PARALLAX

fortios_system_settings

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Collection: fortinet.fortios

Full Name: fortinet.fortios.fortios_system_settings

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS

Parameters

NameTypeRequiredDefaultDescription
access_tokenstr
enable_logboolfalse
member_pathstr
member_statestr
system_settingsdict
vdomstrroot

Example

yaml
- fortinet.fortios.fortios_system_settings:
    system_settings:
        allow_linkdown_path: enable
        allow_subnet_overlap: enable
        application_bandwidth_tracking: disable
        asymroute: enable
        asymroute_icmp: enable
        asymroute6: enable
        asymroute6_icmp: enable
        auxiliary_session: enable
        bfd: enable
        bfd_desired_min_tx: "250"
        bfd_detect_mult: "3"
        bfd_dont_enforce_src_port: enable
        bfd_required_min_rx: "250"
        block_land_attack: disable
        central_nat: enable
        compliance_check: enable
        consolidated_firewall_mode: enable
        default_app_port_as_service: enable
        default_policy_expiry_days: "30"
        default_voip_alg_mode: proxy-based
        deny_tcp_with_icmp: enable
        detect_unknown_esp: enable
        dhcp_proxy: enable
        dhcp_proxy_interface_select_method: auto
        dhcp_proxy_vrf_select: "0"
        discovered_device_timeout: "28"
        dyn_addr_session_check: enable
        ecmp_max_paths: "255"
        email_portal_check_dns: disable
        ext_resource_session_check: enable
        firewall_session_dirty: check-all
        fqdn_session_check: enable
        fw_session_hairpin: enable
        gtp_asym_fgsp: disable
        gtp_monitor_mode: enable
        gui_advanced_policy: enable
        gui_advanced_wireless_features: enable
        gui_allow_unnamed_policy: enable
        gui_antivirus: enable
        gui_ap_profile: enable
        gui_application_control: enable
        gui_casb: enable
        gui_default_policy_columns:
            - name: default_name_53
        gui_dhcp_advanced: enable
        gui_dlp: enable
        gui_dlp_advanced: enable
        gui_dlp_profile: enable
        gui_dns_database: enable
        gui_dnsfilter: enable
        gui_domain_ip_reputation: enable
        gui_dos_policy: enable
        gui_dynamic_device_os_id: enable
        gui_dynamic_profile_display: enable
        gui_dynamic_routing: enable
        gui_email_collection: enable
        gui_endpoint_control: enable
        gui_endpoint_control_advanced: enable
        gui_enforce_change_summary: disable
        gui_explicit_proxy: enable
        gui_file_filter: enable
        gui_fortiap_split_tunneling: enable
        gui_fortiextender_controller: enable
        gui_fortitelemetry: enable
        gui_gtp: enable
        gui_icap: enable
        gui_implicit_policy: enable
        gui_ips: enable
        gui_load_balance: enable
        gui_local_in_policy: enable
        gui_local_reports: enable
        gui_multicast_policy: enable
        gui_multiple_interface_policy: enable
        gui_multiple_utm_profiles: enable
        gui_nat46_64: enable
        gui_object_colors: enable
        gui_ot: enable
        gui_per_policy_disclaimer: enable
        gui_policy_based_ipsec: enable
        gui_policy_disclaimer: enable
        gui_policy_learning: enable
        gui_proxy_inspection: enable
        gui_replacement_message_groups: enable
        gui_route_tag_address_creation: enable
        gui_security_profile_group: enable
        gui_spamfilter: enable
        gui_sslvpn: enable
        gui_sslvpn_personal_bookmarks: enable
        gui_sslvpn_realms: enable
        gui_switch_controller: enable
        gui_threat_weight: enable
        gui_traffic_shaping: enable
        gui_videofilter: enable
        gui_virtual_patch_profile: enable
        gui_voip_profile: enable
        gui_vpn: enable
        gui_waf_profile: enable
        gui_wan_load_balancing: enable
        gui_wanopt_cache: enable
        gui_webfilter: enable
        gui_webfilter_advanced: enable
        gui_wireless_controller: enable
        gui_ztna: enable
        h323_direct_model: disable
        http_external_dest: fortiweb
        ike_detailed_event_logs: disable
        ike_dn_format: with-space
        ike_policy_route: enable
        ike_port: "500"
        ike_quick_crash_detect: enable
        ike_session_resume: enable
        ike_tcp_port: "443"
        implicit_allow_dns: enable
        inspection_mode: proxy
        internet_service_app_ctrl_size: "32768"
        internet_service_database_cache: disable
        intree_ses_best_route: force
        lan_extension_controller_port: "5246"
        link_down_access: enable
        lldp_reception: enable
        lldp_transmission: enable
        mac_ttl: "300"
        multicast_forward: enable
        multicast_skip_policy: enable
        multicast_ttl_notchange: enable
        nat46_force_ipv4_packet_forwarding: enable
        nat46_generate_ipv6_fragment_header: enable
        nat64_force_ipv6_packet_forwarding: enable
        ngfw_mode: profile-based
        opmode: nat
        pfcp_monitor_mode: enable
        policy_offload_level: disable
        prp_trailer_action: enable
        sccp_port: "2000"
        sctp_session_without_init: enable
        ses_denied_multicast_traffic: enable
        ses_denied_traffic: enable
        sip_expectation: enable
        sip_helper: enable
        sip_nat_trace: enable
        sip_ssl_port: "5061"
        sip_tcp_port:
            - 1
        sip_udp_port:
            - 1
        snat_hairpin_traffic: enable
        status: enable
        strict_src_check: enable
        tcp_session_without_syn: enable
        utf8_spam_tagging: enable
        v4_ecmp_mode: source-ip-based
        vdom_type: traffic
        vpn_stats_log: ipsec
        vpn_stats_period: "600"
        wccp_cache_engine: enable
    vdom: root
  name: Configure VDOM settings.
Search
    ↑ ↓ move↵ openesc close