1. Packages
  2. Fortios
  3. API Docs
  4. firewall
  5. firewall/consolidated
  6. getPolicy
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse

fortios.firewall/consolidated.getPolicy

Explore with Pulumi AI

fortios logo
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse

    Use this data source to get information on an fortios firewallconsolidated policy

    Using getPolicy

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getPolicy(args: GetPolicyArgs, opts?: InvokeOptions): Promise<GetPolicyResult>
    function getPolicyOutput(args: GetPolicyOutputArgs, opts?: InvokeOptions): Output<GetPolicyResult>
    def get_policy(policyid: Optional[int] = None,
                   vdomparam: Optional[str] = None,
                   opts: Optional[InvokeOptions] = None) -> GetPolicyResult
    def get_policy_output(policyid: Optional[pulumi.Input[int]] = None,
                   vdomparam: Optional[pulumi.Input[str]] = None,
                   opts: Optional[InvokeOptions] = None) -> Output[GetPolicyResult]
    func LookupPolicy(ctx *Context, args *LookupPolicyArgs, opts ...InvokeOption) (*LookupPolicyResult, error)
    func LookupPolicyOutput(ctx *Context, args *LookupPolicyOutputArgs, opts ...InvokeOption) LookupPolicyResultOutput

    > Note: This function is named LookupPolicy in the Go SDK.

    public static class GetPolicy 
    {
        public static Task<GetPolicyResult> InvokeAsync(GetPolicyArgs args, InvokeOptions? opts = null)
        public static Output<GetPolicyResult> Invoke(GetPolicyInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetPolicyResult> getPolicy(GetPolicyArgs args, InvokeOptions options)
    // Output-based functions aren't available in Java yet
    
    fn::invoke:
      function: fortios:firewall/consolidated/getPolicy:getPolicy
      arguments:
        # arguments dictionary

    The following arguments are supported:

    Policyid int
    Specify the policyid of the desired firewallconsolidated policy.
    Vdomparam string
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    Policyid int
    Specify the policyid of the desired firewallconsolidated policy.
    Vdomparam string
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    policyid Integer
    Specify the policyid of the desired firewallconsolidated policy.
    vdomparam String
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    policyid number
    Specify the policyid of the desired firewallconsolidated policy.
    vdomparam string
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    policyid int
    Specify the policyid of the desired firewallconsolidated policy.
    vdomparam str
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    policyid Number
    Specify the policyid of the desired firewallconsolidated policy.
    vdomparam String
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

    getPolicy Result

    The following output properties are available:

