--- # Default firewall rule action sophos_default_rule_action: "deny" sophos_default_rule_log: true