Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
fortios.firewall/consolidated.getPolicy
Explore with Pulumi AI
Use this data source to get information on an fortios firewallconsolidated policy
Using getPolicy
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getPolicy(args: GetPolicyArgs, opts?: InvokeOptions): Promise<GetPolicyResult>
function getPolicyOutput(args: GetPolicyOutputArgs, opts?: InvokeOptions): Output<GetPolicyResult>
def get_policy(policyid: Optional[int] = None,
vdomparam: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetPolicyResult
def get_policy_output(policyid: Optional[pulumi.Input[int]] = None,
vdomparam: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetPolicyResult]
func LookupPolicy(ctx *Context, args *LookupPolicyArgs, opts ...InvokeOption) (*LookupPolicyResult, error)
func LookupPolicyOutput(ctx *Context, args *LookupPolicyOutputArgs, opts ...InvokeOption) LookupPolicyResultOutput
> Note: This function is named LookupPolicy
in the Go SDK.
public static class GetPolicy
{
public static Task<GetPolicyResult> InvokeAsync(GetPolicyArgs args, InvokeOptions? opts = null)
public static Output<GetPolicyResult> Invoke(GetPolicyInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetPolicyResult> getPolicy(GetPolicyArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: fortios:firewall/consolidated/getPolicy:getPolicy
arguments:
# arguments dictionary
The following arguments are supported:
- Policyid int
- Specify the policyid of the desired firewallconsolidated policy.
- Vdomparam string
- Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Policyid int
- Specify the policyid of the desired firewallconsolidated policy.
- Vdomparam string
- Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- policyid Integer
- Specify the policyid of the desired firewallconsolidated policy.
- vdomparam String
- Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- policyid number
- Specify the policyid of the desired firewallconsolidated policy.
- vdomparam string
- Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- policyid int
- Specify the policyid of the desired firewallconsolidated policy.
- vdomparam str
- Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- policyid Number
- Specify the policyid of the desired firewallconsolidated policy.
- vdomparam String
- Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
getPolicy Result
The following output properties are available:
- Action string
- Policy action (allow/deny/ipsec).
- App
Categories List<Pulumiverse.Fortios. Firewall. Consolidated. Outputs. Get Policy App Category> - Application category ID list. The structure of
app_category
block is documented below. - App
Groups List<Pulumiverse.Fortios. Firewall. Consolidated. Outputs. Get Policy App Group> - Application group names. The structure of
app_group
block is documented below. - Application
List string - Name of an existing Application list.
- Applications
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Application> - Application ID list. The structure of
application
block is documented below. - Auto
Asic stringOffload - Enable/disable policy traffic ASIC offloading.
- Av
Profile string - Name of an existing Antivirus profile.
- Captive
Portal stringExempt - Enable exemption of some users from the captive portal.
- Cifs
Profile string - Name of an existing CIFS profile.
- Comments string
- Comment.
- Diffserv
Forward string - Enable to change packet's DiffServ values to the specified diffservcode-forward value.
- Diffserv
Reverse string - Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
- Diffservcode
Forward string - Change packet's DiffServ to this value.
- Diffservcode
Rev string - Change packet's reverse (reply) DiffServ to this value.
- Dlp
Sensor string - Name of an existing DLP sensor.
- Dnsfilter
Profile string - Name of an existing DNS filter profile.
- Dstaddr4s
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Dstaddr4> - Destination IPv4 address name and address group names. The structure of
dstaddr4
block is documented below. - Dstaddr6s
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Dstaddr6> - Destination IPv6 address name and address group names. The structure of
dstaddr6
block is documented below. - Dstaddr
Negate string - When enabled dstaddr specifies what the destination address must NOT be.
- Dstintfs
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Dstintf> - Outgoing (egress) interface. The structure of
dstintf
block is documented below. - Emailfilter
Profile string - Name of an existing email filter profile.
- Fixedport string
- Enable to prevent source NAT from changing a session's source port.
- Fsso
Groups List<Pulumiverse.Fortios. Firewall. Consolidated. Outputs. Get Policy Fsso Group> - Names of FSSO groups. The structure of
fsso_groups
block is documented below. - Groups
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Group> - Names of user groups that can authenticate with this policy. The structure of
groups
block is documented below. - Http
Policy stringRedirect - Redirect HTTP(S) traffic to matching transparent web proxy policy.
- Icap
Profile string - Name of an existing ICAP profile.
- Id string
- The provider-assigned unique ID for this managed resource.
- Inbound string
- Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
- Inspection
Mode string - Policy inspection mode (Flow/proxy). Default is Flow mode.
- Internet
Service string - Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
- Internet
Service List<Pulumiverse.Custom Groups Fortios. Firewall. Consolidated. Outputs. Get Policy Internet Service Custom Group> - Custom Internet Service group name. The structure of
internet_service_custom_group
block is documented below. - Internet
Service List<Pulumiverse.Customs Fortios. Firewall. Consolidated. Outputs. Get Policy Internet Service Custom> - Custom Internet Service name. The structure of
internet_service_custom
block is documented below. - Internet
Service List<Pulumiverse.Groups Fortios. Firewall. Consolidated. Outputs. Get Policy Internet Service Group> - Internet Service group name. The structure of
internet_service_group
block is documented below. - Internet
Service List<Pulumiverse.Ids Fortios. Firewall. Consolidated. Outputs. Get Policy Internet Service Id> - Internet Service ID. The structure of
internet_service_id
block is documented below. - Internet
Service List<Pulumiverse.Names Fortios. Firewall. Consolidated. Outputs. Get Policy Internet Service Name> - Internet Service name. The structure of
internet_service_name
block is documented below. - Internet
Service stringNegate - When enabled internet-service specifies what the service must NOT be.
