fortios_firewall_security_policy

# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_security_policy:
    access_token: '{{ fortios_access_token }}'
    firewall_security_policy:
        action: accept
        app_category:
            - id: "5"
        app_group:
            - name: default_name_7 (source application.group.name)
        application:
            - id: "9"
        dstaddr:
            - name: default_name_20 (source firewall.address.name firewall.addrgrp.name firewall.vip.name firewall.vipgrp.name system.external-resource .name)
        dstaddr_negate: enable
        dstaddr4:
            - name: default_name_23 (source firewall.address.name firewall.addrgrp.name firewall.vip.name firewall.vipgrp.name)
        dstaddr6:
            - name: default_name_25 (source firewall.address6.name firewall.addrgrp6.name firewall.vip6.name firewall.vipgrp6.name system .external-resource.name)
        dstaddr6_negate: enable
        dstintf:
            - name: default_name_28 (source system.interface.name system.zone.name system.sdwan.zone.name)
        enforce_default_app_port: enable
        fsso_groups:
            - name: default_name_33 (source user.adgrp.name)
        groups:
            - name: default_name_36 (source user.group.name)
        internet_service: enable
        internet_service_custom:
            - name: default_name_40 (source firewall.internet-service-custom.name)
        internet_service_custom_group:
            - name: default_name_42 (source firewall.internet-service-custom-group.name)
        internet_service_fortiguard:
            - name: default_name_44 (source firewall.internet-service-fortiguard.name)
        internet_service_group:
            - name: default_name_46 (source firewall.internet-service-group.name)
        internet_service_id:
            - id: "48"
        internet_service_name:
            - name: default_name_50 (source firewall.internet-service-name.name)
        internet_service_negate: enable
        internet_service_src: enable
        internet_service_src_custom:
            - name: default_name_54 (source firewall.internet-service-custom.name)
        internet_service_src_custom_group:
            - name: default_name_56 (source firewall.internet-service-custom-group.name)
        internet_service_src_fortiguard:
            - name: default_name_58 (source firewall.internet-service-fortiguard.name)
        internet_service_src_group:
            - name: default_name_60 (source firewall.internet-service-group.name)
        internet_service_src_id:
            - id: "62"
        internet_service_src_name:
            - name: default_name_64 (source firewall.internet-service-name.name)
        internet_service_src_negate: enable
        internet_service6: enable
        internet_service6_custom:
            - name: default_name_68 (source firewall.internet-service-custom.name)
        internet_service6_custom_group:
            - name: default_name_70 (source firewall.internet-service-custom-group.name)
        internet_service6_fortiguard:
            - name: default_name_72 (source firewall.internet-service-fortiguard.name)
        internet_service6_group:
            - name: default_name_74 (source firewall.internet-service-group.name)
        internet_service6_name:
            - name: default_name_76 (source firewall.internet-service-name.name)
        internet_service6_negate: enable
        internet_service6_src: enable
        internet_service6_src_custom:
            - name: default_name_80 (source firewall.internet-service-custom.name)
        internet_service6_src_custom_group:
            - name: default_name_82 (source firewall.internet-service-custom-group.name)
        internet_service6_src_fortiguard:
            - name: default_name_84 (source firewall.internet-service-fortiguard.name)
        internet_service6_src_group:
            - name: default_name_86 (source firewall.internet-service-group.name)
        internet_service6_src_name:
            - name: default_name_88 (source firewall.internet-service-name.name)
        internet_service6_src_negate: enable
        learning_mode: enable
        logtraffic: all
        logtraffic_start: enable
        name: default_name_96
        nat46: enable
        nat64: enable
        policyid: 1
        profile_type: single
        send_deny_packet: disable
        service:
            - name: default_name_107 (source firewall.service.custom.name firewall.service.group.name)
        service_negate: enable
        srcaddr:
            - name: default_name_110 (source firewall.address.name firewall.addrgrp.name system.external-resource.name)
        srcaddr_negate: enable
        srcaddr4:
            - name: default_name_113 (source firewall.address.name firewall.addrgrp.name)
        srcaddr6:
            - name: default_name_115 (source firewall.address6.name firewall.addrgrp6.name system.external-resource.name)
        srcaddr6_negate: enable
        srcintf:
            - name: default_name_118 (source system.interface.name system.zone.name system.sdwan.zone.name)
        status: enable
        users:
            - name: default_name_125 (source user.local.name)
        utm_status: enable
        uuid_idx: "2147483647"
    state: present
    vdom: root
  name: Configure NGFW IPv4/IPv6 application policies.