unifi"},"mac":{"name":"mac","type":"\u0007","is_mandatory":true,"title":"Client MAC address","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Client display name","provider":"go.mondoo.com/cnquery/providers/unifi"},"network":{"name":"network","type":"\u001bunifi.network","title":"Network the client is on","provider":"go.mondoo.com/cnquery/providers/unifi"},"networkName":{"name":"networkName","type":"\u0007","is_mandatory":true,"title":"Name of the network the client is on","provider":"go.mondoo.com/cnquery/providers/unifi"},"note":{"name":"note","type":"\u0007","is_mandatory":true,"title":"User-assigned note","provider":"go.mondoo.com/cnquery/providers/unifi"},"radio":{"name":"radio","type":"\u0007","is_mandatory":true,"title":"Radio band (ng=2.4GHz, na=5GHz, 6e=6GHz)","provider":"go.mondoo.com/cnquery/providers/unifi"},"radioProto":{"name":"radioProto","type":"\u0007","is_mandatory":true,"title":"Radio protocol (e.g. ax, ac, n, a, g)","provider":"go.mondoo.com/cnquery/providers/unifi"},"rssi":{"name":"rssi","type":"\u0005","is_mandatory":true,"title":"Received signal strength indicator","provider":"go.mondoo.com/cnquery/providers/unifi"},"rxBytes":{"name":"rxBytes","type":"\u0005","is_mandatory":true,"title":"Bytes received from the client","provider":"go.mondoo.com/cnquery/providers/unifi"},"signal":{"name":"signal","type":"\u0005","is_mandatory":true,"title":"Signal strength in dBm (negative; closer to 0 is stronger)","provider":"go.mondoo.com/cnquery/providers/unifi"},"ssid":{"name":"ssid","type":"\u0007","is_mandatory":true,"title":"SSID the client is connected to (wireless clients)","provider":"go.mondoo.com/cnquery/providers/unifi"},"switchDevice":{"name":"switchDevice","type":"\u001bunifi.device","title":"Switch the client is connected to (wired clients)","provider":"go.mondoo.com/cnquery/providers/unifi"},"switchPort":{"name":"switchPort","type":"\u0005","is_mandatory":true,"title":"Switch port index the client is connected to (wired clients)","provider":"go.mondoo.com/cnquery/providers/unifi"},"txBytes":{"name":"txBytes","type":"\u0005","is_mandatory":true,"title":"Bytes transmitted to the client","provider":"go.mondoo.com/cnquery/providers/unifi"},"uptime":{"name":"uptime","type":"\u0005","is_mandatory":true,"title":"Uptime of the connection in seconds","provider":"go.mondoo.com/cnquery/providers/unifi"},"useFixedIp":{"name":"useFixedIp","type":"\u0004","is_mandatory":true,"title":"Whether the client uses a fixed IP reservation","provider":"go.mondoo.com/cnquery/providers/unifi"},"vendor":{"name":"vendor","type":"\u0007","is_mandatory":true,"title":"Hardware vendor (derived from the MAC OUI)","provider":"go.mondoo.com/cnquery/providers/unifi"},"vlan":{"name":"vlan","type":"\u0005","is_mandatory":true,"title":"VLAN ID (0 if untagged)","provider":"go.mondoo.com/cnquery/providers/unifi"},"wiredRateMbps":{"name":"wiredRateMbps","type":"\u0005","is_mandatory":true,"title":"Negotiated wired link rate in Mbps (wired clients)","provider":"go.mondoo.com/cnquery/providers/unifi"},"wlan":{"name":"wlan","type":"\u001bunifi.wlan","title":"WLAN the client is connected to (wireless clients)","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"mac","type":"\u0007"}]},"title":"UniFi connected client (station)","desc":"Wired or wireless station currently associated with the network. Exposes addressing, vendor, network and WLAN membership, the access point or switch port it connects through, and wireless signal metrics. Selected by `mac`. Audit guest or unknown clients, for example `unifi.clients.where(isGuest == true)`.","private":true,"defaults":"name hostname ip mac","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.controller":{"id":"unifi.controller","name":"unifi.controller","fields":{"autoUpgrade":{"name":"autoUpgrade","type":"\u0004","title":"Whether automatic firmware upgrades are enabled globally","provider":"go.mondoo.com/cnquery/providers/unifi"},"autobackupEnabled":{"name":"autobackupEnabled","type":"\u0004","title":"Whether scheduled automatic controller backups are enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"backupToCloudEnabled":{"name":"backupToCloudEnabled","type":"\u0004","title":"Whether controller backups are uploaded to the Ubiquiti cloud","provider":"go.mondoo.com/cnquery/providers/unifi"},"build":{"name":"build","type":"\u0007","title":"Controller firmware build identifier (for example","desc":"\"atag_10.2.105_33556\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"enableAnalytics":{"name":"enableAnalytics","type":"\u0004","title":"Whether anonymous usage analytics reporting to Ubiquiti is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"hostname":{"name":"hostname","type":"\u0007","title":"Controller hostname reported by the controller's system info","provider":"go.mondoo.com/cnquery/providers/unifi"},"ipAddresses":{"name":"ipAddresses","type":"\u0019\u0007","title":"IP addresses the controller reports for itself","provider":"go.mondoo.com/cnquery/providers/unifi"},"isCloudConsole":{"name":"isCloudConsole","type":"\u0004","title":"Whether this controller is a Ubiquiti-hosted UniFi Cloud Console rather","desc":"than a self-hosted controller or gateway","provider":"go.mondoo.com/cnquery/providers/unifi"},"ledEnabled":{"name":"ledEnabled","type":"\u0004","title":"Whether device status LEDs are enabled globally across the controller","provider":"go.mondoo.com/cnquery/providers/unifi"},"model":{"name":"model","type":"\u0007","title":"Controller hardware model (for example \"UDMPRO\"); empty for","desc":"software-only controllers that do not report a model","provider":"go.mondoo.com/cnquery/providers/unifi"},"multipleSitesEnabled":{"name":"multipleSitesEnabled","type":"\u0004","title":"Whether multi-site management is enabled on this controller","provider":"go.mondoo.com/cnquery/providers/unifi"},"version":{"name":"version","type":"\u0007","title":"Controller software version (for example \"10.2.105\")","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi controller identity and controller-level settings","desc":"Identity of the UniFi controller (version, model, hostname, build, IP addresses) plus controller-wide toggles decoded from the super_mgmt settings block, such as usage analytics, global auto-upgrade, LED control, multi-site management, and automatic and cloud backups. The place to audit the controller's own posture, for example confirming that `autobackupEnabled` is true or that `enableAnalytics` matches policy.","private":true,"defaults":"hostname version model build","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.controllerSettings":{"id":"unifi.controllerSettings","name":"unifi.controllerSettings","fields":{"autoUpgrade":{"name":"autoUpgrade","type":"\u0004","title":"Whether auto-upgrade is enabled globally","desc":"Deprecated, please use `unifi.controller.autoUpgrade` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"autobackupEnabled":{"name":"autobackupEnabled","type":"\u0004","title":"Whether automatic backups are enabled","desc":"Deprecated, please use `unifi.controller.autobackupEnabled` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"backupToCloudEnabled":{"name":"backupToCloudEnabled","type":"\u0004","title":"Whether backup to cloud is enabled","desc":"Deprecated, please use `unifi.controller.backupToCloudEnabled` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"enableAnalytics":{"name":"enableAnalytics","type":"\u0004","title":"Whether analytics is enabled","desc":"Deprecated, please use `unifi.controller.enableAnalytics` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"ledEnabled":{"name":"ledEnabled","type":"\u0004","title":"Whether LED is enabled globally","desc":"Deprecated, please use `unifi.controller.ledEnabled` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"multipleSitesEnabled":{"name":"multipleSitesEnabled","type":"\u0004","title":"Whether multiple sites are enabled","desc":"Deprecated, please use `unifi.controller.multipleSitesEnabled` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"}},"title":"UniFi controller-level settings","desc":"Deprecated, please use `unifi.controller` instead","private":true,"defaults":"backupToCloudEnabled autobackupEnabled autoUpgrade ledEnabled enableAnalytics multipleSitesEnabled","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"unifi.device":{"id":"unifi.device","name":"unifi.device","fields":{"adopted":{"name":"adopted","type":"\u0004","is_mandatory":true,"title":"Whether the device has been adopted by the controller","provider":"go.mondoo.com/cnquery/providers/unifi"},"clients":{"name":"clients","type":"\u0019\u001bunifi.client","title":"Clients connected to this device (access point or switch)","provider":"go.mondoo.com/cnquery/providers/unifi"},"disabled":{"name":"disabled","type":"\u0004","is_mandatory":true,"title":"Whether the device is administratively disabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"hasSshHostkey":{"name":"hasSshHostkey","type":"\u0004","is_mandatory":true,"title":"Whether the device has an SSH host key","provider":"go.mondoo.com/cnquery/providers/unifi"},"hostname":{"name":"hostname","type":"\u0007","is_mandatory":true,"title":"Device hostname","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Device ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"ip":{"name":"ip","type":"\u0007","is_mandatory":true,"title":"IP address","provider":"go.mondoo.com/cnquery/providers/unifi"},"kernelVersion":{"name":"kernelVersion","type":"\u0007","is_mandatory":true,"title":"Running kernel version","provider":"go.mondoo.com/cnquery/providers/unifi"},"locked":{"name":"locked","type":"\u0004","is_mandatory":true,"title":"Whether the device is locked","provider":"go.mondoo.com/cnquery/providers/unifi"},"mac":{"name":"mac","type":"\u0007","is_mandatory":true,"title":"MAC address","provider":"go.mondoo.com/cnquery/providers/unifi"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Device model code (e.g. \"U7PRO\", \"USW24POE\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"modelEol":{"name":"modelEol","type":"\u0004","is_mandatory":true,"title":"Whether the device model is end-of-life","desc":"True when the hardware model no longer receives support or firmware updates from Ubiquiti and should be considered for replacement.","provider":"go.mondoo.com/cnquery/providers/unifi"},"modelLts":{"name":"modelLts","type":"\u0004","is_mandatory":true,"title":"Whether the device model is on long-term support","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Device name","provider":"go.mondoo.com/cnquery/providers/unifi"},"overheating":{"name":"overheating","type":"\u0004","is_mandatory":true,"title":"Whether the device reports overheating","provider":"go.mondoo.com/cnquery/providers/unifi"},"port":{"name":"port","type":"\u001bunifi.device.port","title":"UniFi switch port","desc":"Physical port on a switch, merging runtime link state from the port table with configured overrides. Exposes link speed and duplex, PoE state and draw, spanning-tree state, and port security. Selected by port index within a device. Audit exposed access ports, for example `unifi.devices.ports.where(up \u0026\u0026 !portSecurityEnabled)`.