fortios_endpoint_control_profile

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_endpoint_control_profile

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

Name	Type	Required	Default
access_token	str
enable_log	bool		`false`
endpoint_control_profile	dict
member_path	str
member_state	str
state	str	yes
vdom	str		`root`

Example

yaml

# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_endpoint_control_profile:
    access_token: '{{ fortios_access_token }}'
    endpoint_control_profile:
        device_groups:
            - name: default_name_5 (source user.device-group.name user.device-category.name)
        forticlient_android_settings:
            disable_wf_when_protected: enable
            forticlient_advanced_vpn: enable
            forticlient_vpn_provisioning: enable
            forticlient_vpn_settings:
                - auth_method: psk
                  name: default_name_13
                  sslvpn_access_port: "32767"
                  sslvpn_require_certificate: enable
                  type: ipsec
            forticlient_wf: enable
        forticlient_ios_settings:
            client_vpn_provisioning: enable
            client_vpn_settings:
                - auth_method: psk
                  name: default_name_25
                  sslvpn_access_port: "32767"
                  sslvpn_require_certificate: enable
                  type: ipsec
            disable_wf_when_protected: enable
            distribute_configuration_profile: enable
            forticlient_wf: enable
        forticlient_winmac_settings:
            av_realtime_protection: enable
            av_signature_up_to_date: enable
            forticlient_application_firewall: enable
            forticlient_av: enable
            forticlient_ems_compliance: enable
            forticlient_ems_compliance_action: block
            forticlient_ems_entries:
                - name: default_name_48 (source endpoint-control.forticlient-ems.name)
            forticlient_log_upload: enable
            forticlient_log_upload_level: traffic
            forticlient_minimum_software_version: enable
            forticlient_operating_system:
                - id: "56"
                  os_type: custom
            forticlient_own_file:
                - id: "61"
            forticlient_registration_compliance_action: block
            forticlient_registry_entry:
                - id: "64"
            forticlient_running_app:
                - application_check_rule: present
                  id: "73"
            forticlient_security_posture: enable
            forticlient_security_posture_compliance_action: block
            forticlient_system_compliance: enable
            forticlient_system_compliance_action: block
            forticlient_vuln_scan: enable
            forticlient_vuln_scan_compliance_action: block
            forticlient_vuln_scan_enforce: critical
            forticlient_vuln_scan_enforce_grace: "15"
            forticlient_vuln_scan_exempt: enable
            forticlient_wf: enable
            os_av_software_installed: enable
            sandbox_analysis: enable
        on_net_addr:
            - name: default_name_94 (source firewall.address.name firewall.addrgrp.name)
        profile_name: managed-endpoints
        src_addr:
            - name: default_name_98 (source firewall.address.name firewall.addrgrp.name)
        user_groups:
            - name: default_name_100 (source user.group.name)
        users:
            - name: default_name_102 (source user.local.name)
    state: present
    vdom: root
  name: Configure FortiClient endpoint control profiles.