fortios_firewall_profile_protocol_options

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_firewall_profile_protocol_options

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

Name	Type	Required	Default
access_token	str
enable_log	bool		`false`
firewall_profile_protocol_options	dict
member_path	str
member_state	str
state	str	yes
vdom	str		`root`

Example

yaml

# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_profile_protocol_options:
    access_token: '{{ fortios_access_token }}'
    firewall_profile_protocol_options:
        cifs:
            options: oversize
            oversize_limit: "10"
            ports:
                - 1
            scan_bzip2: enable
            server_credential_type: none
            status: enable
            tcp_window_maximum: "8388608"
            tcp_window_minimum: "131072"
            tcp_window_size: "262144"
            tcp_window_type: auto-tuning
            uncompressed_nest_limit: "12"
            uncompressed_oversize_limit: "10"
        comment: Optional comments.
        dns:
            ports:
                - 1
            status: enable
        ftp:
            comfort_amount: "1"
            comfort_interval: "10"
            explicit_ftp_tls: enable
            inspect_all: enable
            options: clientcomfort
            oversize_limit: "10"
            ports:
                - 1
            scan_bzip2: enable
            ssl_offloaded: "no"
            status: enable
            stream_based_uncompressed_limit: "0"
            tcp_window_maximum: "8388608"
            tcp_window_minimum: "131072"
            tcp_window_size: "262144"
            tcp_window_type: auto-tuning
            uncompressed_nest_limit: "12"
            uncompressed_oversize_limit: "10"
        http:
            address_ip_rating: enable
            block_page_status_code: "403"
            comfort_amount: "1"
            comfort_interval: "10"
            domain_fronting: allow
            fortinet_bar: enable
            fortinet_bar_port: "32767"
            h2c: enable
            http_policy: disable
            inspect_all: enable
            options: clientcomfort
            oversize_limit: "10"
            ports:
                - 1
            post_lang: jisx0201
            proxy_after_tcp_handshake: enable
            range_block: disable
            retry_count: "0"
            scan_bzip2: enable
            set_http_0dot9: allow
            ssl_offloaded: "no"
            status: enable
            stream_based_uncompressed_limit: "0"
            streaming_content_bypass: enable
            strip_x_forwarded_for: disable
            switching_protocols: bypass
            tcp_window_maximum: "8388608"
            tcp_window_minimum: "131072"
            tcp_window_size: "262144"
            tcp_window_type: auto-tuning
            tunnel_non_http: enable
            uncompressed_nest_limit: "12"
            uncompressed_oversize_limit: "10"
            unknown_content_encoding: block
            unknown_http_version: reject
            verify_dns_for_policy_matching: enable
        imap:
            inspect_all: enable
            options: fragmail
            oversize_limit: "10"
            ports:
                - 1
            proxy_after_tcp_handshake: enable
            scan_bzip2: enable
            ssl_offloaded: "no"
            status: enable
            uncompressed_nest_limit: "12"
            uncompressed_oversize_limit: "10"
        mail_signature:
            status: disable
        mapi:
            options: fragmail
            oversize_limit: "10"
            ports:
                - 1
            scan_bzip2: enable
            status: enable
            uncompressed_nest_limit: "12"
            uncompressed_oversize_limit: "10"
        name: default_name_100
        nntp:
            inspect_all: enable
            options: oversize
            oversize_limit: "10"
            ports:
                - 1
            proxy_after_tcp_handshake: enable
            scan_bzip2: enable
            status: enable
            uncompressed_nest_limit: "12"
            uncompressed_oversize_limit: "10"
        oversize_log: disable
        pop3:
            inspect_all: enable
            options: fragmail
            oversize_limit: "10"
            ports:
                - 1
            proxy_after_tcp_handshake: enable
            scan_bzip2: enable
            ssl_offloaded: "no"
            status: enable
            uncompressed_nest_limit: "12"
            uncompressed_oversize_limit: "10"
        rpc_over_http: enable
        smtp:
            inspect_all: enable
            options: fragmail
            oversize_limit: "10"
            ports:
                - 1
            proxy_after_tcp_handshake: enable
            scan_bzip2: enable
            server_busy: enable
            ssl_offloaded: "no"
            status: enable
            uncompressed_nest_limit: "12"
            uncompressed_oversize_limit: "10"
        ssh:
            comfort_amount: "1"
            comfort_interval: "10"
            options: oversize
            oversize_limit: "10"
            scan_bzip2: enable
            ssl_offloaded: "no"
            stream_based_uncompressed_limit: "0"
            tcp_window_maximum: "8388608"
            tcp_window_minimum: "131072"
            tcp_window_size: "262144"
            tcp_window_type: auto-tuning
            uncompressed_nest_limit: "12"
            uncompressed_oversize_limit: "10"
        switching_protocols_log: disable
    state: present
    vdom: root
  name: Configure protocol options.