    Action string
    Policy action (allow/deny/ipsec).
    AppCategories List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyAppCategory>
    Application category ID list. The structure of app_category block is documented below.
    AppGroups List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyAppGroup>
    Application group names. The structure of app_group block is documented below.
    ApplicationList string
    Name of an existing Application list.
    Applications List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyApplication>
    Application ID list. The structure of application block is documented below.
    AutoAsicOffload string
    Enable/disable policy traffic ASIC offloading.
    AvProfile string
    Name of an existing Antivirus profile.
    CaptivePortalExempt string
    Enable exemption of some users from the captive portal.
    CifsProfile string
    Name of an existing CIFS profile.
    Comments string
    Comment.
    DiffservForward string
    Enable to change packet's DiffServ values to the specified diffservcode-forward value.
    DiffservReverse string
    Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
    DiffservcodeForward string
    Change packet's DiffServ to this value.
    DiffservcodeRev string
    Change packet's reverse (reply) DiffServ to this value.
    DlpSensor string
    Name of an existing DLP sensor.
    DnsfilterProfile string
    Name of an existing DNS filter profile.
    Dstaddr4s List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyDstaddr4>
    Destination IPv4 address name and address group names. The structure of dstaddr4 block is documented below.
    Dstaddr6s List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyDstaddr6>
    Destination IPv6 address name and address group names. The structure of dstaddr6 block is documented below.
    DstaddrNegate string
    When enabled dstaddr specifies what the destination address must NOT be.
    Dstintfs List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyDstintf>
    Outgoing (egress) interface. The structure of dstintf block is documented below.
    EmailfilterProfile string
    Name of an existing email filter profile.
    Fixedport string
    Enable to prevent source NAT from changing a session's source port.
    FssoGroups List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyFssoGroup>
    Names of FSSO groups. The structure of fsso_groups block is documented below.
    Groups List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyGroup>
    Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
    HttpPolicyRedirect string
    Redirect HTTP(S) traffic to matching transparent web proxy policy.
    IcapProfile string
    Name of an existing ICAP profile.
    Id string
    The provider-assigned unique ID for this managed resource.
    Inbound string
    Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
    InspectionMode string
    Policy inspection mode (Flow/proxy). Default is Flow mode.
    InternetService string
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
    InternetServiceCustomGroups List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyInternetServiceCustomGroup>
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    InternetServiceCustoms List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyInternetServiceCustom>
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    InternetServiceGroups List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyInternetServiceGroup>
    Internet Service group name. The structure of internet_service_group block is documented below.
    InternetServiceIds List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyInternetServiceId>
    Internet Service ID. The structure of internet_service_id block is documented below.
    InternetServiceNames List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyInternetServiceName>
    Internet Service name. The structure of internet_service_name block is documented below.
    InternetServiceNegate string
    When enabled internet-service specifies what the service must NOT be.
    InternetServiceSrc string
    Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
    InternetServiceSrcCustomGroups List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyInternetServiceSrcCustomGroup>
    Custom Internet Service source group name. The structure of internet_service_src_custom_group block is documented below.
    InternetServiceSrcCustoms List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyInternetServiceSrcCustom>
    Custom Internet Service source name. The structure of internet_service_src_custom block is documented below.
    InternetServiceSrcGroups List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyInternetServiceSrcGroup>
    Internet Service source group name. The structure of internet_service_src_group block is documented below.
    InternetServiceSrcIds List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyInternetServiceSrcId>
    Internet Service source ID. The structure of internet_service_src_id block is documented below.
    InternetServiceSrcNames List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyInternetServiceSrcName>
    Internet Service source name. The structure of internet_service_src_name block is documented below.
    InternetServiceSrcNegate string
    When enabled internet-service-src specifies what the service must NOT be.
    Ippool string
    Enable to use IP Pools for source NAT.
    IpsSensor string
    Name of an existing IPS sensor.
    Logtraffic string
    Enable or disable logging. Log all sessions or security profile sessions.
    LogtrafficStart string
    Record logs when a session starts.
    Name string
    Application group names.
    Nat string
    Enable/disable source NAT.
    Outbound string
    Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
    PerIpShaper string
    Per-IP traffic shaper.
    Policyid int
    Policy ID.
    Poolname4s List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyPoolname4>
    IPv4 pool names. The structure of poolname4 block is documented below.
