fortios_ztna_web_proxy
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_ztna_web_proxy
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| state | str | yes | ||
| vdom | str | root | ||
| ztna_web_proxy | dict |
Example
yaml
# Define these inventory variables: fortios_access_token.
- fortinet.fortios.fortios_ztna_web_proxy:
access_token: '{{ fortios_access_token }}'
state: present
vdom: root
ztna_web_proxy:
api_gateway:
- h2_support: enable
h3_support: enable
http_cookie_age: "60"
http_cookie_domain_from_host: disable
http_cookie_generation: "0"
http_cookie_share: disable
https_cookie_secure: disable
id: "13"
ldb_method: static
persistence: none
quic:
ack_delay_exponent: "3"
active_connection_id_limit: "2"
active_migration: enable
grease_quic_bit: enable
max_ack_delay: "25"
max_datagram_frame_size: "1500"
max_idle_timeout: "30000"
max_udp_payload_size: "1500"
realservers:
- addr_type: ip
health_check: disable
health_check_proto: ping
holddown_interval: enable
http_host: myhostname
id: "32"
port: "443"
status: active
translate_host: enable
verify_cert: enable
weight: "1"
service: http
ssl_algorithm: high
ssl_cipher_suites:
- cipher: TLS-AES-128-GCM-SHA256
priority: 1
versions: tls-1.0
ssl_dh_bits: "768"
ssl_max_version: tls-1.0
ssl_min_version: tls-1.0
ssl_renegotiation: enable
url_map_type: sub-string
api_gateway6:
- h2_support: enable
h3_support: enable
http_cookie_age: "60"
http_cookie_domain_from_host: disable
http_cookie_generation: "0"
http_cookie_share: disable
https_cookie_secure: disable
id: "61"
ldb_method: static
persistence: none
quic:
ack_delay_exponent: "3"
active_connection_id_limit: "2"
active_migration: enable
grease_quic_bit: enable
max_ack_delay: "25"
max_datagram_frame_size: "1500"
max_idle_timeout: "30000"
max_udp_payload_size: "1500"
realservers:
- addr_type: ip
health_check: disable
health_check_proto: ping
holddown_interval: enable
http_host: myhostname
id: "80"
port: "443"
status: active
translate_host: enable
verify_cert: enable
weight: "1"
service: http
ssl_algorithm: high
ssl_cipher_suites:
- cipher: TLS-AES-128-GCM-SHA256
priority: 1
versions: tls-1.0
ssl_dh_bits: "768"
ssl_max_version: tls-1.0
ssl_min_version: tls-1.0
ssl_renegotiation: enable
url_map_type: sub-string
auth_portal: disable
auth_virtual_host: myhostname (source firewall.access-proxy-virtual-host.name)
host: myhostname (source firewall.access-proxy-virtual-host.name)
log_blocked_traffic: disable
name: default_name_104
svr_pool_multiplex: enable
svr_pool_server_max_concurrent_request: "0"
svr_pool_server_max_request: "0"
svr_pool_ttl: "15"
name: Configure ZTNA web-proxy.