fmgr_pkg_footer_policy – Configure IPv4/IPv6 policies.¶
New in version 2.10.
Synopsis¶
- This module is able to configure a FortiManager device.
- Examples include all parameters and values need to be adjusted to data sources before usage.
- Tested with FortiManager v6.0.0.
Requirements¶
The below requirements are needed on the host that executes this module.
- ansible>=2.9.0
FortiManager Version Compatibility¶
6.0.0 |
6.2.1 |
6.2.3 |
6.2.5 |
6.4.0 |
6.4.2 |
6.4.5 |
7.0.0 |
|
pkg_footer_policy | yes | yes | yes | yes | yes | yes | yes | yes |
Parameters¶
- enable_log - Enable/Disable logging for task type: bool required: false default: False
- proposed_method - The overridden method for the underlying Json RPC request type: str required: false choices: set, update, add
- bypass_validation - Only set to True when module schema diffs with FortiManager API structure, module continues to execute without validating parameters type: bool required: false default: False
- workspace_locking_adom - Acquire the workspace lock if FortiManager is running in workspace mode type: str required: false choices: global, custom adom including root
- workspace_locking_timeout - The maximum time in seconds to wait for other users to release workspace lock type: integer required: false default: 300
- rc_succeeded - The rc codes list with which the conditions to succeed will be overriden type: list required: false
- rc_failed - The rc codes list with which the conditions to fail will be overriden type: list required: false
- state - The directive to create, update or delete an object type: str required: true choices: present, absent
- pkg - The parameter in requested url type: str required: true
- pkg_footer_policy - Configure IPv4/IPv6 policies. type: dict
- action - No description for the parameter type: str choices: [deny, accept, ipsec, ssl-vpn] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
action True True True True True True True True - active-auth-method - No description for the parameter type: str choices: [ntlm, basic, digest, form] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
active-auth-method True True True True True True True True - anti-replay - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
anti-replay True True True True True True True True - app-category - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
app-category True True True True False False False False - app-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
app-group True True True True False False False False - application - No description for the parameter type: int more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
application True True True True False False False False - application-charts - No description for the parameter type: array choices: [top10-app, top10-p2p-user, top10-media-user] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
application-charts True True True True True True True True - application-list - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
application-list True True True True True True True True - auth-cert - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
auth-cert True True True True True True True True - auth-method - No description for the parameter type: str choices: [basic, digest, ntlm, fsae, form, fsso, rsso] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
auth-method True True True True True True True True - auth-path - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
auth-path True True True True True True True True - auth-portal - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
auth-portal True True True True True True True True - auth-redirect-addr - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
auth-redirect-addr True True True True True True True True - auto-asic-offload - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
auto-asic-offload True True True True True True True True - av-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
av-profile True True True True True True True True - bandwidth - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
bandwidth True True True True True True True True - block-notification - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
block-notification True True True True True True True True - captive-portal-exempt - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
captive-portal-exempt True True True True True True True True - capture-packet - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
capture-packet True True True True True True True True - casi-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
casi-profile True True True True True True True True - central-nat - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
central-nat True True True True True True True True - cifs-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
cifs-profile True True True True True True True True - client-reputation - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
client-reputation True True True True True True True True - client-reputation-mode - No description for the parameter type: str choices: [learning, monitoring] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
client-reputation-mode True True True True True True True True - comments - No description for the parameter type: str
- custom-log-fields - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
custom-log-fields True True True True True True True True - deep-inspection-options - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
deep-inspection-options True True True True True True True True - delay-tcp-npu-session - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
delay-tcp-npu-session True True True True True True True True - delay-tcp-npu-sessoin - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
delay-tcp-npu-sessoin True True True True True True True True - device-detection-portal - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
device-detection-portal True True True True True True True True - devices - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
devices True False False False True True True True - diffserv-forward - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
diffserv-forward True True True True True True True True - diffserv-reverse - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
diffserv-reverse True True True True True True True True - diffservcode-forward - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
diffservcode-forward True True True True True True True True - diffservcode-rev - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
diffservcode-rev True True True True True True True True - disclaimer - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
disclaimer True True True True True True True True - dlp-sensor - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dlp-sensor True True True True True True True True - dnsfilter-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dnsfilter-profile True True True True True True True True - dponly - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dponly True True True True True True True True - dscp-match - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dscp-match True True True True True True True True - dscp-negate - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dscp-negate True True True True True True True True - dscp-value - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dscp-value True True True True True True True True - dsri - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dsri True True True True True True True True - dstaddr - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dstaddr True True True True True True True True - dstaddr-negate - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dstaddr-negate True True True True True True True True - dstaddr6 - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dstaddr6 True True True True True True True True - dstintf - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dstintf True True True True True True True True - dynamic-profile - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dynamic-profile True True True True True True True True - dynamic-profile-access - No description for the parameter type: array choices: [imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps, ssh] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dynamic-profile-access True True True True True True True True - dynamic-profile-fallthrough - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dynamic-profile-fallthrough True True True True True True True True - dynamic-profile-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dynamic-profile-group True True True True True True True True - email-collect - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
