fortios_firewall_proxy_policy
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_firewall_proxy_policy
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| firewall_proxy_policy | dict | |||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_proxy_policy:
access_token: '{{ fortios_access_token }}'
firewall_proxy_policy:
access_proxy:
- name: default_name_4 (source firewall.access-proxy.name)
access_proxy6:
- name: default_name_6 (source firewall.access-proxy6.name)
action: accept
block_notification: enable
detect_https_in_http_request: enable
device_ownership: enable
disclaimer: disable
dstaddr:
- name: default_name_23 (source firewall.address.name firewall.addrgrp.name firewall.proxy-address.name firewall.proxy-addrgrp.name firewall .vip.name firewall.vipgrp.name system.external-resource.name)
dstaddr_negate: enable
dstaddr6:
- name: default_name_26 (source firewall.address6.name firewall.addrgrp6.name firewall.vip6.name firewall.vipgrp6.name system .external-resource.name)
dstintf:
- name: default_name_28 (source system.interface.name system.zone.name system.sdwan.zone.name)
groups:
- name: default_name_33 (source user.group.name)
http_tunnel_auth: enable
https_sub_category: enable
internet_service: enable
internet_service_custom:
- name: default_name_39 (source firewall.internet-service-custom.name)
internet_service_custom_group:
- name: default_name_41 (source firewall.internet-service-custom-group.name)
internet_service_fortiguard:
- name: default_name_43 (source firewall.internet-service-fortiguard.name)
internet_service_group:
- name: default_name_45 (source firewall.internet-service-group.name)
internet_service_id:
- id: "47"
internet_service_name:
- name: default_name_49 (source firewall.internet-service-name.name)
internet_service_negate: enable
internet_service6: enable
internet_service6_custom:
- name: default_name_53 (source firewall.internet-service-custom.name)
internet_service6_custom_group:
- name: default_name_55 (source firewall.internet-service-custom-group.name)
internet_service6_fortiguard:
- name: default_name_57 (source firewall.internet-service-fortiguard.name)
internet_service6_group:
- name: default_name_59 (source firewall.internet-service-group.name)
internet_service6_name:
- name: default_name_61 (source firewall.internet-service-name.name)
internet_service6_negate: enable
log_http_transaction: enable
logtraffic: all
logtraffic_start: enable
name: default_name_71
policyid: 1
poolname:
- name: default_name_74 (source firewall.ippool.name)
poolname6:
- name: default_name_76 (source firewall.ippool6.name)
profile_type: single
proxy: explicit-web
scan_botnet_connections: disable
service:
- name: default_name_87 (source firewall.service.custom.name firewall.service.group.name)
service_negate: enable
session_ttl: "0"
srcaddr:
- name: default_name_92 (source firewall.address.name firewall.addrgrp.name firewall.proxy-address.name firewall.proxy-addrgrp.name system .external-resource.name)
srcaddr_negate: enable
srcaddr6:
- name: default_name_95 (source firewall.address6.name firewall.addrgrp6.name system.external-resource.name)
srcintf:
- name: default_name_97 (source system.interface.name system.zone.name system.sdwan.zone.name)
ssh_policy_redirect: enable
status: enable
transparent: enable
url_risk:
- name: default_name_105 (source webfilter.ftgd-risk-level.name)
users:
- name: default_name_107 (source user.local.name user.certificate.name)
utm_status: enable
webcache: enable
webcache_https: disable
ztna_ems_tag:
- name: default_name_120 (source firewall.address.name firewall.addrgrp.name)
ztna_ems_tag_negate: enable
ztna_proxy:
- name: default_name_123 (source ztna.traffic-forward-proxy.name ztna.web-proxy.name ztna.web-portal.name)
ztna_tags_match_logic: or
state: present
vdom: root
name: Configure proxy policies.