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"ports":{"name":"ports","type":"\u0019\u001bunifi.device.port","title":"Switch port table (only available on switch devices)","desc":"One entry per physical port with its link state, speed, PoE, and security configuration. Empty for non-switch devices.","provider":"go.mondoo.com/cnquery/providers/unifi"},"radio":{"name":"radio","type":"\u001bunifi.device.radio","title":"UniFi access point radio","desc":"Wireless radio on an access point, one per band. Exposes the operating channel, channel width, transmit-power mode and limits, spatial streams, and roaming assistance. Selected by radio interface name within a device.","is_private":true,"provider":"go.mondoo.com/cnquery/providers/unifi","is_implicit_resource":true},"radios":{"name":"radios","type":"\u0019\u001bunifi.device.radio","title":"Radios (only available on access points)","desc":"One entry per wireless radio band with its channel, width, and transmit power. Empty for devices without radios.","provider":"go.mondoo.com/cnquery/providers/unifi"},"requiredVersion":{"name":"requiredVersion","type":"\u0007","is_mandatory":true,"title":"Minimum firmware version required by the controller","provider":"go.mondoo.com/cnquery/providers/unifi"},"safeForAutoupgrade":{"name":"safeForAutoupgrade","type":"\u0004","is_mandatory":true,"title":"Whether the device is safe to auto-upgrade","provider":"go.mondoo.com/cnquery/providers/unifi"},"serial":{"name":"serial","type":"\u0007","is_mandatory":true,"title":"Serial number","provider":"go.mondoo.com/cnquery/providers/unifi"},"sshHostkeyFingerprint":{"name":"sshHostkeyFingerprint","type":"\u0007","is_mandatory":true,"title":"SSH host key fingerprint","provider":"go.mondoo.com/cnquery/providers/unifi"},"state":{"name":"state","type":"\u0005","is_mandatory":true,"title":"Device state","desc":"Connection state code: 0=disconnected/unknown, 1=connected, 2=pending adoption, 4=upgrading, 5=provisioning, 6=heartbeat missed.","provider":"go.mondoo.com/cnquery/providers/unifi"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Device type (usw=switch, uap=access point, ugw/udm=gateway)","provider":"go.mondoo.com/cnquery/providers/unifi"},"unsupported":{"name":"unsupported","type":"\u0004","is_mandatory":true,"title":"Whether the device is unsupported by the controller","provider":"go.mondoo.com/cnquery/providers/unifi"},"upgradable":{"name":"upgradable","type":"\u0004","is_mandatory":true,"title":"Whether a newer firmware version is available","desc":"True when the controller has a firmware update the device has not yet installed. Audit with `unifi.devices.where(upgradable == true)`.","provider":"go.mondoo.com/cnquery/providers/unifi"},"upgradeToFirmware":{"name":"upgradeToFirmware","type":"\u0007","is_mandatory":true,"title":"Firmware version the device will upgrade to","provider":"go.mondoo.com/cnquery/providers/unifi"},"uplink":{"name":"uplink","type":"\u001bunifi.device.uplink","title":"Uplink connection to the rest of the network","provider":"go.mondoo.com/cnquery/providers/unifi"},"uptime":{"name":"uptime","type":"\u0005","is_mandatory":true,"title":"Device uptime in seconds since last boot","provider":"go.mondoo.com/cnquery/providers/unifi"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Installed firmware version","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi device (access point, switch, gateway, etc.)","desc":"Adopted UniFi hardware managed by the controller. Exposes model and firmware details, adoption and health state, SSH host key presence, and (where applicable) switch ports, access-point radios, the uplink, and connected clients. Selected by `id`. Audit for outdated or end-of-life hardware, for example `unifi.devices.where(upgradable == true)` or `unifi.devices.where(modelEol == true)`.","private":true,"defaults":"name model type ip","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.device.port":{"id":"unifi.device.port","name":"unifi.device.port","fields":{"device":{"name":"device","type":"\u001bunifi.device","title":"Device this port belongs to","provider":"go.mondoo.com/cnquery/providers/unifi"},"deviceId":{"name":"deviceId","type":"\u0007","is_mandatory":true,"title":"Parent device ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the port is administratively enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"forward":{"name":"forward","type":"\u0007","is_mandatory":true,"title":"Configured forwarding mode (all, native, customize, disabled)","desc":"Controls which VLANs the port carries: all VLANs, only the native VLAN, a customized VLAN set, or none (disabled).","provider":"go.mondoo.com/cnquery/providers/unifi"},"fullDuplex":{"name":"fullDuplex","type":"\u0004","is_mandatory":true,"title":"Whether full duplex is negotiated","provider":"go.mondoo.com/cnquery/providers/unifi"},"isUplink":{"name":"isUplink","type":"\u0004","is_mandatory":true,"title":"Whether this port is acting as an uplink","provider":"go.mondoo.com/cnquery/providers/unifi"},"isolation":{"name":"isolation","type":"\u0004","is_mandatory":true,"title":"Whether port isolation is configured","provider":"go.mondoo.com/cnquery/providers/unifi"},"lldpmedEnabled":{"name":"lldpmedEnabled","type":"\u0004","is_mandatory":true,"title":"Whether LLDP-MED is configured on the port","provider":"go.mondoo.com/cnquery/providers/unifi"},"media":{"name":"media","type":"\u0007","is_mandatory":true,"title":"Media type (GE=copper gigabit, SFP, SFP+)","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Port name (e.g. \"Port 1\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"poeEnable":{"name":"poeEnable","type":"\u0004","is_mandatory":true,"title":"Whether PoE is enabled on this port","provider":"go.mondoo.com/cnquery/providers/unifi"},"poeMode":{"name":"poeMode","type":"\u0007","is_mandatory":true,"title":"PoE mode (auto, off, pasv24=24V passive)","provider":"go.mondoo.com/cnquery/providers/unifi"},"poePower":{"name":"poePower","type":"\u0007","is_mandatory":true,"title":"PoE power draw in watts (as a string, e.g. \"4.55\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"portIdx":{"name":"portIdx","type":"\u0005","is_mandatory":true,"title":"Port index number (1-based)","provider":"go.mondoo.com/cnquery/providers/unifi"},"portPoe":{"name":"portPoe","type":"\u0004","is_mandatory":true,"title":"Whether the port hardware supports PoE","provider":"go.mondoo.com/cnquery/providers/unifi"},"portSecurityEnabled":{"name":"portSecurityEnabled","type":"\u0004","is_mandatory":true,"title":"Whether port security (MAC allow-listing) is configured","provider":"go.mondoo.com/cnquery/providers/unifi"},"portSecurityMacAddress":{"name":"portSecurityMacAddress","type":"\u0019\u0007","is_mandatory":true,"title":"MAC addresses allowed by port security","provider":"go.mondoo.com/cnquery/providers/unifi"},"rxBytes":{"name":"rxBytes","type":"\u0005","is_mandatory":true,"title":"Bytes received since counters were last reset","provider":"go.mondoo.com/cnquery/providers/unifi"},"speed":{"name":"speed","type":"\u0005","is_mandatory":true,"title":"Negotiated link speed in Mbps (0 when the link is down)","provider":"go.mondoo.com/cnquery/providers/unifi"},"stpPortMode":{"name":"stpPortMode","type":"\u0004","is_mandatory":true,"title":"Whether an STP port mode override is configured","provider":"go.mondoo.com/cnquery/providers/unifi"},"stpState":{"name":"stpState","type":"\u0007","is_mandatory":true,"title":"Spanning-tree state (forwarding, blocking, disabled, learning, listening)","provider":"go.mondoo.com/cnquery/providers/unifi"},"txBytes":{"name":"txBytes","type":"\u0005","is_mandatory":true,"title":"Bytes transmitted since counters were last reset","provider":"go.mondoo.com/cnquery/providers/unifi"},"up":{"name":"up","type":"\u0004","is_mandatory":true,"title":"Whether the link is up","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi switch port","desc":"Physical port on a switch, merging runtime link state from the port table with configured overrides. Exposes link speed and duplex, PoE state and draw, spanning-tree state, and port security. Selected by port index within a device. Audit exposed access ports, for example `unifi.devices.ports.where(up \u0026\u0026 !portSecurityEnabled)`.","private":true,"defaults":"name up speed","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.device.radio":{"id":"unifi.device.radio","name":"unifi.device.radio","fields":{"antennaGain":{"name":"antennaGain","type":"\u0005","is_mandatory":true,"title":"Antenna gain in dBi","provider":"go.mondoo.com/cnquery/providers/unifi"},"assistedRoamingEnabled":{"name":"assistedRoamingEnabled","type":"\u0004","is_mandatory":true,"title":"Whether assisted (802.11k/v) roaming is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"backupChannel":{"name":"backupChannel","type":"\u0005","is_mandatory":true,"title":"Backup channel used when the primary channel is unavailable","provider":"go.mondoo.com/cnquery/providers/unifi"},"channel":{"name":"channel","type":"\u0007","is_mandatory":true,"title":"Configured channel (\"auto\" or a channel number as a string)","provider":"go.mondoo.com/cnquery/providers/unifi"},"channelWidth":{"name":"channelWidth","type":"\u0005","is_mandatory":true,"title":"Channel width in MHz (e.g. 20, 40, 80, 160)","provider":"go.mondoo.com/cnquery/providers/unifi"},"device":{"name":"device","type":"\u001bunifi.device","title":"Device this radio belongs to","provider":"go.mondoo.com/cnquery/providers/unifi"},"deviceId":{"name":"deviceId","type":"\u0007","is_mandatory":true,"title":"Parent device ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"maxTxPower":{"name":"maxTxPower","type":"\u0005","is_mandatory":true,"title":"Maximum transmit power in dBm","provider":"go.mondoo.com/cnquery/providers/unifi"},"minRssiEnabled":{"name":"minRssiEnabled","type":"\u0004","is_mandatory":true,"title":"Whether a minimum RSSI association threshold is enforced","provider":"go.mondoo.com/cnquery/providers/unifi"},"minTxPower":{"name":"minTxPower","type":"\u0005","is_mandatory":true,"title":"Minimum transmit power in dBm","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Radio interface name (e.g. \"ra0\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"nss":{"name":"nss","type":"\u0005","is_mandatory":true,"title":"Number of spatial streams (NSS)","provider":"go.mondoo.com/cnquery/providers/unifi"},"radio":{"name":"radio","type":"\u0007","is_mandatory":true,"title":"Radio band identifier (ng=2.4GHz, na=5GHz, 6e=6GHz)","provider":"go.mondoo.com/cnquery/providers/unifi"},"txPowerMode":{"name":"txPowerMode","type":"\u0007","is_mandatory":true,"title":"Transmit power mode (auto, medium, high, low, custom)","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi access point radio","desc":"Wireless radio on an access point, one per band. Exposes the operating channel, channel width, transmit-power mode and limits, spatial streams, and roaming assistance. Selected by radio interface name within a device.","private":true,"defaults":"name radio channel","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.device.uplink":{"id":"unifi.device.uplink","name":"unifi.device.uplink","fields":{"device":{"name":"device","type":"\u001bunifi.device","title":"Device this uplink belongs