Azure Firewall Policy: Update IDPS Profiles to new profiles

src/azure-firewall/HISTORY.rst

@@ -3,6 +3,11 @@
 Release History
 ===============
 
+2.1.0
+++++++
+* `az network firewall policy intrusion-detection add`: Update IDPS profile handling to use the latest supported profile values (`Off`, `Emerging`, `Core`, `Extended`).
+* `az network firewall policy draft intrusion-detection add`: Update IDPS profile handling to use the latest supported profile values (`Off`, `Emerging`, `Core`, `Extended`).
+
 2.0.1
 ++++++
 * Remove `__import__('pkg_resources').declare_namespace(__name__)` to fix the namespace package issue.

src/azure-firewall/azext_firewall/aaz/latest/network/firewall/policy/_create.py

@@ -191,7 +191,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
             help="IDPS mode.",
             is_preview=True,
             nullable=True,
-            enum={"Basic": "Basic", "Standard": "Standard", "Advanced": "Advanced"},
+            enum={"Off": "Off", "Emerging": "Emerging", "Core": "Core", "Extended": "Extended"},
         )
 
         # define Arg Group "Parameters"

src/azure-firewall/azext_firewall/aaz/latest/network/firewall/policy/_update.py

@@ -322,7 +322,7 @@ def _build_arguments_schema(cls, *args, **kwargs):
             help="IDPS mode.",
             is_preview=True,
             nullable=True,
-            enum={"Basic": "Basic", "Standard": "Standard", "Advanced": "Advanced"},
+            enum={"Off": "Off", "Emerging": "Emerging", "Core": "Core", "Extended": "Extended"},
         )
         # define Arg Group "Parameters"
 

src/azure-firewall/azext_firewall/tests/latest/test_azure_firewall_scenario.py

@@ -1494,29 +1494,36 @@ def test_azure_policy_idps_profiles(self, resource_group, resource_group_locatio
         ])
 
         # add idps mode and profile to policy        
-        self.cmd('network firewall policy update -g {rg} -n {policy_name_1} --idps-mode Alert --idps-profile Advanced',
+        self.cmd('network firewall policy update -g {rg} -n {policy_name_1} --idps-mode Alert --idps-profile Off',
                  checks=[
                      self.check('intrusionDetection.mode', 'Alert'),
-                     self.check('intrusionDetection.profile', 'Advanced')
+                     self.check('intrusionDetection.profile', 'Off')
                  ])
 
         # delete policy 1
         self.cmd('network firewall policy delete -g {rg} --name {policy_name_1}')
 
         # create policy 2 with idps profile        
-        self.cmd('network firewall policy create -g {rg} -n {policy_name_2} -l {location} --sku Premium --idps-mode Deny --idps-profile Standard',
+        self.cmd('network firewall policy create -g {rg} -n {policy_name_2} -l {location} --sku Premium --idps-mode Deny --idps-profile Emerging',
                  checks=[
                      self.check('type', 'Microsoft.Network/FirewallPolicies'),
                      self.check('name', '{policy_name_2}'),
                      self.check('intrusionDetection.mode', 'Deny'),
-                     self.check('intrusionDetection.profile', 'Standard')
+                     self.check('intrusionDetection.profile', 'Emerging')
         ])
 
         # change idps profile in policy 2
-        self.cmd('network firewall policy update -g {rg} -n {policy_name_2} --idps-mode Deny --idps-profile Basic',
+        self.cmd('network firewall policy update -g {rg} -n {policy_name_2} --idps-mode Deny --idps-profile Core',
                  checks=[
                      self.check('intrusionDetection.mode', 'Deny'),
-                     self.check('intrusionDetection.profile', 'Basic')
+                     self.check('intrusionDetection.profile', 'Core')
+        ])  
+
+        # change idps profile in policy 2
+        self.cmd('network firewall policy update -g {rg} -n {policy_name_2} --idps-mode Deny --idps-profile Extended',
+                 checks=[
+                     self.check('intrusionDetection.mode', 'Deny'),
+                     self.check('intrusionDetection.profile', 'Extended')
         ])  
 
         # delete policy 2

src/azure-firewall/setup.py

@@ -8,7 +8,7 @@
 from codecs import open
 from setuptools import setup, find_packages
 
-VERSION = "2.0.1"
+VERSION = "2.1.0"
 
 CLASSIFIERS = [
     'Development Status :: 4 - Beta',