fortios_ztna_traffic_forward_proxy
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_ztna_traffic_forward_proxy
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root | ||
| ztna_traffic_forward_proxy | dict |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_ztna_traffic_forward_proxy:
access_token: '{{ fortios_access_token }}'
state: present
vdom: root
ztna_traffic_forward_proxy:
auth_portal: disable
auth_virtual_host: myhostname (source firewall.access-proxy-virtual-host.name)
client_cert: disable
comment: Comment.
empty_cert_action: accept
h3_support: enable
host: myhostname (source firewall.access-proxy-virtual-host.name)
log_blocked_traffic: disable
name: default_name_13
quic:
ack_delay_exponent: "3"
active_connection_id_limit: "2"
active_migration: enable
grease_quic_bit: enable
max_ack_delay: "25"
max_datagram_frame_size: "1500"
max_idle_timeout: "30000"
max_udp_payload_size: "1500"
ssl_accept_ffdhe_groups: enable
ssl_algorithm: high
ssl_certificate:
- name: default_name_27 (source vpn.certificate.local.name)
ssl_cipher_suites:
- cipher: TLS-AES-128-GCM-SHA256
priority: 1
versions: ssl-3.0
ssl_client_fallback: disable
ssl_client_rekey_count: "0"
ssl_client_renegotiation: allow
ssl_client_session_state_max: "1000"
ssl_client_session_state_timeout: "30"
ssl_client_session_state_type: disable
ssl_dh_bits: "768"
ssl_hpkp: disable
ssl_hpkp_age: "5184000"
ssl_hpkp_include_subdomains: disable
ssl_hsts: disable
ssl_hsts_age: "5184000"
ssl_hsts_include_subdomains: disable
ssl_http_location_conversion: enable
ssl_http_match_host: enable
ssl_max_version: ssl-3.0
ssl_min_version: ssl-3.0
ssl_mode: half
ssl_pfs: require
ssl_send_empty_frags: enable
ssl_server_algorithm: high
ssl_server_cipher_suites:
- cipher: TLS-AES-128-GCM-SHA256
priority: 1
versions: ssl-3.0
ssl_server_max_version: ssl-3.0
ssl_server_min_version: ssl-3.0
ssl_server_renegotiation: enable
ssl_server_session_state_max: "100"
ssl_server_session_state_timeout: "60"
ssl_server_session_state_type: disable
status: enable
svr_pool_multiplex: enable
svr_pool_server_max_concurrent_request: "0"
svr_pool_server_max_request: "0"
svr_pool_ttl: "15"
user_agent_detect: disable
name: Configure ZTNA traffic forward proxy.