to","provider":"go.mondoo.com/cnquery/providers/unifi"},"deviceId":{"name":"deviceId","type":"\u0007","is_mandatory":true,"title":"Parent device ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"portIdx":{"name":"portIdx","type":"\u0005","is_mandatory":true,"title":"Local port index carrying the uplink","provider":"go.mondoo.com/cnquery/providers/unifi"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Uplink medium (wire, wireless)","provider":"go.mondoo.com/cnquery/providers/unifi"},"uplinkDevice":{"name":"uplinkDevice","type":"\u001bunifi.device","title":"Upstream device this uplink connects to","provider":"go.mondoo.com/cnquery/providers/unifi"},"uplinkDeviceName":{"name":"uplinkDeviceName","type":"\u0007","is_mandatory":true,"title":"Name of the upstream device","provider":"go.mondoo.com/cnquery/providers/unifi"},"uplinkMac":{"name":"uplinkMac","type":"\u0007","is_mandatory":true,"title":"MAC of the upstream device","provider":"go.mondoo.com/cnquery/providers/unifi"},"uplinkRemotePort":{"name":"uplinkRemotePort","type":"\u0005","is_mandatory":true,"title":"Remote port index on the upstream device","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi device uplink","desc":"Connection from a device up to the rest of the network. Exposes whether the uplink is wired or wireless and the upstream device and port it connects to. Traverse `uplinkDevice` to follow the topology toward the gateway.","private":true,"defaults":"uplinkDeviceName type","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.dnsRecord":{"id":"unifi.dnsRecord","name":"unifi.dnsRecord","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the record is enabled and actively served","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"DNS record ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"Record key, the hostname the record answers for (for example","desc":"\"nas.local\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"recordType":{"name":"recordType","type":"\u0007","is_mandatory":true,"title":"Record type","desc":"DNS record class such as \"A\" (IPv4 address), \"AAAA\" (IPv6 address), \"CNAME\" (alias), \"MX\" (mail exchange), \"TXT\" (text), \"SRV\" (service), or \"NS\" (name server). Determines how `value` is interpreted.","provider":"go.mondoo.com/cnquery/providers/unifi"},"ttl":{"name":"ttl","type":"\u0005","is_mandatory":true,"title":"Time to live in seconds; 0 means the controller applies its default TTL","provider":"go.mondoo.com/cnquery/providers/unifi"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Record value, interpreted per recordType (an IP address for A/AAAA, a","desc":"target hostname for CNAME/MX/SRV, arbitrary text for TXT)","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi DNS record","desc":"Local DNS record served by the controller's built-in resolver, from the site's static DNS configuration. Each record is selected by `id`. `key` holds the hostname and `recordType` the record class, for example `unifi.dnsRecords.where(recordType == \"A\")`. Useful for confirming that internal name resolution matches intended addresses.","private":true,"defaults":"key recordType","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.dynamicDns":{"id":"unifi.dynamicDns","name":"unifi.dynamicDns","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether this dynamic DNS entry is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"hostname":{"name":"hostname","type":"\u0007","is_mandatory":true,"title":"Hostname kept updated with the WAN IP","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Dynamic DNS entry identifier","provider":"go.mondoo.com/cnquery/providers/unifi"},"interface":{"name":"interface","type":"\u0007","is_mandatory":true,"title":"WAN interface whose public IP is published","desc":"The gateway interface the entry tracks, for example wan or wan2.","provider":"go.mondoo.com/cnquery/providers/unifi"},"login":{"name":"login","type":"\u0007","is_mandatory":true,"title":"Login username for the DDNS provider account","provider":"go.mondoo.com/cnquery/providers/unifi"},"server":{"name":"server","type":"\u0007","is_mandatory":true,"title":"DDNS update server address","desc":"The provider's update endpoint. Typically set only for a custom or self-hosted provider; empty when the built-in provider supplies its own endpoint.","provider":"go.mondoo.com/cnquery/providers/unifi"},"service":{"name":"service","type":"\u0007","is_mandatory":true,"title":"Dynamic DNS provider","desc":"The DDNS service the entry updates. UniFi's built-in providers include afraid, cloudflare, dnspark, dslreports, duckdns, dyndns, easydns, namecheap, noip, sitelutions, and zoneedit; a \"custom\" provider with an explicit server may also be used.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi gateway dynamic DNS entry","desc":"A dynamic DNS updater configured on the gateway that keeps an external hostname pointed at the WAN interface's current public IP. Selected by `id`. Use it to audit which hostnames the gateway publishes, which provider each uses, and whether the entry is active.","private":true,"defaults":"hostname service","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.firewallGroup":{"id":"unifi.firewallGroup","name":"unifi.firewallGroup","fields":{"groupType":{"name":"groupType","type":"\u0007","is_mandatory":true,"title":"Group type (address-group, port-group, ipv6-address-group)","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall group ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"members":{"name":"members","type":"\u0019\u0007","is_mandatory":true,"title":"Group members (addresses/CIDRs or ports, per groupType)","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Firewall group name","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi firewall group","desc":"Reusable named collection of addresses or ports referenced by firewall rules and policies. Selected by `id`. The meaning of `members` depends on `groupType`.","private":true,"defaults":"name groupType","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.firewallPolicy":{"id":"unifi.firewallPolicy","name":"unifi.firewallPolicy","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Action taken on matching traffic (ALLOW, BLOCK, REJECT)","provider":"go.mondoo.com/cnquery/providers/unifi"},"connectionStateType":{"name":"connectionStateType","type":"\u0007","is_mandatory":true,"title":"Connection state type (ALL, RESPOND_ONLY)","provider":"go.mondoo.com/cnquery/providers/unifi"},"connectionStates":{"name":"connectionStates","type":"\u0019\u0007","is_mandatory":true,"title":"Connection states matched when connectionStateType is not ALL","provider":"go.mondoo.com/cnquery/providers/unifi"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Policy description","provider":"go.mondoo.com/cnquery/providers/unifi"},"destinationZone":{"name":"destinationZone","type":"\u001bunifi.firewallZone","title":"Destination firewall zone","provider":"go.mondoo.com/cnquery/providers/unifi"},"destinationZoneId":{"name":"destinationZoneId","type":"\u0007","is_mandatory":true,"title":"Destination zone ID","desc":"Deprecated, please use `destinationZone` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the policy is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall policy ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"index":{"name":"index","type":"\u0005","is_mandatory":true,"title":"Policy evaluation order","provider":"go.mondoo.com/cnquery/providers/unifi"},"ipVersion":{"name":"ipVersion","type":"\u0007","is_mandatory":true,"title":"IP version matched (BOTH, IPV4, IPV6)","provider":"go.mondoo.com/cnquery/providers/unifi"},"logging":{"name":"logging","type":"\u0004","is_mandatory":true,"title":"Whether logging is enabled for matches","provider":"go.mondoo.com/cnquery/providers/unifi"},"matchIpSec":{"name":"matchIpSec","type":"\u0004","is_mandatory":true,"title":"Whether IPsec traffic matching is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Policy name","provider":"go.mondoo.com/cnquery/providers/unifi"},"predefined":{"name":"predefined","type":"\u0004","is_mandatory":true,"title":"Whether this is a predefined (built-in) policy","provider":"go.mondoo.com/cnquery/providers/unifi"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Protocol matched (all, tcp, udp, tcp_udp)","provider":"go.mondoo.com/cnquery/providers/unifi"},"sourceZone":{"name":"sourceZone","type":"\u001bunifi.firewallZone","title":"Source firewall zone","provider":"go.mondoo.com/cnquery/providers/unifi"},"sourceZoneId":{"name":"sourceZoneId","type":"\u0007","is_mandatory":true,"title":"Source zone ID","desc":"Deprecated, please use `sourceZone` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi firewall policy (zone-based firewall)","desc":"Single policy in the v2 zone-based firewall, matched between a source and destination zone and evaluated in order. Exposes the action, protocol, IP version, and connection-state matching. Selected by `id`. Audit permissive policies, for example `unifi.firewallPolicies.where(enabled \u0026\u0026 action == \"ALLOW\")`.","private":true,"defaults":"name action","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.firewallRule":{"id":"unifi.firewallRule","name":"unifi.firewallRule","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Action taken on matching traffic (accept, drop, reject)","provider":"go.mondoo.com/cnquery/providers/unifi"},"dstAddress":{"name":"dstAddress","type":"\u0007","is_mandatory":true,"title":"Destination address or CIDR matched","provider":"go.mondoo.com/cnquery/providers/unifi"},"dstNetwork":{"name":"dstNetwork","type":"\u001bunifi.network","title":"Destination network matched by the rule","provider":"go.mondoo.com/cnquery/providers/unifi"},"dstNetworkId":{"name":"dstNetworkId","type":"\u0007","is_mandatory":true,"title":"Destination network ID","desc":"Deprecated, please use `dstNetwork` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"dstPort":{"name":"dstPort","type":"\u0007","is_mandatory":true,"title":"Destination port matched","provider":"go.mondoo.com/cnquery/providers/unifi"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the rule is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Rule ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"logging":{"name":"logging","type":"\u0004","is_mandatory":true,"title":"Whether logging is enabled for matches","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Rule name","provider":"go.mondoo.com/cnquery/providers/unifi"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Protocol matched (tcp, udp, all, etc.)","provider":"go.mondoo.com/cnquery/providers/unifi"},"ruleIndex":{"name":"ruleIndex","type":"\u0005","is_mandatory":true,"title":"Rule evaluation order within the ruleset","provider":"go.mondoo.com/cnquery/providers/unifi"},"ruleset":{"name":"ruleset","type":"\u0007","is_mandatory":true,"title":"Ruleset the rule belongs to (e.g. WAN_IN, WAN_OUT, LAN_IN, GUEST_IN)","provider":"go.mondoo.com/cnquery/providers/unifi"},"srcAddress":{"name":"srcAddress","type":"\u0007","is_mandatory":true,"title":"Source address or CIDR matched","provider":"go.mondoo.com/cnquery/providers/unifi"},"srcMacAddress":{"name":"srcMacAddress","type":"\u0007","is_mandatory":true,"title":"Source