- Internet
Service stringSrc - Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
- Internet
Service List<Pulumiverse.Src Custom Groups Fortios. Firewall. Consolidated. Outputs. Get Policy Internet Service Src Custom Group> - Custom Internet Service source group name. The structure of
internet_service_src_custom_group
block is documented below. - Internet
Service List<Pulumiverse.Src Customs Fortios. Firewall. Consolidated. Outputs. Get Policy Internet Service Src Custom> - Custom Internet Service source name. The structure of
internet_service_src_custom
block is documented below. - Internet
Service List<Pulumiverse.Src Groups Fortios. Firewall. Consolidated. Outputs. Get Policy Internet Service Src Group> - Internet Service source group name. The structure of
internet_service_src_group
block is documented below. - Internet
Service List<Pulumiverse.Src Ids Fortios. Firewall. Consolidated. Outputs. Get Policy Internet Service Src Id> - Internet Service source ID. The structure of
internet_service_src_id
block is documented below. - Internet
Service List<Pulumiverse.Src Names Fortios. Firewall. Consolidated. Outputs. Get Policy Internet Service Src Name> - Internet Service source name. The structure of
internet_service_src_name
block is documented below. - Internet
Service stringSrc Negate - When enabled internet-service-src specifies what the service must NOT be.
- Ippool string
- Enable to use IP Pools for source NAT.
- Ips
Sensor string - Name of an existing IPS sensor.
- Logtraffic string
- Enable or disable logging. Log all sessions or security profile sessions.
- Logtraffic
Start string - Record logs when a session starts.
- Name string
- Application group names.
- Nat string
- Enable/disable source NAT.
- Outbound string
- Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
- Per
Ip stringShaper - Per-IP traffic shaper.
- Policyid int
- Policy ID.
- Poolname4s
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Poolname4> - IPv4 pool names. The structure of
poolname4
block is documented below. - Poolname6s
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Poolname6> - IPv6 pool names. The structure of
poolname6
block is documented below. - Profile
Group string - Name of profile group.
- Profile
Protocol stringOptions - Name of an existing Protocol options profile.
- Profile
Type string - Determine whether the firewall policy allows security profile groups or single profiles only.
- Schedule string
- Schedule name.
- Service
Negate string - When enabled service specifies what the service must NOT be.
- Services
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Service> - Service and service group names. The structure of
service
block is documented below. - Session
Ttl int - TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
- Spamfilter
Profile string - Name of an existing Spam filter profile.
- Srcaddr4s
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Srcaddr4> - Source IPv4 address name and address group names. The structure of
srcaddr4
block is documented below. - Srcaddr6s
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Srcaddr6> - Source IPv6 address name and address group names. The structure of
srcaddr6
block is documented below. - Srcaddr
Negate string - When enabled srcaddr specifies what the source address must NOT be.
- Srcintfs
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy Srcintf> - Incoming (ingress) interface. The structure of
srcintf
block is documented below. - Ssh
Filter stringProfile - Name of an existing SSH filter profile.
- Ssh
Policy stringRedirect - Redirect SSH traffic to matching transparent proxy policy.
- Ssl
Ssh stringProfile - Name of an existing SSL SSH profile.
- Status string
- Enable or disable this policy.
- Tcp
Mss intReceiver - Receiver TCP maximum segment size (MSS).
- Tcp
Mss intSender - Sender TCP maximum segment size (MSS).
- Traffic
Shaper string - Traffic shaper.
- Traffic
Shaper stringReverse - Reverse traffic shaper.
- Url
Categories List<Pulumiverse.Fortios. Firewall. Consolidated. Outputs. Get Policy Url Category> - URL category ID list. The structure of
url_category
block is documented below. - Users
List<Pulumiverse.
Fortios. Firewall. Consolidated. Outputs. Get Policy User> - Names of individual users that can authenticate with this policy. The structure of
users
block is documented below. - Utm
Status string - Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
- Uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- Voip
Profile string - Name of an existing VoIP profile.
- Vpntunnel string
- Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
- Waf
Profile string - Name of an existing Web application firewall profile.
- Wanopt string
- Enable/disable WAN optimization.
- Wanopt
Detection string - WAN optimization auto-detection mode.
- Wanopt
Passive stringOpt - WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
- Wanopt
Peer string - WAN optimization peer.
- Wanopt
Profile string - WAN optimization profile.
- Webcache string
- Enable/disable web cache.
- Webcache
Https string - Enable/disable web cache for HTTPS.
- Webfilter
Profile string - Name of an existing Web filter profile.
- Webproxy
Forward stringServer - Webproxy forward server name.
- Webproxy
Profile string - Webproxy profile name.
- Vdomparam string
- Action string
- Policy action (allow/deny/ipsec).
- App
Categories []GetPolicy App Category - Application category ID list. The structure of
app_category
block is documented below. - App
Groups []GetPolicy App Group - Application group names. The structure of
app_group
block is documented below. - Application
List string - Name of an existing Application list.
- Applications
[]Get
Policy Application - Application ID list. The structure of
application
block is documented below. - Auto
Asic stringOffload - Enable/disable policy traffic ASIC offloading.
- Av
Profile string - Name of an existing Antivirus profile.
- Captive
Portal stringExempt - Enable exemption of some users from the captive portal.
- Cifs
Profile string - Name of an existing CIFS profile.
- Comments string
- Comment.
- Diffserv
Forward string - Enable to change packet's DiffServ values to the specified diffservcode-forward value.
- Diffserv
Reverse string - Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
- Diffservcode
Forward string - Change packet's DiffServ to this value.
- Diffservcode
Rev string - Change packet's reverse (reply) DiffServ to this value.
- Dlp
Sensor string - Name of an existing DLP sensor.
- Dnsfilter
Profile string - Name of an existing DNS filter profile.
- Dstaddr4s
[]Get
Policy Dstaddr4 - Destination IPv4 address name and address group names. The structure of
dstaddr4
block is documented below. - Dstaddr6s
[]Get
Policy Dstaddr6 - Destination IPv6 address name and address group names. The structure of
dstaddr6
block is documented below. - Dstaddr
Negate string - When enabled dstaddr specifies what the destination address must NOT be.
- Dstintfs
[]Get
Policy Dstintf - Outgoing (egress) interface. The structure of
dstintf
block is documented below. - Emailfilter
Profile string - Name of an existing email filter profile.
- Fixedport string
- Enable to prevent source NAT from changing a session's source port.
