PARALLAX

fortios_firewall_proxy_policy

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_firewall_proxy_policy

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

NameTypeRequiredDefaultDescription
access_tokenstr
enable_logboolfalse
firewall_proxy_policydict
member_pathstr
member_statestr
statestryes
vdomstrroot

Example

yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_proxy_policy:
    access_token: '{{ fortios_access_token }}'
    firewall_proxy_policy:
        access_proxy:
            - name: default_name_4 (source firewall.access-proxy.name)
        access_proxy6:
            - name: default_name_6 (source firewall.access-proxy6.name)
        action: accept
        block_notification: enable
        detect_https_in_http_request: enable
        device_ownership: enable
        disclaimer: disable
        dstaddr:
            - name: default_name_23 (source firewall.address.name firewall.addrgrp.name firewall.proxy-address.name firewall.proxy-addrgrp.name firewall .vip.name firewall.vipgrp.name system.external-resource.name)
        dstaddr_negate: enable
        dstaddr6:
            - name: default_name_26 (source firewall.address6.name firewall.addrgrp6.name firewall.vip6.name firewall.vipgrp6.name system .external-resource.name)
        dstintf:
            - name: default_name_28 (source system.interface.name system.zone.name system.sdwan.zone.name)
        groups:
            - name: default_name_33 (source user.group.name)
        http_tunnel_auth: enable
        https_sub_category: enable
        internet_service: enable
        internet_service_custom:
            - name: default_name_39 (source firewall.internet-service-custom.name)
        internet_service_custom_group:
            - name: default_name_41 (source firewall.internet-service-custom-group.name)
        internet_service_fortiguard:
            - name: default_name_43 (source firewall.internet-service-fortiguard.name)
        internet_service_group:
            - name: default_name_45 (source firewall.internet-service-group.name)
        internet_service_id:
            - id: "47"
        internet_service_name:
            - name: default_name_49 (source firewall.internet-service-name.name)
        internet_service_negate: enable
        internet_service6: enable
        internet_service6_custom:
            - name: default_name_53 (source firewall.internet-service-custom.name)
        internet_service6_custom_group:
            - name: default_name_55 (source firewall.internet-service-custom-group.name)
        internet_service6_fortiguard:
            - name: default_name_57 (source firewall.internet-service-fortiguard.name)
        internet_service6_group:
            - name: default_name_59 (source firewall.internet-service-group.name)
        internet_service6_name:
            - name: default_name_61 (source firewall.internet-service-name.name)
        internet_service6_negate: enable
        log_http_transaction: enable
        logtraffic: all
        logtraffic_start: enable
        name: default_name_71
        policyid: 1
        poolname:
            - name: default_name_74 (source firewall.ippool.name)
        poolname6:
            - name: default_name_76 (source firewall.ippool6.name)
        profile_type: single
        proxy: explicit-web
        scan_botnet_connections: disable
        service:
            - name: default_name_87 (source firewall.service.custom.name firewall.service.group.name)
        service_negate: enable
        session_ttl: "0"
        srcaddr:
            - name: default_name_92 (source firewall.address.name firewall.addrgrp.name firewall.proxy-address.name firewall.proxy-addrgrp.name system .external-resource.name)
        srcaddr_negate: enable
        srcaddr6:
            - name: default_name_95 (source firewall.address6.name firewall.addrgrp6.name system.external-resource.name)
        srcintf:
            - name: default_name_97 (source system.interface.name system.zone.name system.sdwan.zone.name)
        ssh_policy_redirect: enable
        status: enable
        transparent: enable
        url_risk:
            - name: default_name_105 (source webfilter.ftgd-risk-level.name)
        users:
            - name: default_name_107 (source user.local.name user.certificate.name)
        utm_status: enable
        webcache: enable
        webcache_https: disable
        ztna_ems_tag:
            - name: default_name_120 (source firewall.address.name firewall.addrgrp.name)
        ztna_ems_tag_negate: enable
        ztna_proxy:
            - name: default_name_123 (source ztna.traffic-forward-proxy.name ztna.web-proxy.name ztna.web-portal.name)
        ztna_tags_match_logic: or
    state: present
    vdom: root
  name: Configure proxy policies.
Search
    ↑ ↓ move↵ openesc close