MAC address filter","provider":"go.mondoo.com/cnquery/providers/unifi"},"srcNetwork":{"name":"srcNetwork","type":"\u001bunifi.network","title":"Source network matched by the rule","provider":"go.mondoo.com/cnquery/providers/unifi"},"srcNetworkId":{"name":"srcNetworkId","type":"\u0007","is_mandatory":true,"title":"Source network ID","desc":"Deprecated, please use `srcNetwork` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"srcPort":{"name":"srcPort","type":"\u0007","is_mandatory":true,"title":"Source port matched","provider":"go.mondoo.com/cnquery/providers/unifi"},"stateEstablished":{"name":"stateEstablished","type":"\u0004","is_mandatory":true,"title":"Whether established connections are matched","provider":"go.mondoo.com/cnquery/providers/unifi"},"stateInvalid":{"name":"stateInvalid","type":"\u0004","is_mandatory":true,"title":"Whether invalid-state packets are matched","provider":"go.mondoo.com/cnquery/providers/unifi"},"stateNew":{"name":"stateNew","type":"\u0004","is_mandatory":true,"title":"Whether new connections are matched","provider":"go.mondoo.com/cnquery/providers/unifi"},"stateRelated":{"name":"stateRelated","type":"\u0004","is_mandatory":true,"title":"Whether related connections are matched","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi firewall rule (legacy rule-based firewall)","desc":"Single rule in the classic rule-based firewall, evaluated in order within its ruleset. Exposes the action, protocol, source and destination matches, and connection-state matching. Selected by `id`. Audit permissive rules, for example `unifi.firewallRules.where(ruleset == \"WAN_IN\" \u0026\u0026 action == \"accept\")`.","private":true,"defaults":"name ruleset","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.firewallZone":{"id":"unifi.firewallZone","name":"unifi.firewallZone","fields":{"defaultZone":{"name":"defaultZone","type":"\u0004","is_mandatory":true,"title":"Whether this is a built-in default zone","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall zone ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Zone name","provider":"go.mondoo.com/cnquery/providers/unifi"},"networkIds":{"name":"networkIds","type":"\u0019\u0007","is_mandatory":true,"title":"Network IDs assigned to this zone","desc":"Deprecated, please use `networks` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"networks":{"name":"networks","type":"\u0019\u001bunifi.network","title":"Networks assigned to this zone","provider":"go.mondoo.com/cnquery/providers/unifi"},"zoneKey":{"name":"zoneKey","type":"\u0007","is_mandatory":true,"title":"Stable zone key identifier","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi firewall zone (zone-based firewall)","desc":"Named grouping of networks used as the source and destination matches for zone-based firewall policies. Selected by `id`. Traverse `networks` to see the member networks.","private":true,"defaults":"name","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.nat":{"id":"unifi.nat","name":"unifi.nat","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the rule is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"NAT rule ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"logging":{"name":"logging","type":"\u0004","is_mandatory":true,"title":"Whether firewall logging is enabled for packets matching this rule","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"NAT rule name, taken from the rule's description field","provider":"go.mondoo.com/cnquery/providers/unifi"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Matched transport protocol (for example \"tcp\", \"udp\", \"tcp_udp\", or","desc":"\"all\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"NAT type","desc":"One of \"source\" (SNAT, rewrites the source address of outbound packets), \"destination\" (DNAT, rewrites the destination of inbound packets), or \"masquerade\" (a form of source NAT that dynamically uses the outbound interface's current IP, the default UniFi NAT behavior).","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi NAT rule","desc":"Network address translation rule on the gateway, from the gateway's NAT configuration. Each rule is selected by `id`. Use `type` to distinguish source NAT (rewrites the source address of outbound traffic), destination NAT (rewrites the destination of inbound traffic), and masquerade (the default many-to-one source NAT that follows the WAN's current address). Review NAT rules alongside port forwards and firewall rules when auditing how traffic crosses the gateway.","private":true,"defaults":"name type","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.network":{"id":"unifi.network","name":"unifi.network","fields":{"clients":{"name":"clients","type":"\u0019\u001bunifi.client","title":"Clients currently on this network","provider":"go.mondoo.com/cnquery/providers/unifi"},"dhcpEnabled":{"name":"dhcpEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the DHCP server is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"dhcpRelayEnabled":{"name":"dhcpRelayEnabled","type":"\u0004","is_mandatory":true,"title":"Whether DHCP relay is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"dhcpStart":{"name":"dhcpStart","type":"\u0007","is_mandatory":true,"title":"First address of the DHCP pool","provider":"go.mondoo.com/cnquery/providers/unifi"},"dhcpStop":{"name":"dhcpStop","type":"\u0007","is_mandatory":true,"title":"Last address of the DHCP pool","provider":"go.mondoo.com/cnquery/providers/unifi"},"dhcpdLeasetime":{"name":"dhcpdLeasetime","type":"\u0005","is_mandatory":true,"title":"DHCP lease time in seconds","provider":"go.mondoo.com/cnquery/providers/unifi"},"dhcpdv6Enabled":{"name":"dhcpdv6Enabled","type":"\u0004","is_mandatory":true,"title":"Whether DHCPv6 is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"domainName":{"name":"domainName","type":"\u0007","is_mandatory":true,"title":"Domain name handed out on this network","provider":"go.mondoo.com/cnquery/providers/unifi"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the network is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"gatewayIp":{"name":"gatewayIp","type":"\u0007","is_mandatory":true,"title":"Gateway IP address for this network","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Network ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"igmpSnooping":{"name":"igmpSnooping","type":"\u0004","is_mandatory":true,"title":"Whether IGMP snooping is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"internetAccessEnabled":{"name":"internetAccessEnabled","type":"\u0004","is_mandatory":true,"title":"Whether internet access is enabled for this network","provider":"go.mondoo.com/cnquery/providers/unifi"},"isNat":{"name":"isNat","type":"\u0004","is_mandatory":true,"title":"Whether NAT is enabled for this network","provider":"go.mondoo.com/cnquery/providers/unifi"},"mdnsEnabled":{"name":"mdnsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether mDNS (multicast DNS) reflection is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Network name","provider":"go.mondoo.com/cnquery/providers/unifi"},"networkGroup":{"name":"networkGroup","type":"\u0007","is_mandatory":true,"title":"Network interface group (LAN, WAN, WAN2)","provider":"go.mondoo.com/cnquery/providers/unifi"},"networkIsolationEnabled":{"name":"networkIsolationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether network isolation is enabled","desc":"When enabled, the network cannot reach other local networks, enforcing segmentation between VLANs.","provider":"go.mondoo.com/cnquery/providers/unifi"},"purpose":{"name":"purpose","type":"\u0007","is_mandatory":true,"title":"Network purpose (corporate, guest, wan, vlan-only, site-vpn)","provider":"go.mondoo.com/cnquery/providers/unifi"},"subnet":{"name":"subnet","type":"\u0007","is_mandatory":true,"title":"Network subnet in CIDR notation (e.g. \"192.168.1.0/24\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"vlan":{"name":"vlan","type":"\u0005","is_mandatory":true,"title":"VLAN ID (0 if not set)","provider":"go.mondoo.com/cnquery/providers/unifi"},"vlanEnabled":{"name":"vlanEnabled","type":"\u0004","is_mandatory":true,"title":"Whether VLAN tagging is enabled for this network","provider":"go.mondoo.com/cnquery/providers/unifi"},"wanType":{"name":"wanType","type":"\u0007","is_mandatory":true,"title":"WAN connection type (dhcp, static, pppoe) (only on WAN interfaces)","provider":"go.mondoo.com/cnquery/providers/unifi"},"wanVlanEnabled":{"name":"wanVlanEnabled","type":"\u0004","is_mandatory":true,"title":"Whether WAN VLAN tagging is enabled (only on WAN interfaces)","provider":"go.mondoo.com/cnquery/providers/unifi"},"wanVlanId":{"name":"wanVlanId","type":"\u0005","is_mandatory":true,"title":"WAN VLAN tag ID (only on WAN interfaces)","provider":"go.mondoo.com/cnquery/providers/unifi"},"wlans":{"name":"wlans","type":"\u0019\u001bunifi.wlan","title":"WLANs bound to this network","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi network and VLAN","desc":"Layer 3 network or VLAN with its subnet, DHCP configuration, gateway addressing, NAT, and isolation settings. Selected by `id`. Audit segmentation and DHCP posture, and traverse `wlans` and `clients` to see what rides on the network.","private":true,"defaults":"name purpose networkGroup subnet vlan","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.portForward":{"id":"unifi.portForward","name":"unifi.portForward","fields":{"dstPort":{"name":"dstPort","type":"\u0007","is_mandatory":true,"title":"External (WAN) port or port range the rule listens on, as a string","desc":"(for example \"8080\" or \"3000-3005\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the rule is enabled; disabled rules are retained in config but","desc":"do not forward traffic","provider":"go.mondoo.com/cnquery/providers/unifi"},"fwd":{"name":"fwd","type":"\u0007","is_mandatory":true,"title":"Internal (LAN) IP address that matching traffic is forwarded to","provider":"go.mondoo.com/cnquery/providers/unifi"},"fwdPort":{"name":"fwdPort","type":"\u0007","is_mandatory":true,"title":"Internal port or port range traffic is forwarded to, as a string","desc":"(for example \"80\" or \"3000-3005\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Port forward ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"logging":{"name":"logging","type":"\u0004","is_mandatory":true,"title":"Whether firewall logging is enabled for packets matching this rule","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Port forward name","provider":"go.mondoo.com/cnquery/providers/unifi"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Matched protocol","desc":"One of \"tcp\", \"udp\", or \"tcp_udp\" (both). Determines which transport protocol the forward applies to.","provider":"go.mondoo.com/cnquery/providers/unifi"},"src":{"name":"src","type":"\u0007","is_mandatory":true,"title":"Permitted WAN source","desc":"Source restriction on the rule. \"any\" allows any external address to reach the forwarded port; otherwise a single IP or CIDR that limits which WAN sources the forward accepts. A value of \"any\" widens exposure and is worth flagging in audits.