fortios_ips_sensor

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_ips_sensor

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

Name	Type	Required	Default
access_token	str
enable_log	bool		`false`
ips_sensor	dict
member_path	str
member_state	str
state	str	yes
vdom	str		`root`

Example

yaml

# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_ips_sensor:
    access_token: '{{ fortios_access_token }}'
    ips_sensor:
        block_malicious_url: disable
        comment: Comment.
        entries:
            - action: pass
              default_action: all
              default_status: all
              exempt_ip:
                - id: "14"
              id: "16"
              log: disable
              log_attack_context: disable
              log_packet: disable
              quarantine: none
              quarantine_log: disable
              rate_count: "0"
              rate_duration: "60"
              rate_mode: periodical
              rate_track: none
              rule:
                - id: "32"
              status: disable
              vuln_type:
                - id: "36"
        extended_log: enable
        filter:
            - action: pass
              log: disable
              log_packet: disable
              name: default_name_44
              quarantine: none
              quarantine_expiry: "1073741823"
              quarantine_log: disable
              status: disable
        name: default_name_52
        override:
            - action: pass
              exempt_ip:
                - id: "57"
              log: disable
              log_packet: disable
              quarantine: none
              quarantine_expiry: "1073741823"
              quarantine_log: disable
              rule_id: 1
              status: disable
        scan_botnet_connections: disable
    state: present
    vdom: root
  name: Configure IPS sensor.