fortios_waf_profile
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_waf_profile
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root | ||
| waf_profile | dict |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_waf_profile:
access_token: '{{ fortios_access_token }}'
state: present
vdom: root
waf_profile:
address_list:
blocked_address:
- name: default_name_5 (source firewall.address.name firewall.addrgrp.name)
blocked_log: enable
severity: high
status: enable
trusted_address:
- name: default_name_10 (source firewall.address.name firewall.addrgrp.name)
comment: Comment.
constraint:
content_length:
action: allow
length: "67108864"
log: enable
severity: high
status: enable
exception:
- content_length: enable
header_length: enable
hostname: enable
id: "24"
line_length: enable
malformed: enable
max_cookie: enable
max_header_line: enable
max_range_segment: enable
max_url_param: enable
method: enable
param_length: enable
regex: enable
url_param_length: enable
version: enable
header_length:
action: allow
length: "8192"
log: enable
severity: high
status: enable
hostname:
action: allow
log: enable
severity: high
status: enable
line_length:
action: allow
length: "1024"
log: enable
severity: high
status: enable
malformed:
action: allow
log: enable
severity: high
status: enable
max_cookie:
action: allow
log: enable
max_cookie: "16"
severity: high
status: enable
max_header_line:
action: allow
log: enable
max_header_line: "32"
severity: high
status: enable
max_range_segment:
action: allow
log: enable
max_range_segment: "5"
severity: high
status: enable
max_url_param:
action: allow
log: enable
max_url_param: "16"
severity: high
status: enable
method:
action: allow
log: enable
severity: high
status: enable
param_length:
action: allow
length: "8192"
log: enable
severity: high
status: enable
url_param_length:
action: allow
length: "8192"
log: enable
severity: high
status: enable
version:
action: allow
log: enable
severity: high
status: enable
extended_log: enable
external: disable
method:
default_allowed_methods: get
log: enable
method_policy:
- allowed_methods: get
id: "113"
regex: enable
severity: high
status: enable
name: default_name_118
signature:
credit_card_detection_threshold: "3"
custom_signature:
- action: allow
case_sensitivity: disable
direction: request
log: enable
name: default_name_126
severity: high
status: enable
target: arg
disabled_signature:
- id: "132"
disabled_sub_class:
- id: "134"
main_class:
- action: allow
id: "137"
log: enable
severity: high
status: enable
url_access:
- access_pattern:
- id: "143"
negate: enable
regex: enable
action: bypass
id: "150"
log: enable
severity: high
name: Configure Web application firewall configuration.