email-collect True True True True True True True True - email-collection-portal - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
email-collection-portal True True True True True True True True - emailfilter-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
emailfilter-profile True True True True True True True True - endpoint-check - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
endpoint-check True True True True True True True True - endpoint-compliance - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
endpoint-compliance True True True True True True True True - endpoint-keepalive-interface - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
endpoint-keepalive-interface True True True True True True True True - endpoint-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
endpoint-profile True True True True True True True True - failed-connection - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
failed-connection True True True True True True True True - fall-through-unauthenticated - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
fall-through-unauthenticated True True True True True True True True - firewall-session-dirty - No description for the parameter type: str choices: [check-all, check-new] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
firewall-session-dirty True True True True True True True True - fixedport - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
fixedport True True True True True True True True - forticlient-compliance-devices - No description for the parameter type: array choices: [windows-pc, mac, iphone-ipad, android] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
forticlient-compliance-devices True True True True True True True True - forticlient-compliance-enforcement-portal - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
forticlient-compliance-enforcement-portal True True True True True True True True - fsae - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
fsae True True True True True True True True - fsae-server-for-ntlm - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
fsae-server-for-ntlm True True True True True True True True - fsso - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
fsso True True True True True True True True - fsso-agent-for-ntlm - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
fsso-agent-for-ntlm True True True True True True True True - geo-location - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
geo-location True True True True True True True True - geoip-anycast - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
geoip-anycast True True True True True True True True - global-label - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
global-label True True True True True True True True - groups - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
groups True True True True True True True True - gtp-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
gtp-profile True True True True True True True True - http-policy-redirect - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
http-policy-redirect True True True True True True True True - icap-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
icap-profile True True True True True True True True - identity-based - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
identity-based True True True True True True True True - identity-based-policy - No description for the parameter type: array
more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
identity-based-policy True False False False False False False False - action - No description for the parameter type: str choices: [deny, accept] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
action True False False False False False False False - application-charts - No description for the parameter type: array choices: [top10-app, top10-p2p-user, top10-media-user] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
application-charts True False False False False False False False - application-list - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
application-list True False False False False False False False - av-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
av-profile True False False False False False False False - capture-packet - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
capture-packet True False False False False False False False - deep-inspection-options - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
deep-inspection-options True False False False False False False False - devices - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
devices True False False False False False False False - dlp-sensor - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dlp-sensor True False False False False False False False - dstaddr - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dstaddr True False False False False False False False - dstaddr-negate - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
dstaddr-negate True False False False False False False False - endpoint-compliance - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
endpoint-compliance True False False False False False False False - groups - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
groups True False False False False False False False - icap-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
icap-profile True False False False False False False False - id - No description for the parameter type: int more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
id True False False False False False False False - ips-sensor - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ips-sensor True False False False False False False False - logtraffic - No description for the parameter type: str choices: [disable, enable, all, utm] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
logtraffic True False False False False False False False - logtraffic-app - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
logtraffic-app True False False False False False False False - logtraffic-start - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
logtraffic-start True False False False False False False False - mms-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
mms-profile True False False False False False False False - per-ip-shaper - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
per-ip-shaper True False False False False False False False - profile-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
profile-group True False False False False False False False - profile-protocol-options - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
profile-protocol-options True False False False False False False False - profile-type - No description for the parameter type: str choices: [single, group] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
profile-type True False False False False False False False - replacemsg-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
replacemsg-group True False False False False False False False - schedule - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
schedule True False False False False False False False - send-deny-packet - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
send-deny-packet True False False False False False False False - service - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
service True False False False False False False False - service-negate - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
service-negate True False False False False False False False - spamfilter-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
spamfilter-profile True False False False False False False False - sslvpn-portal - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