    Poolname6s List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyPoolname6>
    IPv6 pool names. The structure of poolname6 block is documented below.
    ProfileGroup string
    Name of profile group.
    ProfileProtocolOptions string
    Name of an existing Protocol options profile.
    ProfileType string
    Determine whether the firewall policy allows security profile groups or single profiles only.
    Schedule string
    Schedule name.
    ServiceNegate string
    When enabled service specifies what the service must NOT be.
    Services List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyService>
    Service and service group names. The structure of service block is documented below.
    SessionTtl int
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    SpamfilterProfile string
    Name of an existing Spam filter profile.
    Srcaddr4s List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicySrcaddr4>
    Source IPv4 address name and address group names. The structure of srcaddr4 block is documented below.
    Srcaddr6s List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicySrcaddr6>
    Source IPv6 address name and address group names. The structure of srcaddr6 block is documented below.
    SrcaddrNegate string
    When enabled srcaddr specifies what the source address must NOT be.
    Srcintfs List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicySrcintf>
    Incoming (ingress) interface. The structure of srcintf block is documented below.
    SshFilterProfile string
    Name of an existing SSH filter profile.
    SshPolicyRedirect string
    Redirect SSH traffic to matching transparent proxy policy.
    SslSshProfile string
    Name of an existing SSL SSH profile.
    Status string
    Enable or disable this policy.
    TcpMssReceiver int
    Receiver TCP maximum segment size (MSS).
    TcpMssSender int
    Sender TCP maximum segment size (MSS).
    TrafficShaper string
    Traffic shaper.
    TrafficShaperReverse string
    Reverse traffic shaper.
    UrlCategories List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyUrlCategory>
    URL category ID list. The structure of url_category block is documented below.
    Users List<Pulumiverse.Fortios.Firewall.Consolidated.Outputs.GetPolicyUser>
    Names of individual users that can authenticate with this policy. The structure of users block is documented below.
    UtmStatus string
    Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    VoipProfile string
    Name of an existing VoIP profile.
    Vpntunnel string
    Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
    WafProfile string
    Name of an existing Web application firewall profile.
    Wanopt string
    Enable/disable WAN optimization.
    WanoptDetection string
    WAN optimization auto-detection mode.
    WanoptPassiveOpt string
    WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
    WanoptPeer string
    WAN optimization peer.
    WanoptProfile string
    WAN optimization profile.
    Webcache string
    Enable/disable web cache.
    WebcacheHttps string
    Enable/disable web cache for HTTPS.
    WebfilterProfile string
    Name of an existing Web filter profile.
    WebproxyForwardServer string
    Webproxy forward server name.
    WebproxyProfile string
    Webproxy profile name.
    Vdomparam string
    Action string
    Policy action (allow/deny/ipsec).
    AppCategories []GetPolicyAppCategory
    Application category ID list. The structure of app_category block is documented below.
    AppGroups []GetPolicyAppGroup
    Application group names. The structure of app_group block is documented below.
    ApplicationList string
    Name of an existing Application list.
    Applications []GetPolicyApplication
    Application ID list. The structure of application block is documented below.
    AutoAsicOffload string
    Enable/disable policy traffic ASIC offloading.
    AvProfile string
    Name of an existing Antivirus profile.
    CaptivePortalExempt string
    Enable exemption of some users from the captive portal.
    CifsProfile string
    Name of an existing CIFS profile.
    Comments string
    Comment.
    DiffservForward string
    Enable to change packet's DiffServ values to the specified diffservcode-forward value.
    DiffservReverse string
    Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
    DiffservcodeForward string
    Change packet's DiffServ to this value.
    DiffservcodeRev string
    Change packet's reverse (reply) DiffServ to this value.
    DlpSensor string
    Name of an existing DLP sensor.
    DnsfilterProfile string
    Name of an existing DNS filter profile.
    Dstaddr4s []GetPolicyDstaddr4
    Destination IPv4 address name and address group names. The structure of dstaddr4 block is documented below.
    Dstaddr6s []GetPolicyDstaddr6
    Destination IPv6 address name and address group names. The structure of dstaddr6 block is documented below.
    DstaddrNegate string
    When enabled dstaddr specifies what the destination address must NOT be.
    Dstintfs []GetPolicyDstintf
    Outgoing (egress) interface. The structure of dstintf block is documented below.
    EmailfilterProfile string
    Name of an existing email filter profile.
    Fixedport string
    Enable to prevent source NAT from changing a session's source port.
    FssoGroups []GetPolicyFssoGroup
    Names of FSSO groups. The structure of fsso_groups block is documented below.
    Groups []GetPolicyGroup
    Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
    HttpPolicyRedirect string
    Redirect HTTP(S) traffic to matching transparent web proxy policy.
    IcapProfile string
    Name of an existing ICAP profile.
    Id string
    The provider-assigned unique ID for this managed resource.
    Inbound string
    Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
    InspectionMode string
    Policy inspection mode (Flow/proxy). Default is Flow mode.
    InternetService string
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
    InternetServiceCustomGroups []GetPolicyInternetServiceCustomGroup