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi port forwarding rule","desc":"Inbound destination-NAT rule that publishes an internal host and port to the WAN, defined under the gateway's port-forwarding configuration. Each rule is selected by `id`. These rules are the primary way internal services become reachable from the internet, so they are a core target for exposure auditing: enumerate active forwards and confirm the source scope and forwarded target are intended, for example `unifi.portForwards.where(enabled == true \u0026\u0026 src == \"any\")` to find forwards open to any WAN source.","private":true,"defaults":"name","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.radiusProfile":{"id":"unifi.radiusProfile","name":"unifi.radiusProfile","fields":{"accountingEnabled":{"name":"accountingEnabled","type":"\u0004","is_mandatory":true,"title":"Whether RADIUS accounting is enabled for this profile","provider":"go.mondoo.com/cnquery/providers/unifi"},"acctServers":{"name":"acctServers","type":"\u0019\u0007","is_mandatory":true,"title":"Accounting servers, each formatted as \"IP:port\" (default accounting","desc":"port 1813); empty when accounting is not configured","provider":"go.mondoo.com/cnquery/providers/unifi"},"authServers":{"name":"authServers","type":"\u0019\u0007","is_mandatory":true,"title":"Authentication servers, each formatted as \"IP:port\" (default auth port","desc":"1812)","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"RADIUS profile ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Profile name","provider":"go.mondoo.com/cnquery/providers/unifi"},"vlanEnabled":{"name":"vlanEnabled","type":"\u0004","is_mandatory":true,"title":"Whether RADIUS-assigned VLANs are enabled","desc":"When true, VLAN assignment from RADIUS tunnel attributes (Tunnel-Type, Tunnel-Medium-Type, Tunnel-Private-Group-ID) is honored, letting the RADIUS server place authenticated clients on a VLAN.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi RADIUS profile","desc":"RADIUS authentication and accounting server configuration referenced by WLANs (for 802.1X or MAC-based auth), wired 802.1X, and the guest portal. Each profile is selected by `id`. Server entries in `authServers` and `acctServers` are formatted as \"IP:port\". Audit which profiles have accounting enabled and whether RADIUS-assigned VLANs are in use when reviewing network access control.","private":true,"defaults":"name","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.route":{"id":"unifi.route","name":"unifi.route","fields":{"distance":{"name":"distance","type":"\u0005","is_mandatory":true,"title":"Administrative distance (route metric)","desc":"Preference used to break ties when multiple routes reach the same destination. Lower values are preferred over higher ones.","provider":"go.mondoo.com/cnquery/providers/unifi"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the route is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Route ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"interfaceName":{"name":"interfaceName","type":"\u0007","is_mandatory":true,"title":"Egress interface name, set only when staticRouteType is","desc":"\"interface-route\"; empty otherwise","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Route name","provider":"go.mondoo.com/cnquery/providers/unifi"},"network":{"name":"network","type":"\u0007","is_mandatory":true,"title":"Destination network in CIDR notation (for example \"10.20.0.0/16\")","provider":"go.mondoo.com/cnquery/providers/unifi"},"nexthop":{"name":"nexthop","type":"\u0007","is_mandatory":true,"title":"Next-hop gateway address, set only when staticRouteType is","desc":"\"nexthop-route\"; empty otherwise","provider":"go.mondoo.com/cnquery/providers/unifi"},"staticRouteType":{"name":"staticRouteType","type":"\u0007","is_mandatory":true,"title":"Static route type","desc":"One of \"nexthop-route\" (traffic is forwarded to the address in `nexthop`), \"interface-route\" (traffic is sent out the interface named in `interfaceName`), or \"blackhole\" (traffic to `network` is silently discarded).","provider":"go.mondoo.com/cnquery/providers/unifi"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Route category; currently \"static-route\" for manually defined routes","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi static route","desc":"Manually configured route on the gateway, from the gateway routing table. Each route is selected by `id`. Use `staticRouteType` to distinguish next-hop routes (forward to a gateway IP), interface routes (send out a named interface), and blackhole routes (silently discard matching traffic). Review static routes when auditing how traffic to specific networks is directed or dropped.","private":true,"defaults":"name network","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.site":{"id":"unifi.site","name":"unifi.site","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Site description","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Site ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Site name (short identifier)","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi site","desc":"Isolated management domain on the controller with its own devices, networks, clients, and settings. Selected by `id`. Use `name` for the short identifier and `description` for the human-readable label shown in the UniFi UI.","private":true,"defaults":"name description","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings":{"id":"unifi.siteSettings","name":"unifi.siteSettings","fields":{"countryCode":{"name":"countryCode","type":"\u0007","title":"Regulatory country code as an ISO 3166-1 numeric code string (for","desc":"example \"840\" for the United States), governing radio regulatory domain","provider":"go.mondoo.com/cnquery/providers/unifi"},"doh":{"name":"doh","type":"\u001bunifi.siteSettings.doh","title":"DNS over HTTPS (DoH) settings","provider":"go.mondoo.com/cnquery/providers/unifi"},"dpiEnabled":{"name":"dpiEnabled","type":"\u0004","title":"Whether deep packet inspection is enabled site-wide","provider":"go.mondoo.com/cnquery/providers/unifi"},"dpiFingerprintingEnabled":{"name":"dpiFingerprintingEnabled","type":"\u0004","title":"Whether DPI device fingerprinting is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"gateway":{"name":"gateway","type":"\u001bunifi.siteSettings.gateway","title":"Gateway and firewall settings (UPnP, geo-IP filtering, hardware","desc":"offloading)","provider":"go.mondoo.com/cnquery/providers/unifi"},"globalSwitch":{"name":"globalSwitch","type":"\u001bunifi.siteSettings.globalSwitch","title":"Global switch settings (STP, 802.1X port control, DHCP snooping)","provider":"go.mondoo.com/cnquery/providers/unifi"},"guestAccess":{"name":"guestAccess","type":"\u001bunifi.siteSettings.guestAccess","title":"Guest portal and hotspot access settings","provider":"go.mondoo.com/cnquery/providers/unifi"},"mgmt":{"name":"mgmt","type":"\u001bunifi.siteSettings.mgmt","title":"Management settings (SSH access, auto-upgrade, device discovery)","provider":"go.mondoo.com/cnquery/providers/unifi"},"netflow":{"name":"netflow","type":"\u001bunifi.siteSettings.netflow","title":"NetFlow / traffic-flow export settings","provider":"go.mondoo.com/cnquery/providers/unifi"},"ntp":{"name":"ntp","type":"\u001bunifi.siteSettings.ntp","title":"NTP time-server settings","provider":"go.mondoo.com/cnquery/providers/unifi"},"remoteSyslog":{"name":"remoteSyslog","type":"\u001bunifi.siteSettings.remoteSyslog","title":"Remote syslog forwarding settings","provider":"go.mondoo.com/cnquery/providers/unifi"},"sslInspectionState":{"name":"sslInspectionState","type":"\u0007","title":"SSL / deep inspection state","desc":"One of \"off\", \"simple\", or \"advanced\", controlling how deeply the gateway inspects TLS traffic for the IDS/IPS and application-visibility engines.","provider":"go.mondoo.com/cnquery/providers/unifi"},"teleport":{"name":"teleport","type":"\u001bunifi.siteSettings.teleport","title":"Teleport VPN settings","provider":"go.mondoo.com/cnquery/providers/unifi"},"threatManagement":{"name":"threatManagement","type":"\u001bunifi.siteSettings.threatManagement","title":"IDS/IPS and threat management settings","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi site-level settings","desc":"Configuration scoped to the connected site, grouped into sub-resources for management, gateway/firewall, IDS/IPS, guest access, switching, logging, time, DNS, flow export, and remote access, plus site-wide deep-inspection and country toggles. The central place to audit a site's security configuration.","private":true,"provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings.doh":{"id":"unifi.siteSettings.doh","name":"unifi.siteSettings.doh","fields":{"state":{"name":"state","type":"\u0007","title":"DoH state","desc":"One of \"off\" (DoH disabled), \"auto\" (controller-selected providers), \"manual\" (a chosen provider), or \"custom\" (user-supplied servers).","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi DNS over HTTPS settings","desc":"DNS over HTTPS (DoH) configuration from the site's `doh` settings block, controlling whether the gateway resolves DNS over an encrypted HTTPS channel.","private":true,"defaults":"state","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings.gateway":{"id":"unifi.siteSettings.gateway","name":"unifi.siteSettings.gateway","fields":{"broadcastPing":{"name":"broadcastPing","type":"\u0004","title":"Whether the gateway responds to broadcast pings","desc":"When true, the gateway answers ICMP echo requests sent to broadcast addresses, which can amplify denial-of-service traffic.","provider":"go.mondoo.com/cnquery/providers/unifi"},"echoServer":{"name":"echoServer","type":"\u0007","title":"Echo server used for latency (WAN) monitoring","provider":"go.mondoo.com/cnquery/providers/unifi"},"geoIpFilteringBlock":{"name":"geoIpFilteringBlock","type":"\u0007","title":"Geo-IP filtering mode","desc":"One of \"block\" (block the listed countries) or \"allow\" (allow only the listed countries and block all others).","provider":"go.mondoo.com/cnquery/providers/unifi"},"geoIpFilteringCountries":{"name":"geoIpFilteringCountries","type":"\u0007","title":"Filtered countries (comma-separated ISO 3166-1 alpha-2 codes)","desc":"Comma-separated list of two-letter country codes the filter applies to (for example \"CN,RU,KP\"). Empty when geo-IP filtering is not configured.","provider":"go.mondoo.com/cnquery/providers/unifi"},"geoIpFilteringEnabled":{"name":"geoIpFilteringEnabled","type":"\u0004","title":"Whether geo-IP (country) filtering is enabled","desc":"When true, the gateway blocks or allows traffic based on the source or destination country, per geoIpFilteringBlock and geoIpFilteringCountries.","provider":"go.mondoo.com/cnquery/providers/unifi"},"geoIpFilteringTrafficDirection":{"name":"geoIpFilteringTrafficDirection","type":"\u0007","title":"Geo-IP filtering traffic direction","desc":"One of \"both\", \"ingress\" (inbound traffic only), or \"egress\" (outbound traffic only).","provider":"go.mondoo.com/cnquery/providers/unifi"},"mssClamp":{"name":"mssClamp","type":"\u0007","title":"MSS clamp mode","desc":"One of \"auto\" (derive the clamp value automatically), \"custom\" (use mssClampMss), or \"disabled\".","provider":"go.mondoo.com/cnquery/providers/unifi"},"mssClampMss":{"name":"mssClampMss","type":"\u0005","title":"MSS clamp value in bytes","desc":"TCP maximum segment size the gateway clamps to. Only meaningful when mssClamp is \"custom\".","provider":"go.mondoo.com/cnquery/providers/unifi"},"offloadAccounting":{"name":"offloadAccounting","type":"\u0004","title":"Whether hardware offload accounting is enabled","desc":"Controls whether traffic-accounting statistics are collected for hardware-offloaded flows.","provider":"go.mondoo.com/cnquery/providers/unifi"},"offloadL2Blocking":{"name":"offloadL2Blocking","type":"\u0004","title":"Whether L2 blocking hardware offload is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"offloadSch":{"name":"offloadSch","type":"\u0004","title":"Whether hardware offload (flow acceleration) is enabled","desc":"When true, the gateway accelerates routed flows in hardware. Some deep-inspection features are bypassed for offloaded flows.","provider":"go.mondoo.com/cnquery/providers/unifi"},"receiveRedirects":{"name":"receiveRedirects","type":"\u0004","title":"Whether the gateway accepts ICMP redirects","desc":"When true, the gateway honors inbound ICMP redirect messages, which can be abused to alter its routing table. Hardened configurations set this false.","provider":"go.mondoo.com/cnquery/providers/unifi"},"sendRedirects":{"name":"sendRedirects","type":"\u0004","title":"Whether the gateway sends ICMP redirects","provider":"go.mondoo.com/cnquery/providers/unifi"},"synCookies":{"name":"synCookies","type":"\u0004","title":"Whether SYN cookies (SYN-flood protection) are enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"upnpEnabled":{"name":"upnpEnabled","type":"\u0004","title":"Whether UPnP is enabled","desc":"When enabled, internal hosts can open inbound WAN ports on demand via UPnP IGD, a common source of unintended internet exposure.","provider":"go.mondoo.com/cnquery/providers/unifi"},"upnpNatPmpEnabled":{"name":"upnpNatPmpEnabled","type":"\u0004","title":"Whether UPnP NAT-PMP is enabled","desc":"NAT-PMP is Apple's port-mapping protocol offered alongside UPnP IGD; when true it lets internal hosts request inbound WAN port mappings.","provider":"go.mondoo.com/cnquery/providers/unifi"},"upnpSecureMode":{"name":"upnpSecureMode","type":"\u0004","title":"Whether UPnP secure mode is enabled","desc":"When true, UPnP port mappings are restricted so a host can only map ports to its own IP address, limiting spoofed-mapping abuse.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi gateway settings","desc":"Gateway and firewall hardening toggles from the site's `usg` settings block, covering country (geo-IP) filtering, UPnP/NAT-PMP, ICMP redirect handling, broadcast-ping responses, SYN-flood protection, MSS clamping, and hardware flow offloading. Audit exposure, for example that `upnpEnabled` is false and `synCookies` is true. Geo-IP fields fall back to the dedicated `usg_geo` block on UniFi OS 10.3 and later, where the inline geo-IP settings are no longer present.","private":true,"provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings.globalSwitch":{"id":"unifi.siteSettings.globalSwitch","name":"unifi.siteSettings.globalSwitch","fields":{"dhcpSnoop":{"name":"dhcpSnoop","type":"\u0004","title":"Whether DHCP snooping is enabled","desc":"When true, switches drop DHCP server responses on untrusted ports, defending against rogue DHCP servers and man-in-the-middle attacks.","provider":"go.mondoo.com/cnquery/providers/unifi"},"dot1xFallbackNetwork":{"name":"dot1xFallbackNetwork","type":"\u001bunifi.network","title":"Network clients fall back to when 802.1X authentication fails","desc":"Resolves the configured fallback network config to a unifi.network, where devices failing 802.1X authentication are placed.","provider":"go.mondoo.com/cnquery/providers/unifi"},"dot1xFallbackNetworkId":{"name":"dot1xFallbackNetworkId","type":"\u0007","title":"802.1X fallback network ID","desc":"Deprecated, please use `dot1xFallbackNetwork` instead. Holds the raw `dot1x_fallback_networkconf_id` value.","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"dot1xPortctrlEnabled":{"name":"dot1xPortctrlEnabled","type":"\u0004","title":"Whether 802.1X port-based access control is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"flowctrlEnabled":{"name":"flowctrlEnabled","type":"\u0004","title":"Whether flow control is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"jumboframeEnabled":{"name":"jumboframeEnabled","type":"\u0004","title":"Whether jumbo frames are enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"stpVersion":{"name":"stpVersion","type":"\u0007","title":"Spanning-tree protocol version","desc":"One of \"stp\", \"rstp\" (rapid spanning tree), or \"disabled\".","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi global switch settings","desc":"Site-wide defaults applied to managed switches from the `global_switch` settings block, covering spanning tree, flow control, jumbo frames, 802.1X port-based access control with its fallback network, and DHCP snooping. Audit switching hardening, for example that `dhcpSnoop` is enabled to block rogue DHCP servers.","private":true,"provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings.guestAccess":{"id":"unifi.siteSettings.guestAccess","name":"unifi.siteSettings.guestAccess","fields":{"auth":{"name":"auth","type":"\u0007","title":"Authentication method","desc":"One of \"none\" (open, no authentication), \"hotspot\" (portal login via password, voucher, RADIUS, or payment), \"facebook_wifi\", or \"custom\" (external captive portal).","provider":"go.mondoo.com/cnquery/providers/unifi"},"ecEnabled":{"name":"ecEnabled","type":"\u0004","title":"Whether an external captive portal is enabled","desc":"Reflects `ec_enabled`. When true, guest authentication is handed off to an externally hosted captive portal.","provider":"go.mondoo.com/cnquery/providers/unifi"},"expireNumber":{"name":"expireNumber","type":"\u0005","title":"Guest session expiration in minutes","provider":"go.mondoo.com/cnquery/providers/unifi"},"facebookEnabled":{"name":"facebookEnabled","type":"\u0004","title":"Whether Facebook login is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"googleEnabled":{"name":"googleEnabled","type":"\u0004","title":"Whether Google login is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"passwordEnabled":{"name":"passwordEnabled","type":"\u0004","title":"Whether simple password (shared passphrase) authentication is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"portalCustomizedTitle":{"name":"portalCustomizedTitle","type":"\u0007","title":"Customized portal title","provider":"go.mondoo.com/cnquery/providers/unifi"},"portalCustomizedTosEnabled":{"name":"portalCustomizedTosEnabled","type":"\u0004","title":"Whether a Terms of Service acceptance is required","provider":"go.mondoo.com/cnquery/providers/unifi"},"portalEnabled":{"name":"portalEnabled","type":"\u0004","title":"Whether the guest portal is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"radiusEnabled":{"name":"radiusEnabled","type":"\u0004","title":"Whether RADIUS authentication is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"redirectEnabled":{"name":"redirectEnabled","type":"\u0004","title":"Whether redirect after authentication is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"redirectHttps":{"name":"redirectHttps","type":"\u0004","title":"Whether HTTPS redirect is enabled","desc":"When true, the guest portal redirect is served over HTTPS.","provider":"go.mondoo.com/cnquery/providers/unifi"},"voucherEnabled":{"name":"voucherEnabled","type":"\u0004","title":"Whether voucher authentication is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi guest access settings","desc":"Guest portal and hotspot configuration from the site's `guest_access` settings block, covering the authentication method, password and voucher/RADIUS options, social logins, external captive portal, HTTPS redirect, and session expiration. Audit how guests are authenticated, for example checking that `auth` is not \"none\" and that a weak shared `passwordEnabled` mode is not in use.","private":true,"provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings.mgmt":{"id":"unifi.siteSettings.mgmt","name":"unifi.siteSettings.mgmt","fields":{"advancedFeatureEnabled":{"name":"advancedFeatureEnabled","type":"\u0004","title":"Whether advanced features are enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"alertEnabled":{"name":"alertEnabled","type":"\u0004","title":"Whether alert notifications are enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"autoUpgrade":{"name":"autoUpgrade","type":"\u0004","title":"Whether automatic firmware upgrades are enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"autoUpgradeHour":{"name":"autoUpgradeHour","type":"\u0005","title":"Hour of day for scheduled auto-upgrade","desc":"Local-time hour (0-23) at which the controller applies scheduled automatic firmware upgrades. Only meaningful when autoUpgrade is true.","provider":"go.mondoo.com/cnquery/providers/unifi"},"debugToolsEnabled":{"name":"debugToolsEnabled","type":"\u0004","title":"Whether debug tools are enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"directConnectEnabled":{"name":"directConnectEnabled","type":"\u0004","title":"Whether direct (remote) connect is enabled","desc":"Controls remote management of the controller through Ubiquiti's cloud relay. When true, the console is reachable from the internet via the UniFi cloud, an important remote-exposure consideration.","provider":"go.mondoo.com/cnquery/providers/unifi"},"discoverable":{"name":"discoverable","type":"\u0004","title":"Whether the controller is discoverable on the network","desc":"When true, the controller answers UBNT device-discovery probes on the local network, aiding adoption but also revealing its presence.","provider":"go.mondoo.com/cnquery/providers/unifi"},"ledEnabled":{"name":"ledEnabled","type":"\u0004","title":"Whether device status LEDs are enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"sshEnabled":{"name":"sshEnabled","type":"\u0004","title":"Whether SSH access to adopted devices is enabled","desc":"Reflects the `x_ssh_enabled` management flag. When true, the controller opens SSH on managed devices (access points, switches, gateways) for administrative logins, widening the remote-access attack surface.","provider":"go.mondoo.com/cnquery/providers/unifi"},"sshPasswordAuthEnabled":{"name":"sshPasswordAuthEnabled","type":"\u0004","title":"Whether SSH password authentication is enabled","desc":"Reflects `x_ssh_auth_password_enabled`. When true, devices accept SSH password logins in addition to key authentication, a weaker posture than key-only access. Only meaningful when sshEnabled is true.","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifiIdpEnabled":{"name":"unifiIdpEnabled","type":"\u0004","title":"Whether UniFi Identity (SSO/IdP) is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"wifimanEnabled":{"name":"wifimanEnabled","type":"\u0004","title":"Whether WiFiman is enabled","desc":"WiFiman is Ubiquiti's network analysis and speed-test service. When enabled, the site participates in WiFiman connectivity and measurement features.