fortios_system_settings
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_system_settings
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| system_settings | dict | |||
| vdom | str | root |
Example
yaml
- fortinet.fortios.fortios_system_settings:
system_settings:
allow_linkdown_path: enable
allow_subnet_overlap: enable
application_bandwidth_tracking: disable
asymroute: enable
asymroute_icmp: enable
asymroute6: enable
asymroute6_icmp: enable
auxiliary_session: enable
bfd: enable
bfd_desired_min_tx: "250"
bfd_detect_mult: "3"
bfd_dont_enforce_src_port: enable
bfd_required_min_rx: "250"
block_land_attack: disable
central_nat: enable
compliance_check: enable
consolidated_firewall_mode: enable
default_app_port_as_service: enable
default_policy_expiry_days: "30"
default_voip_alg_mode: proxy-based
deny_tcp_with_icmp: enable
detect_unknown_esp: enable
dhcp_proxy: enable
dhcp_proxy_interface_select_method: auto
dhcp_proxy_vrf_select: "0"
discovered_device_timeout: "28"
dyn_addr_session_check: enable
ecmp_max_paths: "255"
email_portal_check_dns: disable
ext_resource_session_check: enable
firewall_session_dirty: check-all
fqdn_session_check: enable
fw_session_hairpin: enable
gtp_asym_fgsp: disable
gtp_monitor_mode: enable
gui_advanced_policy: enable
gui_advanced_wireless_features: enable
gui_allow_unnamed_policy: enable
gui_antivirus: enable
gui_ap_profile: enable
gui_application_control: enable
gui_casb: enable
gui_default_policy_columns:
- name: default_name_53
gui_dhcp_advanced: enable
gui_dlp: enable
gui_dlp_advanced: enable
gui_dlp_profile: enable
gui_dns_database: enable
gui_dnsfilter: enable
gui_domain_ip_reputation: enable
gui_dos_policy: enable
gui_dynamic_device_os_id: enable
gui_dynamic_profile_display: enable
gui_dynamic_routing: enable
gui_email_collection: enable
gui_endpoint_control: enable
gui_endpoint_control_advanced: enable
gui_enforce_change_summary: disable
gui_explicit_proxy: enable
gui_file_filter: enable
gui_fortiap_split_tunneling: enable
gui_fortiextender_controller: enable
gui_fortitelemetry: enable
gui_gtp: enable
gui_icap: enable
gui_implicit_policy: enable
gui_ips: enable
gui_load_balance: enable
gui_local_in_policy: enable
gui_local_reports: enable
gui_multicast_policy: enable
gui_multiple_interface_policy: enable
gui_multiple_utm_profiles: enable
gui_nat46_64: enable
gui_object_colors: enable
gui_ot: enable
gui_per_policy_disclaimer: enable
gui_policy_based_ipsec: enable
gui_policy_disclaimer: enable
gui_policy_learning: enable
gui_proxy_inspection: enable
gui_replacement_message_groups: enable
gui_route_tag_address_creation: enable
gui_security_profile_group: enable
gui_spamfilter: enable
gui_sslvpn: enable
gui_sslvpn_personal_bookmarks: enable
gui_sslvpn_realms: enable
gui_switch_controller: enable
gui_threat_weight: enable
gui_traffic_shaping: enable
gui_videofilter: enable
gui_virtual_patch_profile: enable
gui_voip_profile: enable
gui_vpn: enable
gui_waf_profile: enable
gui_wan_load_balancing: enable
gui_wanopt_cache: enable
gui_webfilter: enable
gui_webfilter_advanced: enable
gui_wireless_controller: enable
gui_ztna: enable
h323_direct_model: disable
http_external_dest: fortiweb
ike_detailed_event_logs: disable
ike_dn_format: with-space
ike_policy_route: enable
ike_port: "500"
ike_quick_crash_detect: enable
ike_session_resume: enable
ike_tcp_port: "443"
implicit_allow_dns: enable
inspection_mode: proxy
internet_service_app_ctrl_size: "32768"
internet_service_database_cache: disable
intree_ses_best_route: force
lan_extension_controller_port: "5246"
link_down_access: enable
lldp_reception: enable
lldp_transmission: enable
mac_ttl: "300"
multicast_forward: enable
multicast_skip_policy: enable
multicast_ttl_notchange: enable
nat46_force_ipv4_packet_forwarding: enable
nat46_generate_ipv6_fragment_header: enable
nat64_force_ipv6_packet_forwarding: enable
ngfw_mode: profile-based
opmode: nat
pfcp_monitor_mode: enable
policy_offload_level: disable
prp_trailer_action: enable
sccp_port: "2000"
sctp_session_without_init: enable
ses_denied_multicast_traffic: enable
ses_denied_traffic: enable
sip_expectation: enable
sip_helper: enable
sip_nat_trace: enable
sip_ssl_port: "5061"
sip_tcp_port:
- 1
sip_udp_port:
- 1
snat_hairpin_traffic: enable
status: enable
strict_src_check: enable
tcp_session_without_syn: enable
utf8_spam_tagging: enable
v4_ecmp_mode: source-ip-based
vdom_type: traffic
vpn_stats_log: ipsec
vpn_stats_period: "600"
wccp_cache_engine: enable
vdom: root
name: Configure VDOM settings.