sslvpn-portal True False False False False False False False - sslvpn-realm - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
sslvpn-realm True False False False False False False False - traffic-shaper - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
traffic-shaper True False False False False False False False - traffic-shaper-reverse - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
traffic-shaper-reverse True False False False False False False False - users - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
users True False False False False False False False - utm-status - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
utm-status True False False False False False False False - voip-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
voip-profile True False False False False False False False - webfilter-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
webfilter-profile True False False False False False False False
- action - No description for the parameter type: str choices: [deny, accept] more...
- identity-based-route - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
identity-based-route True True True True True True True True - identity-from - No description for the parameter type: str choices: [auth, device] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
identity-from True True True True True True True True - inbound - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
inbound True True True True True True True True - inspection-mode - No description for the parameter type: str choices: [proxy, flow] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
inspection-mode True True True True True True True True - internet-service - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service True True True True True True True True - internet-service-custom - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-custom True True True True True True True True - internet-service-custom-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-custom-group True True True True True True True True - internet-service-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-group True True True True True True True True - internet-service-id - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-id True True True True True True True True - internet-service-negate - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-negate True True True True True True True True - internet-service-src - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-src True True True True True True True True - internet-service-src-custom - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-src-custom True True True True True True True True - internet-service-src-custom-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-src-custom-group True True True True True True True True - internet-service-src-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-src-group True True True True True True True True - internet-service-src-id - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-src-id True True True True True True True True - internet-service-src-negate - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-src-negate True True True True True True True True - ip-based - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ip-based True True True True True True True True - ippool - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ippool True True True True True True True True - ips-sensor - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ips-sensor True True True True True True True True - label - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
label True True True True True True True True - learning-mode - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
learning-mode True True True True True True True True - log-unmatched-traffic - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
log-unmatched-traffic True True True True True True True True - logtraffic - No description for the parameter type: str choices: [disable, enable, all, utm] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
logtraffic True True True True True True True True - logtraffic-app - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
logtraffic-app True True True True True True True True - logtraffic-start - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
logtraffic-start True True True True True True True True - match-vip - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
match-vip True True True True True True True True - mms-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
mms-profile True True True True True True True True - name - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
name True True True True True True True True - nat - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
nat True True True True True True True True - natinbound - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
natinbound True True True True True True True True - natip - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
natip True True True True True True True True - natoutbound - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
natoutbound True True True True True True True True - np-acceleration - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
np-acceleration True True True True True True True True - ntlm - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ntlm True True True True True True True True - ntlm-enabled-browsers - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ntlm-enabled-browsers True True True True True True True True - ntlm-guest - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ntlm-guest True True True True True True True True - outbound - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
outbound True True True True True True True True - per-ip-shaper - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
per-ip-shaper True True True True True True True True - permit-any-host - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
permit-any-host True True True True True True True True - permit-stun-host - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
permit-stun-host True True True True True True True True - policyid - No description for the parameter type: int more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
policyid True True True True True True True True - poolname - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
poolname True True True True True True True True - profile-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
profile-group True True True True True True True True - profile-protocol-options - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
profile-protocol-options True True True True True True True True - profile-type - No description for the parameter type: str choices: [single, group] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
profile-type True True True True True True True True - radius-mac-auth-bypass - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
radius-mac-auth-bypass True True True True True True True True - redirect-url - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
redirect-url True True True True True True True True - replacemsg-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
replacemsg-group True True True True True True True True - replacemsg-override-group - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
replacemsg-override-group True True True True True True True True - reputation-direction - No description for the parameter type: str choices: [source, destination] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
reputation-direction True True True True True True True True - reputation-minimum - No description for the parameter type: int more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
reputation-minimum True True True True True True True True - require-tfa - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
require-tfa True True True True True True True True - rsso - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
rsso True True True True True True True True - rtp-addr - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
rtp-addr True True True True True True True True - rtp-nat - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