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi site management settings","desc":"Site-level management and remote-access toggles from the site's `mgmt` settings block, covering SSH access to adopted devices, alert notifications, device status LEDs, network discoverability, automatic firmware upgrades, and controller integrations (WiFiman, direct/remote connect, UniFi Identity). Audit remote-access exposure, for example that `sshEnabled` is false, or that when SSH is on `sshPasswordAuthEnabled` is false so only key-based logins are accepted.","private":true,"provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings.netflow":{"id":"unifi.siteSettings.netflow","name":"unifi.siteSettings.netflow","fields":{"enabled":{"name":"enabled","type":"\u0004","title":"Whether NetFlow/IPFIX export is enabled for the site","provider":"go.mondoo.com/cnquery/providers/unifi"},"exportFrequency":{"name":"exportFrequency","type":"\u0005","title":"Interval between flow-record exports, in seconds","provider":"go.mondoo.com/cnquery/providers/unifi"},"port":{"name":"port","type":"\u0005","title":"UDP port on the collector that flow records are sent to","desc":"The destination port of the external collector (commonly 2055, or 4739 for standards-based IPFIX). 0 when export is disabled or unconfigured.","provider":"go.mondoo.com/cnquery/providers/unifi"},"refreshRate":{"name":"refreshRate","type":"\u0005","title":"Interval between template re-sends, in seconds","desc":"How often the exporter resends the flow template that a collector needs to decode subsequent records (applies to the template-based v9 and IPFIX formats). Measured in seconds.","provider":"go.mondoo.com/cnquery/providers/unifi"},"version":{"name":"version","type":"\u0005","title":"Flow-export protocol version","desc":"The export format version: 5 for NetFlow v5, 9 for NetFlow v9, or 10 for IPFIX (the IETF standardization of NetFlow v9).","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"NetFlow/IPFIX flow-export settings","desc":"Site-wide flow-export configuration that streams traffic records from the gateway to an external NetFlow/IPFIX collector (a SIEM or flow analyzer). Populated from the `netflow` settings block. Use it to confirm that traffic telemetry is being exported for monitoring, and to check the collector destination and protocol version.","private":true,"defaults":"enabled port version refreshRate exportFrequency","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings.ntp":{"id":"unifi.siteSettings.ntp","name":"unifi.siteSettings.ntp","fields":{"ntpServer1":{"name":"ntpServer1","type":"\u0007","title":"Primary NTP server","provider":"go.mondoo.com/cnquery/providers/unifi"},"ntpServer2":{"name":"ntpServer2","type":"\u0007","title":"Second NTP server","provider":"go.mondoo.com/cnquery/providers/unifi"},"ntpServer3":{"name":"ntpServer3","type":"\u0007","title":"Third NTP server","provider":"go.mondoo.com/cnquery/providers/unifi"},"ntpServer4":{"name":"ntpServer4","type":"\u0007","title":"Fourth NTP server","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi NTP settings","desc":"Configured NTP time servers from the site's `ntp` settings block. Up to four servers are exposed; empty slots indicate fewer than four are configured. Accurate time keeps log timestamps and certificate validation reliable.","private":true,"defaults":"ntpServer1 ntpServer2 ntpServer3 ntpServer4","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings.remoteSyslog":{"id":"unifi.siteSettings.remoteSyslog","name":"unifi.siteSettings.remoteSyslog","fields":{"enabled":{"name":"enabled","type":"\u0004","title":"Whether remote syslog forwarding is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"ip":{"name":"ip","type":"\u0007","title":"Syslog server IP address","provider":"go.mondoo.com/cnquery/providers/unifi"},"logAllContents":{"name":"logAllContents","type":"\u0004","title":"Whether all log contents are forwarded (verbose logging)","provider":"go.mondoo.com/cnquery/providers/unifi"},"port":{"name":"port","type":"\u0007","title":"Syslog server port","desc":"Destination UDP/TCP port on the syslog collector (commonly \"514\"), stored as a string.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi remote syslog settings","desc":"Remote syslog forwarding configuration from the site's `rsyslogd` settings block. Audit whether log shipping is enabled and pointed at the expected collector, for example that `enabled` is true and `ip` matches the SIEM address.","private":true,"defaults":"enabled ip port logAllContents","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings.teleport":{"id":"unifi.siteSettings.teleport","name":"unifi.siteSettings.teleport","fields":{"enabled":{"name":"enabled","type":"\u0004","title":"Whether Teleport remote-access VPN is enabled for the site","provider":"go.mondoo.com/cnquery/providers/unifi"},"subnetCidr":{"name":"subnetCidr","type":"\u0007","title":"Address pool assigned to Teleport clients, in CIDR notation","desc":"The subnet from which connected Teleport clients receive their VPN IP addresses, for example 192.168.2.0/24.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"Teleport remote-access VPN settings","desc":"Configuration for Teleport, the WireGuard-based zero-configuration remote-access VPN that lets users connect to the site through an invite link without manual client setup. Read from the `teleport` settings block. Use it to confirm whether Teleport remote access is enabled and which address pool its clients draw from.","private":true,"defaults":"enabled subnetCidr","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.siteSettings.threatManagement":{"id":"unifi.siteSettings.threatManagement","name":"unifi.siteSettings.threatManagement","fields":{"contentFilteringBlockingPageEnabled":{"name":"contentFilteringBlockingPageEnabled","type":"\u0004","title":"Whether the content-filtering blocking page is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"dnsFiltering":{"name":"dnsFiltering","type":"\u0004","title":"Whether DNS filtering is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"enabled":{"name":"enabled","type":"\u0004","title":"Whether IDS/IPS is enabled","desc":"Master on/off for the threat-management engine. Check ipsMode to distinguish detect-only from prevention.","provider":"go.mondoo.com/cnquery/providers/unifi"},"enabledCategories":{"name":"enabledCategories","type":"\u0019\u0007","title":"Enabled IPS threat categories","desc":"Suricata rule category identifiers the engine acts on, for example \"emerging-malware\", \"botcc\", \"emerging-exploit\", \"phishing\", \"tor\", and \"dark-web-blocker-list\". Empty when no categories are selected.","provider":"go.mondoo.com/cnquery/providers/unifi"},"enabledNetworks":{"name":"enabledNetworks","type":"\u0019\u0007","title":"Network IDs with IPS enabled","desc":"Identifiers of the site networks the threat-management engine inspects, matching unifi.network id values.","provider":"go.mondoo.com/cnquery/providers/unifi"},"endpointScanning":{"name":"endpointScanning","type":"\u0004","title":"Whether endpoint scanning is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"honeypotEnabled":{"name":"honeypotEnabled","type":"\u0004","title":"Whether the honeypot is enabled","desc":"When true, the gateway runs a honeypot that flags any client touching an unused internal IP as potentially compromised.","provider":"go.mondoo.com/cnquery/providers/unifi"},"ipsMode":{"name":"ipsMode","type":"\u0007","title":"Detection mode","desc":"One of \"ids\" (detect and log only), \"ips\" (detect and block), \"ipsInline\" (inline prevention), or \"disabled\".","provider":"go.mondoo.com/cnquery/providers/unifi"}},"title":"UniFi IDS/IPS and threat management settings","desc":"Intrusion detection and prevention configuration from the site's `ips` settings block, covering the detection mode, DNS filtering, endpoint scanning, honeypot, the content-filtering block page, and the set of enabled Suricata threat categories and protected networks. Audit whether protection is active, for example that `enabled` is true and `ipsMode` is \"ips\" (or \"ipsInline\") so threats are blocked rather than only logged.","private":true,"provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.trafficRoute":{"id":"unifi.trafficRoute","name":"unifi.trafficRoute","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Route description","provider":"go.mondoo.com/cnquery/providers/unifi"},"domains":{"name":"domains","type":"\u0019\u0007","is_mandatory":true,"title":"Domains matched when matchingTarget is DOMAIN","provider":"go.mondoo.com/cnquery/providers/unifi"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the route is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Traffic route ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"killSwitchEnabled":{"name":"killSwitchEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the kill switch is enabled","desc":"When enabled, matched traffic is dropped if the route's path (for example a VPN tunnel) is down, preventing leakage over the default route.","provider":"go.mondoo.com/cnquery/providers/unifi"},"matchingTarget":{"name":"matchingTarget","type":"\u0007","is_mandatory":true,"title":"What the route matches on (DOMAIN, REGION, IP, INTERNET, etc.)","provider":"go.mondoo.com/cnquery/providers/unifi"},"network":{"name":"network","type":"\u001bunifi.network","title":"Network the matched traffic is routed to","provider":"go.mondoo.com/cnquery/providers/unifi"},"networkId":{"name":"networkId","type":"\u0007","is_mandatory":true,"title":"Target network ID","desc":"Deprecated, please use `network` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"nextHop":{"name":"nextHop","type":"\u0007","is_mandatory":true,"title":"Next hop the matched traffic is routed to","provider":"go.mondoo.com/cnquery/providers/unifi"},"regions":{"name":"regions","type":"\u0019\u0007","is_mandatory":true,"title":"Regions matched when matchingTarget is REGION","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi policy-based traffic route","desc":"Route that steers matched traffic to a specific next hop or VPN tunnel, selected by domain, region, or network. Selected by `id`. The `killSwitchEnabled` flag blocks matched traffic when the route's path is unavailable.","private":true,"defaults":"description","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.vpnClient":{"id":"unifi.vpnClient","name":"unifi.vpnClient","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the VPN client connection is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"VPN network identifier","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VPN network name","provider":"go.mondoo.com/cnquery/providers/unifi"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"VPN protocol","desc":"The controller's raw vpn_type value for the network, for example \"ipsec-vpn\" or \"openvpn\".","provider":"go.mondoo.com/cnquery/providers/unifi"},"remoteSubnets":{"name":"remoteSubnets","type":"\u0019\u0007","is_mandatory":true,"title":"Remote subnets reachable through the tunnel","provider":"go.mondoo.com/cnquery/providers/unifi"},"serverAddress":{"name":"serverAddress","type":"\u0007","is_mandatory":true,"title":"Remote VPN server address this client connects to","desc":"The peer endpoint the client dials, taken from the OpenVPN remote host or, if unset, the OpenVPN remote address. May be empty for protocols that do not record a remote host here.","provider":"go.mondoo.com/cnquery/providers/unifi"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Live connection status reported by the controller","desc":"Currently always empty, because the network listing does not include real-time tunnel state.","provider":"go.mondoo.com/cnquery/providers/unifi"},"tunnelType":{"name":"tunnelType","type":"\u0007","is_mandatory":true,"title":"Tunnel topology","desc":"Always \"site-to-site\" for entries in this collection.