- Fsso
Groups []GetPolicy Fsso Group - Names of FSSO groups. The structure of
fsso_groups
block is documented below. - Groups
[]Get
Policy Group - Names of user groups that can authenticate with this policy. The structure of
groups
block is documented below. - Http
Policy stringRedirect - Redirect HTTP(S) traffic to matching transparent web proxy policy.
- Icap
Profile string - Name of an existing ICAP profile.
- Id string
- The provider-assigned unique ID for this managed resource.
- Inbound string
- Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
- Inspection
Mode string - Policy inspection mode (Flow/proxy). Default is Flow mode.
- Internet
Service string - Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
- Internet
Service []GetCustom Groups Policy Internet Service Custom Group - Custom Internet Service group name. The structure of
internet_service_custom_group
block is documented below. - Internet
Service []GetCustoms Policy Internet Service Custom - Custom Internet Service name. The structure of
internet_service_custom
block is documented below. - Internet
Service []GetGroups Policy Internet Service Group - Internet Service group name. The structure of
internet_service_group
block is documented below. - Internet
Service []GetIds Policy Internet Service Id - Internet Service ID. The structure of
internet_service_id
block is documented below. - Internet
Service []GetNames Policy Internet Service Name - Internet Service name. The structure of
internet_service_name
block is documented below. - Internet
Service stringNegate - When enabled internet-service specifies what the service must NOT be.
- Internet
Service stringSrc - Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
- Internet
Service []GetSrc Custom Groups Policy Internet Service Src Custom Group - Custom Internet Service source group name. The structure of
internet_service_src_custom_group
block is documented below. - Internet
Service []GetSrc Customs Policy Internet Service Src Custom - Custom Internet Service source name. The structure of
internet_service_src_custom
block is documented below. - Internet
Service []GetSrc Groups Policy Internet Service Src Group - Internet Service source group name. The structure of
internet_service_src_group
block is documented below. - Internet
Service []GetSrc Ids Policy Internet Service Src Id - Internet Service source ID. The structure of
internet_service_src_id
block is documented below. - Internet
Service []GetSrc Names Policy Internet Service Src Name - Internet Service source name. The structure of
internet_service_src_name
block is documented below. - Internet
Service stringSrc Negate - When enabled internet-service-src specifies what the service must NOT be.
- Ippool string
- Enable to use IP Pools for source NAT.
- Ips
Sensor string - Name of an existing IPS sensor.
- Logtraffic string
- Enable or disable logging. Log all sessions or security profile sessions.
- Logtraffic
Start string - Record logs when a session starts.
- Name string
- Application group names.
- Nat string
- Enable/disable source NAT.
- Outbound string
- Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
- Per
Ip stringShaper - Per-IP traffic shaper.
- Policyid int
- Policy ID.
- Poolname4s
[]Get
Policy Poolname4 - IPv4 pool names. The structure of
poolname4
block is documented below. - Poolname6s
[]Get
Policy Poolname6 - IPv6 pool names. The structure of
poolname6
block is documented below. - Profile
Group string - Name of profile group.
- Profile
Protocol stringOptions - Name of an existing Protocol options profile.
- Profile
Type string - Determine whether the firewall policy allows security profile groups or single profiles only.
- Schedule string
- Schedule name.
- Service
Negate string - When enabled service specifies what the service must NOT be.
- Services
[]Get
Policy Service - Service and service group names. The structure of
service
block is documented below. - Session
Ttl int - TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
- Spamfilter
Profile string - Name of an existing Spam filter profile.
- Srcaddr4s
[]Get
Policy Srcaddr4 - Source IPv4 address name and address group names. The structure of
srcaddr4
block is documented below. - Srcaddr6s
[]Get
Policy Srcaddr6 - Source IPv6 address name and address group names. The structure of
srcaddr6
block is documented below. - Srcaddr
Negate string - When enabled srcaddr specifies what the source address must NOT be.
- Srcintfs
[]Get
Policy Srcintf - Incoming (ingress) interface. The structure of
srcintf
block is documented below. - Ssh
Filter stringProfile - Name of an existing SSH filter profile.
- Ssh
Policy stringRedirect - Redirect SSH traffic to matching transparent proxy policy.
- Ssl
Ssh stringProfile - Name of an existing SSL SSH profile.
- Status string
- Enable or disable this policy.
- Tcp
Mss intReceiver - Receiver TCP maximum segment size (MSS).
- Tcp
Mss intSender - Sender TCP maximum segment size (MSS).
- Traffic
Shaper string - Traffic shaper.
- Traffic
Shaper stringReverse - Reverse traffic shaper.
- Url
Categories []GetPolicy Url Category - URL category ID list. The structure of
url_category
block is documented below. - Users
[]Get
Policy User - Names of individual users that can authenticate with this policy. The structure of
users
block is documented below. - Utm
Status string - Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
- Uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- Voip
Profile string - Name of an existing VoIP profile.
- Vpntunnel string
- Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
- Waf
Profile string - Name of an existing Web application firewall profile.
- Wanopt string
- Enable/disable WAN optimization.
- Wanopt
Detection string - WAN optimization auto-detection mode.
- Wanopt
Passive stringOpt - WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
- Wanopt
Peer string - WAN optimization peer.
- Wanopt
Profile string - WAN optimization profile.
- Webcache string
- Enable/disable web cache.
- Webcache
Https string - Enable/disable web cache for HTTPS.
- Webfilter
Profile string - Name of an existing Web filter profile.
- Webproxy
Forward stringServer - Webproxy forward server name.
- Webproxy
Profile string - Webproxy profile name.
- Vdomparam string
- action String
- Policy action (allow/deny/ipsec).
- app
Categories List<GetPolicy App Category> - Application category ID list. The structure of
app_category
block is documented below. - app
Groups List<GetPolicy App Group> - Application group names. The structure of
app_group
block is documented below. - application
List String - Name of an existing Application list.
- applications
List<Get
Policy Application> - Application ID list. The structure of
application
block is documented below. - auto
Asic StringOffload - Enable/disable policy traffic ASIC offloading.
