delete_firewall_policy

delete_firewall_policy

Preview deletion of a Zone-Based Firewall policy you created.

This tool does not delete on its own. It returns a preview envelope with a token; call confirm_destructive_action(token) to commit the delete. Tokens expire after 5 minutes.

Side effects:

• None until confirm_destructive_action runs against the token.
• On confirm: removes the policy through the Integration API. Traffic it matched falls through to the next policy or the zone pair’s default.
• Controller-managed policies are refused.
• dry_run=True returns the would_delete envelope with no token, purely informational.

Example

delete_firewall_policy(policy="Allow IoT to Plex")

Parameters

Parameter	Type	Required	Default	Description
policy	string	yes	—	The policy’s v1 id or its exact name.
controller	string	no	“default”	Name of the UniFi controller to target. Defaults to "default".
dry_run	boolean	no	false	True skips token generation and returns the {"dry_run": true, ...} envelope.