{
  "id": "b06e8738-481b-4fa4-86c8-344d5af00311",
  "name": "Production Firewall 96",
  "folder": "example-folder",
  "position": "post",
  "from": [
    "example-from_item",
    "example-from_item",
    "example-from_item"
  ],
  "to": [
    "example-to_item",
    "example-to_item"
  ],
  "source": [
    "example-source_item"
  ],
  "destination": [
    "example-destination_item",
    "example-destination_item"
  ],
  "source_user": [
    "jane.doe",
    "jsmith"
  ],
  "application": [
    "dns",
    "ssl"
  ],
  "service": [
    "example-service_item",
    "example-service_item",
    "example-service_item"
  ],
  "category": [
    "advanced",
    "default",
    "standard"
  ],
  "action": "deny",
  "log_setting": "example-log_setting",
  "profile_setting": {
    "group": [
      "example-group_item"
    ]
  },
  "disabled": false,
  "description": "For investigation incident activity allowed configured endpoint on alert endpoint malware configured.",
  "tag": [
    "critical-asset",
    "monitored"
  ]
}