fortios_firewall_sniffer
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_firewall_sniffer
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| firewall_sniffer | dict | |||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_firewall_sniffer:
access_token: '{{ fortios_access_token }}'
firewall_sniffer:
anomaly:
- action: pass
log: enable
name: default_name_6
quarantine: none
quarantine_log: disable
status: disable
synproxy_tcp_mss: "0"
synproxy_tcp_sack: enable
synproxy_tcp_timestamp: enable
synproxy_tcp_window: "4096"
synproxy_tcp_windowscale: "0"
synproxy_tos: "0"
synproxy_ttl: "32"
threshold: "0"
threshold_default: "0"
application_list_status: enable
av_profile_status: enable
casb_profile_status: enable
dlp_profile_status: enable
dlp_sensor_status: enable
dsri: enable
emailfilter_profile_status: enable
file_filter_profile_status: enable
host: myhostname
id: "36"
ip_threatfeed:
- name: default_name_39 (source system.external-resource.name)
ip_threatfeed_status: enable
ips_dos_status: enable
ips_sensor_status: enable
ipv6: enable
logtraffic: all
max_packet_count: "4000"
non_ip: enable
scan_botnet_connections: disable
spamfilter_profile_status: enable
status: enable
webfilter_profile_status: enable
state: present
vdom: root
name: Configure sniffer.