- av
Profile String - Name of an existing Antivirus profile.
- captive
Portal StringExempt - Enable exemption of some users from the captive portal.
- cifs
Profile String - Name of an existing CIFS profile.
- comments String
- Comment.
- diffserv
Forward String - Enable to change packet's DiffServ values to the specified diffservcode-forward value.
- diffserv
Reverse String - Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
- diffservcode
Forward String - Change packet's DiffServ to this value.
- diffservcode
Rev String - Change packet's reverse (reply) DiffServ to this value.
- dlp
Sensor String - Name of an existing DLP sensor.
- dnsfilter
Profile String - Name of an existing DNS filter profile.
- dstaddr4s
List<Get
Policy Dstaddr4> - Destination IPv4 address name and address group names. The structure of
dstaddr4
block is documented below. - dstaddr6s
List<Get
Policy Dstaddr6> - Destination IPv6 address name and address group names. The structure of
dstaddr6
block is documented below. - dstaddr
Negate String - When enabled dstaddr specifies what the destination address must NOT be.
- dstintfs
List<Get
Policy Dstintf> - Outgoing (egress) interface. The structure of
dstintf
block is documented below. - emailfilter
Profile String - Name of an existing email filter profile.
- fixedport String
- Enable to prevent source NAT from changing a session's source port.
- fsso
Groups List<GetPolicy Fsso Group> - Names of FSSO groups. The structure of
fsso_groups
block is documented below. - groups
List<Get
Policy Group> - Names of user groups that can authenticate with this policy. The structure of
groups
block is documented below. - http
Policy StringRedirect - Redirect HTTP(S) traffic to matching transparent web proxy policy.
- icap
Profile String - Name of an existing ICAP profile.
- id String
- The provider-assigned unique ID for this managed resource.
- inbound String
- Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
- inspection
Mode String - Policy inspection mode (Flow/proxy). Default is Flow mode.
- internet
Service String - Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
- internet
Service List<GetCustom Groups Policy Internet Service Custom Group> - Custom Internet Service group name. The structure of
internet_service_custom_group
block is documented below. - internet
Service List<GetCustoms Policy Internet Service Custom> - Custom Internet Service name. The structure of
internet_service_custom
block is documented below. - internet
Service List<GetGroups Policy Internet Service Group> - Internet Service group name. The structure of
internet_service_group
block is documented below. - internet
Service List<GetIds Policy Internet Service Id> - Internet Service ID. The structure of
internet_service_id
block is documented below. - internet
Service List<GetNames Policy Internet Service Name> - Internet Service name. The structure of
internet_service_name
block is documented below. - internet
Service StringNegate - When enabled internet-service specifies what the service must NOT be.
- internet
Service StringSrc - Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
- internet
Service List<GetSrc Custom Groups Policy Internet Service Src Custom Group> - Custom Internet Service source group name. The structure of
internet_service_src_custom_group
block is documented below. - internet
Service List<GetSrc Customs Policy Internet Service Src Custom> - Custom Internet Service source name. The structure of
internet_service_src_custom
block is documented below. - internet
Service List<GetSrc Groups Policy Internet Service Src Group> - Internet Service source group name. The structure of
internet_service_src_group
block is documented below. - internet
Service List<GetSrc Ids Policy Internet Service Src Id> - Internet Service source ID. The structure of
internet_service_src_id
block is documented below. - internet
Service List<GetSrc Names Policy Internet Service Src Name> - Internet Service source name. The structure of
internet_service_src_name
block is documented below. - internet
Service StringSrc Negate - When enabled internet-service-src specifies what the service must NOT be.
- ippool String
- Enable to use IP Pools for source NAT.
- ips
Sensor String - Name of an existing IPS sensor.
- logtraffic String
- Enable or disable logging. Log all sessions or security profile sessions.
- logtraffic
Start String - Record logs when a session starts.
- name String
- Application group names.
- nat String
- Enable/disable source NAT.
- outbound String
- Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
- per
Ip StringShaper - Per-IP traffic shaper.
- policyid Integer
- Policy ID.
- poolname4s
List<Get
Policy Poolname4> - IPv4 pool names. The structure of
poolname4
block is documented below. - poolname6s
List<Get
Policy Poolname6> - IPv6 pool names. The structure of
poolname6
block is documented below. - profile
Group String - Name of profile group.
- profile
Protocol StringOptions - Name of an existing Protocol options profile.
- profile
Type String - Determine whether the firewall policy allows security profile groups or single profiles only.
- schedule String
- Schedule name.
- service
Negate String - When enabled service specifies what the service must NOT be.
- services
List<Get
Policy Service> - Service and service group names. The structure of
service
block is documented below. - session
Ttl Integer - TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
- spamfilter
Profile String - Name of an existing Spam filter profile.
- srcaddr4s
List<Get
Policy Srcaddr4> - Source IPv4 address name and address group names. The structure of
srcaddr4
block is documented below. - srcaddr6s
List<Get
Policy Srcaddr6> - Source IPv6 address name and address group names. The structure of
srcaddr6
block is documented below. - srcaddr
Negate String - When enabled srcaddr specifies what the source address must NOT be.
- srcintfs
List<Get
Policy Srcintf> - Incoming (ingress) interface. The structure of
srcintf
block is documented below. - ssh
Filter StringProfile - Name of an existing SSH filter profile.
- ssh
Policy StringRedirect - Redirect SSH traffic to matching transparent proxy policy.
- ssl
Ssh StringProfile - Name of an existing SSL SSH profile.
- status String
- Enable or disable this policy.
- tcp
Mss IntegerReceiver - Receiver TCP maximum segment size (MSS).
- tcp
Mss IntegerSender - Sender TCP maximum segment size (MSS).
- traffic
Shaper String - Traffic shaper.
- traffic
Shaper StringReverse - Reverse traffic shaper.
- url
Categories List<GetPolicy Url Category> - URL category ID list. The structure of
url_category
block is documented below. - users
List<Get
Policy User> - Names of individual users that can authenticate with this policy. The structure of
users
block is documented below. - utm
Status String - Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
- uuid String
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- voip
Profile String - Name of an existing VoIP profile.