rtp-nat True True True True True True True True - scan-botnet-connections - No description for the parameter type: str choices: [disable, block, monitor] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
scan-botnet-connections True True True True True True True True - schedule - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
schedule True True True True True True True True - schedule-timeout - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
schedule-timeout True True True True True True True True - send-deny-packet - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
send-deny-packet True True True True True True True True - service - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
service True True True True True True True True - service-negate - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
service-negate True True True True True True True True - session-ttl - No description for the parameter type: int more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
session-ttl True True True True True True True True - sessions - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
sessions True True True True True True True True - spamfilter-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
spamfilter-profile True True True True True True True True - srcaddr - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
srcaddr True True True True True True True True - srcaddr-negate - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
srcaddr-negate True True True True True True True True - srcaddr6 - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
srcaddr6 True True True True True True True True - srcintf - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
srcintf True True True True True True True True - ssh-filter-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ssh-filter-profile True True True True True True True True - ssh-policy-redirect - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ssh-policy-redirect True True True True True True True True - ssl-mirror - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ssl-mirror True True True True True True True True - ssl-mirror-intf - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ssl-mirror-intf True True True True True True True True - ssl-ssh-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
ssl-ssh-profile True True True True True True True True - sslvpn-auth - No description for the parameter type: str choices: [any, local, radius, ldap, tacacs+] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
sslvpn-auth True True True True True True True True - sslvpn-ccert - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
sslvpn-ccert True True True True True True True True - sslvpn-cipher - No description for the parameter type: str choices: [any, high, medium] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
sslvpn-cipher True True True True True True True True - sso-auth-method - No description for the parameter type: str choices: [fsso, rsso] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
sso-auth-method True True True True True True True True - status - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
status True True True True True True True True - tags - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
tags True True True True True True True True - tcp-mss-receiver - No description for the parameter type: int more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
tcp-mss-receiver True True True True True True True True - tcp-mss-sender - No description for the parameter type: int more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
tcp-mss-sender True True True True True True True True - tcp-reset - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
tcp-reset True True True True True True True True - tcp-session-without-syn - No description for the parameter type: str choices: [all, data-only, disable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
tcp-session-without-syn True True True True True True True True - timeout-send-rst - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
timeout-send-rst True True True True True True True True - tos - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
tos True True True True True True True True - tos-mask - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
tos-mask True True True True True True True True - tos-negate - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
tos-negate True True True True True True True True - traffic-shaper - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
traffic-shaper True True True True True True True True - traffic-shaper-reverse - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
traffic-shaper-reverse True True True True True True True True - transaction-based - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
transaction-based True True True True True True True True - url-category - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
url-category True True True True False False False False - users - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
users True True True True True True True True - utm-inspection-mode - No description for the parameter type: str choices: [proxy, flow] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
utm-inspection-mode True True True True True True True True - utm-status - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
utm-status True True True True True True True True - uuid - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
uuid True True True True True True True True - vlan-cos-fwd - No description for the parameter type: int more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
vlan-cos-fwd True True True True True True True True - vlan-cos-rev - No description for the parameter type: int more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
vlan-cos-rev True True True True True True True True - vlan-filter - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
vlan-filter True True True True True True True True - voip-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
voip-profile True True True True True True True True - vpntunnel - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
vpntunnel True True True True True True True True - waf-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
waf-profile True True True True True True True True - wanopt - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
wanopt True True True True True True True True - wanopt-detection - No description for the parameter type: str choices: [active, passive, off] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
wanopt-detection True True True True True True True True - wanopt-passive-opt - No description for the parameter type: str choices: [default, transparent, non-transparent] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
wanopt-passive-opt True True True True True True True True - wanopt-peer - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
wanopt-peer True True True True True True True True - wanopt-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
wanopt-profile True True True True True True True True - wccp - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
wccp True True True True True True True True - web-auth-cookie - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
web-auth-cookie True True True True True True True True - webcache - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
webcache True True True True True True True True - webcache-https - No description for the parameter type: str choices: [disable, ssl-server, any, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
webcache-https True True True True True True True True - webfilter-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
webfilter-profile True True True True True True True True - webproxy-forward-server - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
webproxy-forward-server True True True True True True True True - webproxy-profile - No description for the parameter type: str more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
webproxy-profile True True True True True True True True - wsso - No description for the parameter type: str choices: [disable, enable] more...
