fortios_wireless_controller_wids_profile
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_wireless_controller_wids_profile
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root | ||
| wireless_controller_wids_profile | dict |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_wireless_controller_wids_profile:
access_token: '{{ fortios_access_token }}'
state: present
vdom: root
wireless_controller_wids_profile:
adhoc_network: enable
adhoc_valid_ssid: enable
air_jack: enable
ap_auto_suppress: enable
ap_bgscan_disable_day: sunday
ap_bgscan_disable_schedules:
- name: default_name_10 (source firewall.schedule.group.name firewall.schedule.recurring.name firewall.schedule.onetime.name)
ap_bgscan_duration: "30"
ap_bgscan_idle: "20"
ap_bgscan_intv: "3"
ap_bgscan_period: "600"
ap_bgscan_report_intv: "30"
ap_fgscan_report_intv: "15"
ap_impersonation: enable
ap_scan: disable
ap_scan_passive: enable
ap_spoofing: enable
asleap_attack: enable
assoc_flood_thresh: "30"
assoc_flood_time: "10"
assoc_frame_flood: enable
auth_flood_thresh: "30"
auth_flood_time: "10"
auth_frame_flood: enable
bcn_flood: enable
bcn_flood_thresh: "15"
bcn_flood_time: "1"
beacon_wrong_channel: enable
block_ack_flood: enable
block_ack_flood_thresh: "50"
block_ack_flood_time: "1"
chan_based_mitm: enable
client_flood: enable
client_flood_thresh: "30"
client_flood_time: "10"
comment: Comment.
cts_flood: enable
cts_flood_thresh: "30"
cts_flood_time: "10"
deauth_broadcast: enable
deauth_unknown_src_thresh: "10"
disassoc_broadcast: enable
disconnect_station: enable
eapol_fail_flood: enable
eapol_fail_intv: "1"
eapol_fail_thresh: "10"
eapol_key_overflow: enable
eapol_logoff_flood: enable
eapol_logoff_intv: "1"
eapol_logoff_thresh: "10"
eapol_pre_fail_flood: enable
eapol_pre_fail_intv: "1"
eapol_pre_fail_thresh: "10"
eapol_pre_succ_flood: enable
eapol_pre_succ_intv: "1"
eapol_pre_succ_thresh: "10"
eapol_start_flood: enable
eapol_start_intv: "1"
eapol_start_thresh: "10"
eapol_succ_flood: enable
eapol_succ_intv: "1"
eapol_succ_thresh: "10"
fata_jack: enable
fuzzed_beacon: enable
fuzzed_probe_request: enable
fuzzed_probe_response: enable
hotspotter_attack: enable
ht_40mhz_intolerance: enable
ht_greenfield: enable
invalid_addr_combination: enable
invalid_mac_oui: enable
long_duration_attack: enable
long_duration_thresh: "8200"
malformed_association: enable
malformed_auth: enable
malformed_ht_ie: enable
name: default_name_86
netstumbler: enable
netstumbler_thresh: "5"
netstumbler_time: "30"
null_ssid_probe_resp: enable
omerta_attack: enable
overflow_ie: enable
probe_flood: enable
probe_flood_thresh: "30"
probe_flood_time: "1"
pspoll_flood: enable
pspoll_flood_thresh: "30"
pspoll_flood_time: "1"
pwsave_dos_attack: enable
reassoc_flood: enable
reassoc_flood_thresh: "30"
reassoc_flood_time: "10"
risky_encryption: enable
rts_flood: enable
rts_flood_thresh: "30"
rts_flood_time: "10"
sensor_mode: disable
spoofed_deauth: enable
unencrypted_valid: enable
valid_client_misassociation: enable
valid_ssid_misuse: enable
weak_wep_iv: enable
wellenreiter: enable
wellenreiter_thresh: "5"
wellenreiter_time: "30"
windows_bridge: enable
wireless_bridge: enable
wpa_ft_attack: enable
name: Configure wireless intrusion detection system (WIDS) profiles.