- vpntunnel String
- Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
- waf
Profile String - Name of an existing Web application firewall profile.
- wanopt String
- Enable/disable WAN optimization.
- wanopt
Detection String - WAN optimization auto-detection mode.
- wanopt
Passive StringOpt - WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
- wanopt
Peer String - WAN optimization peer.
- wanopt
Profile String - WAN optimization profile.
- webcache String
- Enable/disable web cache.
- webcache
Https String - Enable/disable web cache for HTTPS.
- webfilter
Profile String - Name of an existing Web filter profile.
- webproxy
Forward StringServer - Webproxy forward server name.
- webproxy
Profile String - Webproxy profile name.
- vdomparam String
- action string
- Policy action (allow/deny/ipsec).
- app
Categories GetPolicy App Category[] - Application category ID list. The structure of
app_category
block is documented below. - app
Groups GetPolicy App Group[] - Application group names. The structure of
app_group
block is documented below. - application
List string - Name of an existing Application list.
- applications
Get
Policy Application[] - Application ID list. The structure of
application
block is documented below. - auto
Asic stringOffload - Enable/disable policy traffic ASIC offloading.
- av
Profile string - Name of an existing Antivirus profile.
- captive
Portal stringExempt - Enable exemption of some users from the captive portal.
- cifs
Profile string - Name of an existing CIFS profile.
- comments string
- Comment.
- diffserv
Forward string - Enable to change packet's DiffServ values to the specified diffservcode-forward value.
- diffserv
Reverse string - Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
- diffservcode
Forward string - Change packet's DiffServ to this value.
- diffservcode
Rev string - Change packet's reverse (reply) DiffServ to this value.
- dlp
Sensor string - Name of an existing DLP sensor.
- dnsfilter
Profile string - Name of an existing DNS filter profile.
- dstaddr4s
Get
Policy Dstaddr4[] - Destination IPv4 address name and address group names. The structure of
dstaddr4
block is documented below. - dstaddr6s
Get
Policy Dstaddr6[] - Destination IPv6 address name and address group names. The structure of
dstaddr6
block is documented below. - dstaddr
Negate string - When enabled dstaddr specifies what the destination address must NOT be.
- dstintfs
Get
Policy Dstintf[] - Outgoing (egress) interface. The structure of
dstintf
block is documented below. - emailfilter
Profile string - Name of an existing email filter profile.
- fixedport string
- Enable to prevent source NAT from changing a session's source port.
- fsso
Groups GetPolicy Fsso Group[] - Names of FSSO groups. The structure of
fsso_groups
block is documented below. - groups
Get
Policy Group[] - Names of user groups that can authenticate with this policy. The structure of
groups
block is documented below. - http
Policy stringRedirect - Redirect HTTP(S) traffic to matching transparent web proxy policy.
- icap
Profile string - Name of an existing ICAP profile.
- id string
- The provider-assigned unique ID for this managed resource.
- inbound string
- Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
- inspection
Mode string - Policy inspection mode (Flow/proxy). Default is Flow mode.
- internet
Service string - Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
- internet
Service GetCustom Groups Policy Internet Service Custom Group[] - Custom Internet Service group name. The structure of
internet_service_custom_group
block is documented below. - internet
Service GetCustoms Policy Internet Service Custom[] - Custom Internet Service name. The structure of
internet_service_custom
block is documented below. - internet
Service GetGroups Policy Internet Service Group[] - Internet Service group name. The structure of
internet_service_group
block is documented below. - internet
Service GetIds Policy Internet Service Id[] - Internet Service ID. The structure of
internet_service_id
block is documented below. - internet
Service GetNames Policy Internet Service Name[] - Internet Service name. The structure of
internet_service_name
block is documented below. - internet
Service stringNegate - When enabled internet-service specifies what the service must NOT be.
- internet
Service stringSrc - Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
- internet
Service GetSrc Custom Groups Policy Internet Service Src Custom Group[] - Custom Internet Service source group name. The structure of
internet_service_src_custom_group
block is documented below. - internet
Service GetSrc Customs Policy Internet Service Src Custom[] - Custom Internet Service source name. The structure of
internet_service_src_custom
block is documented below. - internet
Service GetSrc Groups Policy Internet Service Src Group[] - Internet Service source group name. The structure of
internet_service_src_group
block is documented below. - internet
Service GetSrc Ids Policy Internet Service Src Id[] - Internet Service source ID. The structure of
internet_service_src_id
block is documented below. - internet
Service GetSrc Names Policy Internet Service Src Name[] - Internet Service source name. The structure of
internet_service_src_name
block is documented below. - internet
Service stringSrc Negate - When enabled internet-service-src specifies what the service must NOT be.
- ippool string
- Enable to use IP Pools for source NAT.
- ips
Sensor string - Name of an existing IPS sensor.
- logtraffic string
- Enable or disable logging. Log all sessions or security profile sessions.
- logtraffic
Start string - Record logs when a session starts.
- name string
- Application group names.
- nat string
- Enable/disable source NAT.
- outbound string
- Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
- per
Ip stringShaper - Per-IP traffic shaper.
- policyid number
- Policy ID.
- poolname4s
Get
Policy Poolname4[] - IPv4 pool names. The structure of
poolname4
block is documented below. - poolname6s
Get
Policy Poolname6[] - IPv6 pool names. The structure of
poolname6
block is documented below. - profile
Group string - Name of profile group.
- profile
Protocol stringOptions - Name of an existing Protocol options profile.
- profile
Type string - Determine whether the firewall policy allows security profile groups or single profiles only.
- schedule string
- Schedule name.
- service
Negate string - When enabled service specifies what the service must NOT be.
- services
Get
Policy Service[] - Service and service group names. The structure of
service
block is documented below. - session
Ttl number - TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
- spamfilter
Profile string - Name of an existing Spam filter profile.