6.0.0
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
wsso True True True True True True True True - fsso-groups - No description for the parameter type: str more...
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
fsso-groups True True True True True True True - match-vip-only - No description for the parameter type: str choices: [disable, enable] more...
6.2.1
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
match-vip-only True True True True True True True - best-route - No description for the parameter type: str choices: [disable, enable] more...
6.2.3
6.2.5
6.4.0
6.4.2
6.4.5
7.0.0
best-route True True True True True True - decrypted-traffic-mirror - No description for the parameter type: str more...
6.4.0
6.4.2
6.4.5
7.0.0
decrypted-traffic-mirror True True True True - geoip-match - No description for the parameter type: str choices: [physical-location, registered-location] more...
6.4.0
6.4.2
6.4.5
7.0.0
geoip-match True True True True - internet-service-name - No description for the parameter type: str more...
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-name True True True True - internet-service-src-name - No description for the parameter type: str more...
6.4.0
6.4.2
6.4.5
7.0.0
internet-service-src-name True True True True - poolname6 - No description for the parameter type: str more...
6.4.0
6.4.2
6.4.5
7.0.0
poolname6 True True True True - src-vendor-mac - No description for the parameter type: str more...
6.4.0
6.4.2
6.4.5
7.0.0
src-vendor-mac True True True True - vendor-mac - No description for the parameter type: str more...
6.4.0
6.4.2
6.4.5
7.0.0
vendor-mac True True True True - file-filter-profile - No description for the parameter type: str more...
6.4.2
6.4.5
7.0.0
file-filter-profile True True True - cgn-eif - No description for the parameter type: str choices: [disable, enable] more...
6.4.5
7.0.0
cgn-eif True True - cgn-eim - No description for the parameter type: str choices: [disable, enable] more...
6.4.5
7.0.0
cgn-eim True True - cgn-log-server-grp - No description for the parameter type: str more...
6.4.5
7.0.0
cgn-log-server-grp True True - cgn-resource-quota - No description for the parameter type: int more...
6.4.5
7.0.0
cgn-resource-quota True True - cgn-session-quota - No description for the parameter type: int more...
6.4.5
7.0.0
cgn-session-quota True True - policy-offload - No description for the parameter type: str choices: [disable, enable] more...
6.4.5
7.0.0
policy-offload True True - dynamic-shaping - Enable/disable dynamic RADIUS defined traffic shaping. type: str choices: [disable, enable] more...
7.0.0
dynamic-shaping True - passive-wan-health-measurement - Enable/disable passive WAN health measurement. type: str choices: [disable, enable] more...
7.0.0
passive-wan-health-measurement True - videofilter-profile - Name of an existing VideoFilter profile. type: str more...
7.0.0
videofilter-profile True - ztna-ems-tag - Source ztna-ems-tag names. type: str more...
7.0.0
ztna-ems-tag True - ztna-geo-tag - Source ztna-geo-tag names. type: str more...
