$ sccfm-cli policies access-rule create --help
Usage: sccfm-cli policies access-rule create [OPTIONS]
Create an ASA access rule.
Options:
--access-group-uid TEXT UID of the access group. [required]
--entity-uid TEXT UID of the device or manager. [required]
--index INTEGER Position of the rule in the ordered list.
[required]
--rule-action [permit|deny] Rule action. [default: PERMIT]
--remark TEXT Human-readable description of the rule.
--source-network TEXT Source network object name.
--destination-network TEXT Destination network object name.
--protocol TEXT Protocol (e.g. tcp, udp, ip).
--source-port TEXT Source port or port range.
--destination-port TEXT Destination port or port range.
--log-level TEXT Log level.
--log-interval INTEGER Log interval in seconds.
--active / --inactive Whether the rule is active.
--check Run a preflight check without performing the
operation.
--format [table|json] Output format [default: table]
--config-path PATH Path to the configuration file (defaults to
~/.sccfm-cli/config.json).
--help Show this message and exit.