- srcaddr4s
Get
Policy Srcaddr4[] - Source IPv4 address name and address group names. The structure of
srcaddr4
block is documented below. - srcaddr6s
Get
Policy Srcaddr6[] - Source IPv6 address name and address group names. The structure of
srcaddr6
block is documented below. - srcaddr
Negate string - When enabled srcaddr specifies what the source address must NOT be.
- srcintfs
Get
Policy Srcintf[] - Incoming (ingress) interface. The structure of
srcintf
block is documented below. - ssh
Filter stringProfile - Name of an existing SSH filter profile.
- ssh
Policy stringRedirect - Redirect SSH traffic to matching transparent proxy policy.
- ssl
Ssh stringProfile - Name of an existing SSL SSH profile.
- status string
- Enable or disable this policy.
- tcp
Mss numberReceiver - Receiver TCP maximum segment size (MSS).
- tcp
Mss numberSender - Sender TCP maximum segment size (MSS).
- traffic
Shaper string - Traffic shaper.
- traffic
Shaper stringReverse - Reverse traffic shaper.
- url
Categories GetPolicy Url Category[] - URL category ID list. The structure of
url_category
block is documented below. - users
Get
Policy User[] - Names of individual users that can authenticate with this policy. The structure of
users
block is documented below. - utm
Status string - Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
- uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- voip
Profile string - Name of an existing VoIP profile.
- vpntunnel string
- Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
- waf
Profile string - Name of an existing Web application firewall profile.
- wanopt string
- Enable/disable WAN optimization.
- wanopt
Detection string - WAN optimization auto-detection mode.
- wanopt
Passive stringOpt - WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
- wanopt
Peer string - WAN optimization peer.
- wanopt
Profile string - WAN optimization profile.
- webcache string
- Enable/disable web cache.
- webcache
Https string - Enable/disable web cache for HTTPS.
- webfilter
Profile string - Name of an existing Web filter profile.
- webproxy
Forward stringServer - Webproxy forward server name.
- webproxy
Profile string - Webproxy profile name.
- vdomparam string
- action str
- Policy action (allow/deny/ipsec).
- app_
categories Sequence[GetPolicy App Category] - Application category ID list. The structure of
app_category
block is documented below. - app_
groups Sequence[GetPolicy App Group] - Application group names. The structure of
app_group
block is documented below. - application_
list str - Name of an existing Application list.
- applications
Sequence[Get
Policy Application] - Application ID list. The structure of
application
block is documented below. - auto_
asic_ stroffload - Enable/disable policy traffic ASIC offloading.
- av_
profile str - Name of an existing Antivirus profile.
- captive_
portal_ strexempt - Enable exemption of some users from the captive portal.
- cifs_
profile str - Name of an existing CIFS profile.
- comments str
- Comment.
- diffserv_
forward str - Enable to change packet's DiffServ values to the specified diffservcode-forward value.
- diffserv_
reverse str - Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
- diffservcode_
forward str - Change packet's DiffServ to this value.
- diffservcode_
rev str - Change packet's reverse (reply) DiffServ to this value.
- dlp_
sensor str - Name of an existing DLP sensor.
- dnsfilter_
profile str - Name of an existing DNS filter profile.
- dstaddr4s
Sequence[Get
Policy Dstaddr4] - Destination IPv4 address name and address group names. The structure of
dstaddr4
block is documented below. - dstaddr6s
Sequence[Get
Policy Dstaddr6] - Destination IPv6 address name and address group names. The structure of
dstaddr6
block is documented below. - dstaddr_
negate str - When enabled dstaddr specifies what the destination address must NOT be.
- dstintfs
Sequence[Get
Policy Dstintf] - Outgoing (egress) interface. The structure of
dstintf
block is documented below. - emailfilter_
profile str - Name of an existing email filter profile.
- fixedport str
- Enable to prevent source NAT from changing a session's source port.
- fsso_
groups Sequence[GetPolicy Fsso Group] - Names of FSSO groups. The structure of
fsso_groups
block is documented below. - groups
Sequence[Get
Policy Group] - Names of user groups that can authenticate with this policy. The structure of
groups
block is documented below. - http_
policy_ strredirect - Redirect HTTP(S) traffic to matching transparent web proxy policy.
- icap_
profile str - Name of an existing ICAP profile.
- id str
- The provider-assigned unique ID for this managed resource.
- inbound str
- Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
- inspection_
mode str - Policy inspection mode (Flow/proxy). Default is Flow mode.
- internet_
service str - Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
- internet_
service_ Sequence[Getcustom_ groups Policy Internet Service Custom Group] - Custom Internet Service group name. The structure of
internet_service_custom_group
block is documented below. - internet_
service_ Sequence[Getcustoms Policy Internet Service Custom] - Custom Internet Service name. The structure of
internet_service_custom
block is documented below. - internet_
service_ Sequence[Getgroups Policy Internet Service Group] - Internet Service group name. The structure of
internet_service_group
block is documented below. - internet_
service_ Sequence[Getids Policy Internet Service Id] - Internet Service ID. The structure of
internet_service_id
block is documented below. - internet_
service_ Sequence[Getnames Policy Internet Service Name] - Internet Service name. The structure of
internet_service_name
block is documented below. - internet_
service_ strnegate - When enabled internet-service specifies what the service must NOT be.
- internet_
service_ strsrc - Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
- internet_
service_ Sequence[Getsrc_ custom_ groups Policy Internet Service Src Custom Group] - Custom Internet Service source group name. The structure of
internet_service_src_custom_group
block is documented below. - internet_
service_ Sequence[Getsrc_ customs Policy Internet Service Src Custom] - Custom Internet Service source name. The structure of
internet_service_src_custom
block is documented below. - internet_
service_ Sequence[Getsrc_ groups Policy Internet Service Src Group] - Internet Service source group name. The structure of
internet_service_src_group
block is documented below. - internet_
service_ Sequence[Getsrc_ ids Policy Internet Service Src Id] - Internet Service source ID. The structure of
internet_service_src_id
block is documented below. - internet_
service_ Sequence[Getsrc_ names Policy Internet Service Src Name] - Internet Service source name. The structure of
internet_service_src_name
block is documented below. - internet_
service_ strsrc_ negate - When enabled internet-service-src specifies what the service must NOT be.