7.0.0
ztna-geo-tag True - ztna-status - Enable/disable zero trust access. type: str choices: [disable, enable] more...
7.0.0
ztna-status True
Notes¶
Note
- Running in workspace locking mode is supported in this FortiManager module, the top level parameters workspace_locking_adom and workspace_locking_timeout help do the work.
- To create or update an object, use state: present directive.
- To delete an object, use state: absent directive
- Normally, running one module can fail when a non-zero rc is returned. you can also override the conditions to fail or succeed with parameters rc_failed and rc_succeeded
Examples¶
- hosts: fortimanager-inventory
collections:
- fortinet.fortimanager
connection: httpapi
vars:
ansible_httpapi_use_ssl: True
ansible_httpapi_validate_certs: False
ansible_httpapi_port: 443
tasks:
- name: Configure IPv4/IPv6 policies.
fmgr_pkg_footer_policy:
bypass_validation: False
workspace_locking_adom: <value in [global, custom adom including root]>
workspace_locking_timeout: 300
rc_succeeded: [0, -2, -3, ...]
rc_failed: [-2, -3, ...]
pkg: <your own value>
state: <value in [present, absent]>
pkg_footer_policy:
action: <value in [deny, accept, ipsec, ...]>
active-auth-method: <value in [ntlm, basic, digest, ...]>
anti-replay: <value in [disable, enable]>
app-category: <value of string>
app-group: <value of string>
application: <value of integer>
application-charts:
- top10-app
- top10-p2p-user
- top10-media-user
application-list: <value of string>
auth-cert: <value of string>
auth-method: <value in [basic, digest, ntlm, ...]>
auth-path: <value in [disable, enable]>
auth-portal: <value in [disable, enable]>
auth-redirect-addr: <value of string>
auto-asic-offload: <value in [disable, enable]>
av-profile: <value of string>
bandwidth: <value in [disable, enable]>
block-notification: <value in [disable, enable]>
captive-portal-exempt: <value in [disable, enable]>
capture-packet: <value in [disable, enable]>
casi-profile: <value of string>
central-nat: <value in [disable, enable]>
cifs-profile: <value of string>
client-reputation: <value in [disable, enable]>
client-reputation-mode: <value in [learning, monitoring]>
comments: <value of string>
custom-log-fields: <value of string>
deep-inspection-options: <value of string>
delay-tcp-npu-session: <value in [disable, enable]>
delay-tcp-npu-sessoin: <value in [disable, enable]>
device-detection-portal: <value in [disable, enable]>
devices: <value of string>
diffserv-forward: <value in [disable, enable]>
diffserv-reverse: <value in [disable, enable]>
diffservcode-forward: <value of string>
diffservcode-rev: <value of string>
disclaimer: <value in [disable, enable]>
dlp-sensor: <value of string>
dnsfilter-profile: <value of string>
dponly: <value in [disable, enable]>
dscp-match: <value in [disable, enable]>
dscp-negate: <value in [disable, enable]>
dscp-value: <value of string>
dsri: <value in [disable, enable]>
dstaddr: <value of string>
dstaddr-negate: <value in [disable, enable]>
dstaddr6: <value of string>
dstintf: <value of string>
dynamic-profile: <value in [disable, enable]>
dynamic-profile-access:
- imap
- smtp
- pop3
- http
- ftp
- im
- nntp
- imaps
- smtps
- pop3s
- https
- ftps
- ssh
dynamic-profile-fallthrough: <value in [disable, enable]>
dynamic-profile-group: <value of string>
email-collect: <value in [disable, enable]>
email-collection-portal: <value in [disable, enable]>
emailfilter-profile: <value of string>
endpoint-check: <value in [disable, enable]>
endpoint-compliance: <value in [disable, enable]>
endpoint-keepalive-interface: <value of string>
endpoint-profile: <value of string>
failed-connection: <value in [disable, enable]>
fall-through-unauthenticated: <value in [disable, enable]>
firewall-session-dirty: <value in [check-all, check-new]>
fixedport: <value in [disable, enable]>
forticlient-compliance-devices:
- windows-pc
- mac
- iphone-ipad
- android
