fortios_firewall_access_proxy
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_firewall_access_proxy
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| firewall_access_proxy | dict | |||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_access_proxy:
access_token: '{{ fortios_access_token }}'
firewall_access_proxy:
add_vhost_domain_to_dnsdb: enable
api_gateway:
- application:
- name: default_name_6
h2_support: enable
h3_support: enable
http_cookie_age: "60"
http_cookie_domain_from_host: disable
http_cookie_generation: "0"
http_cookie_share: disable
https_cookie_secure: disable
id: "16"
ldb_method: static
persistence: none
quic:
ack_delay_exponent: "3"
active_connection_id_limit: "2"
active_migration: enable
grease_quic_bit: enable
max_ack_delay: "25"
max_datagram_frame_size: "1500"
max_idle_timeout: "30000"
max_udp_payload_size: "1500"
realservers:
- addr_type: ip
external_auth: enable
health_check: disable
health_check_proto: ping
holddown_interval: enable
http_host: myhostname
id: "37"
port: "443"
ssh_host_key:
- name: default_name_43 (source firewall.ssh.host-key.name)
ssh_host_key_validation: disable
status: active
translate_host: enable
tunnel_encryption: enable
type: tcp-forwarding
verify_cert: enable
weight: "1"
saml_redirect: disable
service: http
ssl_algorithm: high
ssl_cipher_suites:
- cipher: TLS-AES-128-GCM-SHA256
priority: 1
versions: tls-1.0
ssl_dh_bits: "768"
ssl_max_version: tls-1.0
ssl_min_version: tls-1.0
ssl_renegotiation: enable
url_map_type: sub-string
virtual_host: myhostname (source firewall.access-proxy-virtual-host.name)
api_gateway6:
- application:
- name: default_name_69
h2_support: enable
h3_support: enable
http_cookie_age: "60"
http_cookie_domain_from_host: disable
http_cookie_generation: "0"
http_cookie_share: disable
https_cookie_secure: disable
id: "79"
ldb_method: static
persistence: none
quic:
ack_delay_exponent: "3"
active_connection_id_limit: "2"
active_migration: enable
grease_quic_bit: enable
max_ack_delay: "25"
max_datagram_frame_size: "1500"
max_idle_timeout: "30000"
max_udp_payload_size: "1500"
realservers:
- addr_type: ip
external_auth: enable
health_check: disable
health_check_proto: ping
holddown_interval: enable
http_host: myhostname
id: "100"
port: "443"
ssh_host_key:
- name: default_name_106 (source firewall.ssh.host-key.name)
ssh_host_key_validation: disable
status: active
translate_host: enable
tunnel_encryption: enable
type: tcp-forwarding
verify_cert: enable
weight: "1"
saml_redirect: disable
service: http
ssl_algorithm: high
ssl_cipher_suites:
- cipher: TLS-AES-128-GCM-SHA256
priority: 1
versions: tls-1.0
ssl_dh_bits: "768"
ssl_max_version: tls-1.0
ssl_min_version: tls-1.0
ssl_renegotiation: enable
url_map_type: sub-string
virtual_host: myhostname (source firewall.access-proxy-virtual-host.name)
auth_portal: disable
auth_virtual_host: myhostname (source firewall.access-proxy-virtual-host.name)
client_cert: disable
empty_cert_action: accept
http_supported_max_version: http1
ldb_method: static
log_blocked_traffic: enable
name: default_name_138
realservers:
- id: "140"
port: "0"
status: active
weight: "1"
server_pubkey_auth: disable
server_pubkey_auth_settings:
cert_extension:
- critical: "no"
name: default_name_151
type: fixed
permit_agent_forwarding: enable
permit_port_forwarding: enable
permit_pty: enable
permit_user_rc: enable
permit_x11_forwarding: enable
source_address: enable
svr_pool_multiplex: enable
svr_pool_server_max_concurrent_request: "0"
svr_pool_server_max_request: "0"
svr_pool_ttl: "15"
user_agent_detect: disable
state: present
vdom: root
name: Configure IPv4 access proxy.