- ippool str
- Enable to use IP Pools for source NAT.
- ips_
sensor str - Name of an existing IPS sensor.
- logtraffic str
- Enable or disable logging. Log all sessions or security profile sessions.
- logtraffic_
start str - Record logs when a session starts.
- name str
- Application group names.
- nat str
- Enable/disable source NAT.
- outbound str
- Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
- per_
ip_ strshaper - Per-IP traffic shaper.
- policyid int
- Policy ID.
- poolname4s
Sequence[Get
Policy Poolname4] - IPv4 pool names. The structure of
poolname4
block is documented below. - poolname6s
Sequence[Get
Policy Poolname6] - IPv6 pool names. The structure of
poolname6
block is documented below. - profile_
group str - Name of profile group.
- profile_
protocol_ stroptions - Name of an existing Protocol options profile.
- profile_
type str - Determine whether the firewall policy allows security profile groups or single profiles only.
- schedule str
- Schedule name.
- service_
negate str - When enabled service specifies what the service must NOT be.
- services
Sequence[Get
Policy Service] - Service and service group names. The structure of
service
block is documented below. - session_
ttl int - TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
- spamfilter_
profile str - Name of an existing Spam filter profile.
- srcaddr4s
Sequence[Get
Policy Srcaddr4] - Source IPv4 address name and address group names. The structure of
srcaddr4
block is documented below. - srcaddr6s
Sequence[Get
Policy Srcaddr6] - Source IPv6 address name and address group names. The structure of
srcaddr6
block is documented below. - srcaddr_
negate str - When enabled srcaddr specifies what the source address must NOT be.
- srcintfs
Sequence[Get
Policy Srcintf] - Incoming (ingress) interface. The structure of
srcintf
block is documented below. - ssh_
filter_ strprofile - Name of an existing SSH filter profile.
- ssh_
policy_ strredirect - Redirect SSH traffic to matching transparent proxy policy.
- ssl_
ssh_ strprofile - Name of an existing SSL SSH profile.
- status str
- Enable or disable this policy.
- tcp_
mss_ intreceiver - Receiver TCP maximum segment size (MSS).
- tcp_
mss_ intsender - Sender TCP maximum segment size (MSS).
- traffic_
shaper str - Traffic shaper.
- traffic_
shaper_ strreverse - Reverse traffic shaper.
- url_
categories Sequence[GetPolicy Url Category] - URL category ID list. The structure of
url_category
block is documented below. - users
Sequence[Get
Policy User] - Names of individual users that can authenticate with this policy. The structure of
users
block is documented below. - utm_
status str - Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
- uuid str
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- voip_
profile str - Name of an existing VoIP profile.
- vpntunnel str
- Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
- waf_
profile str - Name of an existing Web application firewall profile.
- wanopt str
- Enable/disable WAN optimization.
- wanopt_
detection str - WAN optimization auto-detection mode.
- wanopt_
passive_ stropt - WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
- wanopt_
peer str - WAN optimization peer.
- wanopt_
profile str - WAN optimization profile.
- webcache str
- Enable/disable web cache.
- webcache_
https str - Enable/disable web cache for HTTPS.
- webfilter_
profile str - Name of an existing Web filter profile.
- webproxy_
forward_ strserver - Webproxy forward server name.
- webproxy_
profile str - Webproxy profile name.
- vdomparam str
- action String
- Policy action (allow/deny/ipsec).
- app
Categories List<Property Map> - Application category ID list. The structure of
app_category
block is documented below. - app
Groups List<Property Map> - Application group names. The structure of
app_group
block is documented below. - application
List String - Name of an existing Application list.
- applications List<Property Map>
- Application ID list. The structure of
application
block is documented below. - auto
Asic StringOffload - Enable/disable policy traffic ASIC offloading.
- av
Profile String - Name of an existing Antivirus profile.
- captive
Portal StringExempt - Enable exemption of some users from the captive portal.
- cifs
Profile String - Name of an existing CIFS profile.
- comments String
- Comment.
- diffserv
Forward String - Enable to change packet's DiffServ values to the specified diffservcode-forward value.
- diffserv
Reverse String - Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
- diffservcode
Forward String - Change packet's DiffServ to this value.
- diffservcode
Rev String - Change packet's reverse (reply) DiffServ to this value.
- dlp
Sensor String - Name of an existing DLP sensor.
- dnsfilter
Profile String - Name of an existing DNS filter profile.
- dstaddr4s List<Property Map>
- Destination IPv4 address name and address group names. The structure of
dstaddr4
block is documented below. - dstaddr6s List<Property Map>
- Destination IPv6 address name and address group names. The structure of
dstaddr6
block is documented below. - dstaddr
Negate String - When enabled dstaddr specifies what the destination address must NOT be.
- dstintfs List<Property Map>
- Outgoing (egress) interface. The structure of
dstintf
block is documented below. - emailfilter
Profile String - Name of an existing email filter profile.
- fixedport String
- Enable to prevent source NAT from changing a session's source port.
- fsso
Groups List<Property Map> - Names of FSSO groups. The structure of
fsso_groups
block is documented below. - groups List<Property Map>
- Names of user groups that can authenticate with this policy. The structure of
groups
block is documented below. - http
Policy StringRedirect - Redirect HTTP(S) traffic to matching transparent web proxy policy.
- icap
Profile String - Name of an existing ICAP profile.
- id String
- The provider-assigned unique ID for this managed resource.
- inbound String
- Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
- inspection
Mode String - Policy inspection mode (Flow/proxy). Default is Flow mode.
- internet
Service String - Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
- internet
Service List<Property Map>Custom Groups - Custom Internet Service group name. The structure of
internet_service_custom_group
block is documented below. - internet
Service List<Property Map>Customs - Custom Internet Service name. The structure of
internet_service_custom
block is documented below. - internet
Service List<Property Map>Groups - Internet Service group name. The structure of
internet_service_group
block is documented below. - internet
Service List<Property Map>Ids - Internet Service ID. The structure of
internet_service_id
block is documented below. - internet
Service List<Property Map>Names - Internet Service name. The structure of
internet_service_name
block is documented below. - internet
Service StringNegate - When enabled internet-service specifies what the service must NOT be.