forticlient-compliance-enforcement-portal: <value in [disable, enable]>
fsae: <value in [disable, enable]>
fsae-server-for-ntlm: <value of string>
fsso: <value in [disable, enable]>
fsso-agent-for-ntlm: <value of string>
geo-location: <value in [disable, enable]>
geoip-anycast: <value in [disable, enable]>
global-label: <value of string>
groups: <value of string>
gtp-profile: <value of string>
http-policy-redirect: <value in [disable, enable]>
icap-profile: <value of string>
identity-based: <value in [disable, enable]>
identity-based-policy:
-
action: <value in [deny, accept]>
application-charts:
- top10-app
- top10-p2p-user
- top10-media-user
application-list: <value of string>
av-profile: <value of string>
capture-packet: <value in [disable, enable]>
deep-inspection-options: <value of string>
devices: <value of string>
dlp-sensor: <value of string>
dstaddr: <value of string>
dstaddr-negate: <value in [disable, enable]>
endpoint-compliance: <value in [disable, enable]>
groups: <value of string>
icap-profile: <value of string>
id: <value of integer>
ips-sensor: <value of string>
logtraffic: <value in [disable, enable, all, ...]>
logtraffic-app: <value in [disable, enable]>
logtraffic-start: <value in [disable, enable]>
mms-profile: <value of string>
per-ip-shaper: <value of string>
profile-group: <value of string>
profile-protocol-options: <value of string>
profile-type: <value in [single, group]>
replacemsg-group: <value of string>
schedule: <value of string>
send-deny-packet: <value in [disable, enable]>
service: <value of string>
service-negate: <value in [disable, enable]>
spamfilter-profile: <value of string>
sslvpn-portal: <value of string>
sslvpn-realm: <value of string>
traffic-shaper: <value of string>
traffic-shaper-reverse: <value of string>
users: <value of string>
utm-status: <value in [disable, enable]>
voip-profile: <value of string>
webfilter-profile: <value of string>
identity-based-route: <value of string>
identity-from: <value in [auth, device]>
inbound: <value in [disable, enable]>
inspection-mode: <value in [proxy, flow]>
internet-service: <value in [disable, enable]>
internet-service-custom: <value of string>
internet-service-custom-group: <value of string>
internet-service-group: <value of string>
internet-service-id: <value of string>
internet-service-negate: <value in [disable, enable]>
internet-service-src: <value in [disable, enable]>
internet-service-src-custom: <value of string>
internet-service-src-custom-group: <value of string>
internet-service-src-group: <value of string>
internet-service-src-id: <value of string>
internet-service-src-negate: <value in [disable, enable]>
ip-based: <value in [disable, enable]>
ippool: <value in [disable, enable]>
ips-sensor: <value of string>
label: <value of string>
learning-mode: <value in [disable, enable]>
log-unmatched-traffic: <value in [disable, enable]>
logtraffic: <value in [disable, enable, all, ...]>
logtraffic-app: <value in [disable, enable]>
logtraffic-start: <value in [disable, enable]>
match-vip: <value in [disable, enable]>
mms-profile: <value of string>
name: <value of string>
nat: <value in [disable, enable]>
natinbound: <value in [disable, enable]>
natip: <value of string>
natoutbound: <value in [disable, enable]>
np-acceleration: <value in [disable, enable]>
ntlm: <value in [disable, enable]>
ntlm-enabled-browsers: <value of string>
ntlm-guest: <value in [disable, enable]>
outbound: <value in [disable, enable]>
per-ip-shaper: <value of string>
permit-any-host: <value in [disable, enable]>
permit-stun-host: <value in [disable, enable]>
policyid: <value of integer>
poolname: <value of string>
profile-group: <value of string>
profile-protocol-options: <value of string>
profile-type: <value in [single, group]>
radius-mac-auth-bypass: <value in [disable, enable]>
redirect-url: <value of string>
replacemsg-group: <value of string>
replacemsg-override-group: <value of string>
