vcf_esxi_firewall

State module for ESXi firewall rules.

saltext.vcf.states.vcf_esxi_firewall.rule_enabled(name, enabled=True, allowed_ips=None, all_ip=None, profile=None)

Ensure firewall rule name matches the desired enabled / allowed-IP state.

allowed_ips and all_ip are optional — when omitted the allowed-host portion is left untouched.

saltext.vcf.states.vcf_esxi_firewall.rule_disabled(name, profile=None)

Shortcut for rule_enabled(name, enabled=False).

saltext.vcf.states.vcf_esxi_firewall.global_enabled(name, enabled=True, profile=None)

Ensure the ESXi host firewall’s global enable state matches enabled.

Equivalent to esxcli network firewall set --enabled=<true|false>. Wraps HostFirewallSystem.EnableFirewall / .DisableFirewall. Use with care — disabling the firewall opens every port on every ruleset regardless of individual rule_enabled state.