- internet
Service StringSrc - Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
- internet
Service List<Property Map>Src Custom Groups - Custom Internet Service source group name. The structure of
internet_service_src_custom_group
block is documented below. - internet
Service List<Property Map>Src Customs - Custom Internet Service source name. The structure of
internet_service_src_custom
block is documented below. - internet
Service List<Property Map>Src Groups - Internet Service source group name. The structure of
internet_service_src_group
block is documented below. - internet
Service List<Property Map>Src Ids - Internet Service source ID. The structure of
internet_service_src_id
block is documented below. - internet
Service List<Property Map>Src Names - Internet Service source name. The structure of
internet_service_src_name
block is documented below. - internet
Service StringSrc Negate - When enabled internet-service-src specifies what the service must NOT be.
- ippool String
- Enable to use IP Pools for source NAT.
- ips
Sensor String - Name of an existing IPS sensor.
- logtraffic String
- Enable or disable logging. Log all sessions or security profile sessions.
- logtraffic
Start String - Record logs when a session starts.
- name String
- Application group names.
- nat String
- Enable/disable source NAT.
- outbound String
- Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
- per
Ip StringShaper - Per-IP traffic shaper.
- policyid Number
- Policy ID.
- poolname4s List<Property Map>
- IPv4 pool names. The structure of
poolname4
block is documented below. - poolname6s List<Property Map>
- IPv6 pool names. The structure of
poolname6
block is documented below. - profile
Group String - Name of profile group.
- profile
Protocol StringOptions - Name of an existing Protocol options profile.
- profile
Type String - Determine whether the firewall policy allows security profile groups or single profiles only.
- schedule String
- Schedule name.
- service
Negate String - When enabled service specifies what the service must NOT be.
- services List<Property Map>
- Service and service group names. The structure of
service
block is documented below. - session
Ttl Number - TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
- spamfilter
Profile String - Name of an existing Spam filter profile.
- srcaddr4s List<Property Map>
- Source IPv4 address name and address group names. The structure of
srcaddr4
block is documented below. - srcaddr6s List<Property Map>
- Source IPv6 address name and address group names. The structure of
srcaddr6
block is documented below. - srcaddr
Negate String - When enabled srcaddr specifies what the source address must NOT be.
- srcintfs List<Property Map>
- Incoming (ingress) interface. The structure of
srcintf
block is documented below. - ssh
Filter StringProfile - Name of an existing SSH filter profile.
- ssh
Policy StringRedirect - Redirect SSH traffic to matching transparent proxy policy.
- ssl
Ssh StringProfile - Name of an existing SSL SSH profile.
- status String
- Enable or disable this policy.
- tcp
Mss NumberReceiver - Receiver TCP maximum segment size (MSS).
- tcp
Mss NumberSender - Sender TCP maximum segment size (MSS).
- traffic
Shaper String - Traffic shaper.
- traffic
Shaper StringReverse - Reverse traffic shaper.
- url
Categories List<Property Map> - URL category ID list. The structure of
url_category
block is documented below. - users List<Property Map>
- Names of individual users that can authenticate with this policy. The structure of
users
block is documented below. - utm
Status String - Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
- uuid String
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- voip
Profile String - Name of an existing VoIP profile.
- vpntunnel String
- Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
- waf
Profile String - Name of an existing Web application firewall profile.
- wanopt String
- Enable/disable WAN optimization.
- wanopt
Detection String - WAN optimization auto-detection mode.
- wanopt
Passive StringOpt - WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
- wanopt
Peer String - WAN optimization peer.
- wanopt
Profile String - WAN optimization profile.
- webcache String
- Enable/disable web cache.
- webcache
Https String - Enable/disable web cache for HTTPS.
- webfilter
Profile String - Name of an existing Web filter profile.
- webproxy
Forward StringServer - Webproxy forward server name.
- webproxy
Profile String - Webproxy profile name.
- vdomparam String
Supporting Types
GetPolicyAppCategory
- Id int
- URL category ID.
- Id int
- URL category ID.
- id Integer
- URL category ID.
- id number
- URL category ID.
- id int
- URL category ID.
- id Number
- URL category ID.
GetPolicyAppGroup
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyApplication
- Id int
- URL category ID.
- Id int
- URL category ID.
- id Integer
- URL category ID.
- id number
- URL category ID.
- id int
- URL category ID.
- id Number
- URL category ID.
GetPolicyDstaddr4
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyDstaddr6
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyDstintf
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyFssoGroup
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyGroup
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyInternetServiceCustom
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyInternetServiceCustomGroup
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyInternetServiceGroup
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyInternetServiceId
- Id int
- URL category ID.
- Id int
- URL category ID.
- id Integer
- URL category ID.
- id number
- URL category ID.
- id int
- URL category ID.
- id Number
- URL category ID.
GetPolicyInternetServiceName
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyInternetServiceSrcCustom
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyInternetServiceSrcCustomGroup
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyInternetServiceSrcGroup
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyInternetServiceSrcId
- Id int
- URL category ID.
- Id int
- URL category ID.
- id Integer
- URL category ID.
- id number
- URL category ID.
- id int
- URL category ID.
- id Number
- URL category ID.
GetPolicyInternetServiceSrcName
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyPoolname4
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyPoolname6
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyService
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicySrcaddr4
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicySrcaddr6
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicySrcintf
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
GetPolicyUrlCategory
- Id int
- URL category ID.
- Id int
- URL category ID.
- id Integer
- URL category ID.
- id number
- URL category ID.
- id int
- URL category ID.
- id Number
- URL category ID.
GetPolicyUser
- Name string
- Application group names.
- Name string
- Application group names.
- name String
- Application group names.
- name string
- Application group names.
- name str
- Application group names.
- name String
- Application group names.
Package Details
- Repository
- fortios pulumiverse/pulumi-fortios
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
fortios
Terraform Provider.