reputation-direction: <value in [source, destination]>
reputation-minimum: <value of integer>
require-tfa: <value in [disable, enable]>
rsso: <value in [disable, enable]>
rtp-addr: <value of string>
rtp-nat: <value in [disable, enable]>
scan-botnet-connections: <value in [disable, block, monitor]>
schedule: <value of string>
schedule-timeout: <value in [disable, enable]>
send-deny-packet: <value in [disable, enable]>
service: <value of string>
service-negate: <value in [disable, enable]>
session-ttl: <value of integer>
sessions: <value in [disable, enable]>
spamfilter-profile: <value of string>
srcaddr: <value of string>
srcaddr-negate: <value in [disable, enable]>
srcaddr6: <value of string>
srcintf: <value of string>
ssh-filter-profile: <value of string>
ssh-policy-redirect: <value in [disable, enable]>
ssl-mirror: <value in [disable, enable]>
ssl-mirror-intf: <value of string>
ssl-ssh-profile: <value of string>
sslvpn-auth: <value in [any, local, radius, ...]>
sslvpn-ccert: <value in [disable, enable]>
sslvpn-cipher: <value in [any, high, medium]>
sso-auth-method: <value in [fsso, rsso]>
status: <value in [disable, enable]>
tags: <value of string>
tcp-mss-receiver: <value of integer>
tcp-mss-sender: <value of integer>
tcp-reset: <value in [disable, enable]>
tcp-session-without-syn: <value in [all, data-only, disable]>
timeout-send-rst: <value in [disable, enable]>
tos: <value of string>
tos-mask: <value of string>
tos-negate: <value in [disable, enable]>
traffic-shaper: <value of string>
traffic-shaper-reverse: <value of string>
transaction-based: <value in [disable, enable]>
url-category: <value of string>
users: <value of string>
utm-inspection-mode: <value in [proxy, flow]>
utm-status: <value in [disable, enable]>
uuid: <value of string>
vlan-cos-fwd: <value of integer>
vlan-cos-rev: <value of integer>
vlan-filter: <value of string>
voip-profile: <value of string>
vpntunnel: <value of string>
waf-profile: <value of string>
wanopt: <value in [disable, enable]>
wanopt-detection: <value in [active, passive, off]>
wanopt-passive-opt: <value in [default, transparent, non-transparent]>
wanopt-peer: <value of string>
wanopt-profile: <value of string>
wccp: <value in [disable, enable]>
web-auth-cookie: <value in [disable, enable]>
webcache: <value in [disable, enable]>
webcache-https: <value in [disable, ssl-server, any, ...]>
webfilter-profile: <value of string>
webproxy-forward-server: <value of string>
webproxy-profile: <value of string>
wsso: <value in [disable, enable]>
fsso-groups: <value of string>
match-vip-only: <value in [disable, enable]>
best-route: <value in [disable, enable]>
decrypted-traffic-mirror: <value of string>
geoip-match: <value in [physical-location, registered-location]>
internet-service-name: <value of string>
internet-service-src-name: <value of string>
poolname6: <value of string>
src-vendor-mac: <value of string>
vendor-mac: <value of string>
file-filter-profile: <value of string>
cgn-eif: <value in [disable, enable]>
cgn-eim: <value in [disable, enable]>
cgn-log-server-grp: <value of string>
cgn-resource-quota: <value of integer>
cgn-session-quota: <value of integer>
policy-offload: <value in [disable, enable]>
dynamic-shaping: <value in [disable, enable]>
passive-wan-health-measurement: <value in [disable, enable]>
videofilter-profile: <value of string>
ztna-ems-tag: <value of string>
ztna-geo-tag: <value of string>
ztna-status: <value in [disable, enable]>
Return Values¶
Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module:
- request_url - The full url requested returned: always type: str sample: /sys/login/user
- response_code - The status of api request returned: always type: int sample: 0
- response_message - The descriptive message of the api response returned: always type: str sample: OK
- response_data - The data body of the api response returned: optional type: list or dict