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi site-to-site VPN client connection","desc":"A site-VPN network configured as a client that dials out to a remote VPN server, derived from networks with purpose \"site-vpn\" whose mode connects outbound. Selected by `id`. Exposes the protocol, the remote server address it connects to, and the remote subnets reachable through the tunnel. Use it to audit outbound site-to-site tunnels, for example `unifi.vpnClients.where(enabled)`.","private":true,"defaults":"name protocol","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.vpnServer":{"id":"unifi.vpnServer","name":"unifi.vpnServer","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the VPN server connection is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"VPN network identifier","provider":"go.mondoo.com/cnquery/providers/unifi"},"localSubnets":{"name":"localSubnets","type":"\u0019\u0007","is_mandatory":true,"title":"Local subnets advertised to remote peers","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VPN network name","provider":"go.mondoo.com/cnquery/providers/unifi"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"VPN protocol","desc":"The controller's raw vpn_type value for the network, for example \"ipsec-vpn\" or \"openvpn\".","provider":"go.mondoo.com/cnquery/providers/unifi"},"remoteSubnets":{"name":"remoteSubnets","type":"\u0019\u0007","is_mandatory":true,"title":"Remote subnets reachable through the tunnel","provider":"go.mondoo.com/cnquery/providers/unifi"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Live connection status reported by the controller","desc":"Currently always empty, because the network listing does not include real-time tunnel state.","provider":"go.mondoo.com/cnquery/providers/unifi"},"tunnelType":{"name":"tunnelType","type":"\u0007","is_mandatory":true,"title":"Tunnel topology","desc":"Always \"site-to-site\" for entries in this collection.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi site-to-site VPN server connection","desc":"A site-VPN network configured as a server that accepts incoming connections from remote peers, derived from networks with purpose \"site-vpn\" that are not outbound clients. Selected by `id`. Exposes the protocol, the local subnets advertised to peers, and the remote subnets reachable from them. Use it to audit inbound site-to-site tunnels and the routes they expose.","private":true,"defaults":"name protocol","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.wlan":{"id":"unifi.wlan","name":"unifi.wlan","fields":{"apGroups":{"name":"apGroups","type":"\u0019\u001bunifi.apGroup","title":"AP groups this WLAN is broadcast on","provider":"go.mondoo.com/cnquery/providers/unifi"},"broadcastFilterEnabled":{"name":"broadcastFilterEnabled","type":"\u0004","is_mandatory":true,"title":"Whether broadcast/multicast filtering is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"bssTransition":{"name":"bssTransition","type":"\u0004","is_mandatory":true,"title":"Whether 802.11v BSS transition is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"clients":{"name":"clients","type":"\u0019\u001bunifi.client","title":"Clients currently connected to this WLAN","provider":"go.mondoo.com/cnquery/providers/unifi"},"dpiEnabled":{"name":"dpiEnabled","type":"\u0004","is_mandatory":true,"title":"Whether deep packet inspection is enabled for this WLAN","provider":"go.mondoo.com/cnquery/providers/unifi"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the WLAN is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"fastRoamingEnabled":{"name":"fastRoamingEnabled","type":"\u0004","is_mandatory":true,"title":"Whether fast roaming (802.11r) is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"groupRekeyInterval":{"name":"groupRekeyInterval","type":"\u0005","is_mandatory":true,"title":"WPA group rekey interval in seconds (0 if not set)","provider":"go.mondoo.com/cnquery/providers/unifi"},"hideSsid":{"name":"hideSsid","type":"\u0004","is_mandatory":true,"title":"Whether SSID broadcast is hidden","provider":"go.mondoo.com/cnquery/providers/unifi"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Controller object ID of the WLAN","provider":"go.mondoo.com/cnquery/providers/unifi"},"isGuest":{"name":"isGuest","type":"\u0004","is_mandatory":true,"title":"Whether this is a guest network","provider":"go.mondoo.com/cnquery/providers/unifi"},"l2Isolation":{"name":"l2Isolation","type":"\u0004","is_mandatory":true,"title":"Whether Layer 2 client isolation is enabled","desc":"When enabled, clients on the WLAN cannot reach each other, limiting lateral movement on the wireless segment.","provider":"go.mondoo.com/cnquery/providers/unifi"},"macFilterEnabled":{"name":"macFilterEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the MAC filter is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"macFilterList":{"name":"macFilterList","type":"\u0019\u0007","is_mandatory":true,"title":"MAC addresses in the WLAN MAC filter list","provider":"go.mondoo.com/cnquery/providers/unifi"},"macFilterPolicy":{"name":"macFilterPolicy","type":"\u0007","is_mandatory":true,"title":"MAC filter policy (allow=allow-list, deny=block-list)","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Network name broadcast as the SSID","provider":"go.mondoo.com/cnquery/providers/unifi"},"network":{"name":"network","type":"\u001bunifi.network","title":"Network this WLAN is associated with (UniFi OS 10.3+)","provider":"go.mondoo.com/cnquery/providers/unifi"},"pmfMode":{"name":"pmfMode","type":"\u0007","is_mandatory":true,"title":"Protected Management Frames mode (disabled, optional, required)","provider":"go.mondoo.com/cnquery/providers/unifi"},"privatePresharedKeysEnabled":{"name":"privatePresharedKeysEnabled","type":"\u0004","is_mandatory":true,"title":"Whether private pre-shared keys (PPSK) are enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"proxyArp":{"name":"proxyArp","type":"\u0004","is_mandatory":true,"title":"Whether Proxy ARP is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"radiusMacAuthEnabled":{"name":"radiusMacAuthEnabled","type":"\u0004","is_mandatory":true,"title":"Whether MAC-based RADIUS authentication is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"radiusProfile":{"name":"radiusProfile","type":"\u001bunifi.radiusProfile","title":"RADIUS profile used for authentication (wpaeap or MAC auth)","provider":"go.mondoo.com/cnquery/providers/unifi"},"scheduleEnabled":{"name":"scheduleEnabled","type":"\u0004","is_mandatory":true,"title":"Whether SSID time scheduling is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"security":{"name":"security","type":"\u0007","is_mandatory":true,"title":"Authentication and encryption mode for the SSID","desc":"Comes from the `security` field of the WLAN config. Common values: \"open\" (no authentication, no encryption), \"wpapsk\" (WPA/WPA2/WPA3 Personal, pre-shared key), and \"wpaeap\" (WPA Enterprise, 802.1X with a RADIUS server). Legacy controllers may also report \"wep\" (deprecated WEP, cryptographically broken) and \"osen\" (OSU Server-only authenticated encryption, used by Hotspot 2.0 / Passpoint online sign-up). \"open\" and \"wep\" are the insecure states worth flagging, for example `unifi.wlans.where(security == \"open\" || security == \"wep\")`.","provider":"go.mondoo.com/cnquery/providers/unifi"},"uapsdEnabled":{"name":"uapsdEnabled","type":"\u0004","is_mandatory":true,"title":"Whether U-APSD (WMM power save) is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"vlan":{"name":"vlan","type":"\u0005","is_mandatory":true,"title":"VLAN ID (0 if not set or untagged)","desc":"On UniFi OS 10.3+ the VLAN is derived from the associated network rather than carried on the WLAN directly.","provider":"go.mondoo.com/cnquery/providers/unifi"},"wlanGroup":{"name":"wlanGroup","type":"\u001bunifi.wlanGroup","title":"WLAN group this WLAN belongs to","provider":"go.mondoo.com/cnquery/providers/unifi"},"wlanGroupId":{"name":"wlanGroupId","type":"\u0007","is_mandatory":true,"title":"WLAN group ID","desc":"Deprecated, please use `wlanGroup` instead","provider":"go.mondoo.com/cnquery/providers/unifi","maturity":"deprecated"},"wpa3Enhanced192":{"name":"wpa3Enhanced192","type":"\u0004","is_mandatory":true,"title":"Whether WPA3-Enterprise 192-bit mode is enabled","provider":"go.mondoo.com/cnquery/providers/unifi"},"wpa3Support":{"name":"wpa3Support","type":"\u0004","is_mandatory":true,"title":"Whether WPA3 is offered on the SSID","desc":"When true the SSID advertises WPA3-SAE (Personal) or WPA3-Enterprise key management in addition to, or instead of, WPA2.","provider":"go.mondoo.com/cnquery/providers/unifi"},"wpa3Transition":{"name":"wpa3Transition","type":"\u0004","is_mandatory":true,"title":"Whether WPA3 transition mode is enabled","desc":"Allows WPA2 and WPA3 clients on the same SSID. Weaker than WPA3-only because it keeps a WPA2 path open.","provider":"go.mondoo.com/cnquery/providers/unifi"},"wpaEnc":{"name":"wpaEnc","type":"\u0007","is_mandatory":true,"title":"WPA encryption cipher (ccmp=AES, gcmp256, etc.)","provider":"go.mondoo.com/cnquery/providers/unifi"},"wpaMode":{"name":"wpaMode","type":"\u0007","is_mandatory":true,"title":"WPA generation negotiated on the SSID","desc":"Selects which WPA key-management generation clients use. Typically \"auto\", \"wpa1\" (original WPA / TKIP-era), or \"wpa2\". WPA3 is not expressed here; it is enabled through wpa3Support and wpa3Transition.","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi wireless network (WLAN)","desc":"Broadcast SSID with its security and encryption configuration, VLAN assignment, and roaming, filtering, and isolation options. Selected by `id`. Audit for weak or open security, for example `unifi.wlans.where(security == \"open\")` or `unifi.wlans.where(security == \"wep\")`.","private":true,"defaults":"name security","provider":"go.mondoo.com/cnquery/providers/unifi"},"unifi.wlanGroup":{"id":"unifi.wlanGroup","name":"unifi.wlanGroup","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"WLAN group ID","provider":"go.mondoo.com/cnquery/providers/unifi"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"WLAN group name","provider":"go.mondoo.com/cnquery/providers/unifi"}},"init":{"args":[{"name":"id","type":"\u0007"}]},"title":"UniFi WLAN group","desc":"Named group that WLANs can belong to. Selected by `id`; use `name` for the human-readable label.","private":true,"defaults":"name","provider":"go.mondoo.com/cnquery/providers/unifi"}}}