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    InternetServiceCustoms []GetPolicyInternetServiceCustom
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    InternetServiceGroups []GetPolicyInternetServiceGroup
    Internet Service group name. The structure of internet_service_group block is documented below.
    InternetServiceIds []GetPolicyInternetServiceId
    Internet Service ID. The structure of internet_service_id block is documented below.
    InternetServiceNames []GetPolicyInternetServiceName
    Internet Service name. The structure of internet_service_name block is documented below.
    InternetServiceNegate string
    When enabled internet-service specifies what the service must NOT be.
    InternetServiceSrc string
    Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
    InternetServiceSrcCustomGroups []GetPolicyInternetServiceSrcCustomGroup
    Custom Internet Service source group name. The structure of internet_service_src_custom_group block is documented below.
    InternetServiceSrcCustoms []GetPolicyInternetServiceSrcCustom
    Custom Internet Service source name. The structure of internet_service_src_custom block is documented below.
    InternetServiceSrcGroups []GetPolicyInternetServiceSrcGroup
    Internet Service source group name. The structure of internet_service_src_group block is documented below.
    InternetServiceSrcIds []GetPolicyInternetServiceSrcId
    Internet Service source ID. The structure of internet_service_src_id block is documented below.
    InternetServiceSrcNames []GetPolicyInternetServiceSrcName
    Internet Service source name. The structure of internet_service_src_name block is documented below.
    InternetServiceSrcNegate string
    When enabled internet-service-src specifies what the service must NOT be.
    Ippool string
    Enable to use IP Pools for source NAT.
    IpsSensor string
    Name of an existing IPS sensor.
    Logtraffic string
    Enable or disable logging. Log all sessions or security profile sessions.
    LogtrafficStart string
    Record logs when a session starts.
    Name string
    Application group names.
    Nat string
    Enable/disable source NAT.
    Outbound string
    Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
    PerIpShaper string
    Per-IP traffic shaper.
    Policyid int
    Policy ID.
    Poolname4s []GetPolicyPoolname4
    IPv4 pool names. The structure of poolname4 block is documented below.
    Poolname6s []GetPolicyPoolname6
    IPv6 pool names. The structure of poolname6 block is documented below.
    ProfileGroup string
    Name of profile group.
    ProfileProtocolOptions string
    Name of an existing Protocol options profile.
    ProfileType string
    Determine whether the firewall policy allows security profile groups or single profiles only.
    Schedule string
    Schedule name.
    ServiceNegate string
    When enabled service specifies what the service must NOT be.
    Services []GetPolicyService
    Service and service group names. The structure of service block is documented below.
    SessionTtl int
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    SpamfilterProfile string
    Name of an existing Spam filter profile.
    Srcaddr4s []GetPolicySrcaddr4
    Source IPv4 address name and address group names. The structure of srcaddr4 block is documented below.
    Srcaddr6s []GetPolicySrcaddr6
    Source IPv6 address name and address group names. The structure of srcaddr6 block is documented below.
    SrcaddrNegate string
    When enabled srcaddr specifies what the source address must NOT be.
    Srcintfs []GetPolicySrcintf
    Incoming (ingress) interface. The structure of srcintf block is documented below.
    SshFilterProfile string
    Name of an existing SSH filter profile.
    SshPolicyRedirect string
    Redirect SSH traffic to matching transparent proxy policy.
    SslSshProfile string
    Name of an existing SSL SSH profile.
    Status string
    Enable or disable this policy.
    TcpMssReceiver int
    Receiver TCP maximum segment size (MSS).
    TcpMssSender int
    Sender TCP maximum segment size (MSS).
    TrafficShaper string
    Traffic shaper.
    TrafficShaperReverse string
    Reverse traffic shaper.
    UrlCategories []GetPolicyUrlCategory
    URL category ID list. The structure of url_category block is documented below.
    Users []GetPolicyUser
    Names of individual users that can authenticate with this policy. The structure of users block is documented below.
    UtmStatus string
    Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    VoipProfile string
    Name of an existing VoIP profile.
    Vpntunnel string
    Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
    WafProfile string
    Name of an existing Web application firewall profile.
    Wanopt string
    Enable/disable WAN optimization.
    WanoptDetection string
    WAN optimization auto-detection mode.
    WanoptPassiveOpt string
    WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
    WanoptPeer string
    WAN optimization peer.
    WanoptProfile string
    WAN optimization profile.
    Webcache string
    Enable/disable web cache.
    WebcacheHttps string
    Enable/disable web cache for HTTPS.
    WebfilterProfile string
    Name of an existing Web filter profile.
    WebproxyForwardServer string
    Webproxy forward server name.
    WebproxyProfile string
    Webproxy profile name.
    Vdomparam string
    action String
    Policy action (allow/deny/ipsec).
    appCategories List<GetPolicyAppCategory>
    Application category ID list. The structure of app_category block is documented below.
    appGroups List<GetPolicyAppGroup>
    Application group names. The structure of app_group block is documented below.
    applicationList String
    Name of an existing Application list.
    applications List<GetPolicyApplication>
    Application ID list. The structure of application block is documented below.
    autoAsicOffload String
    Enable/disable policy traffic ASIC offloading.
    avProfile String
    Name of an existing Antivirus profile.
    captivePortalExempt String
    Enable exemption of some users from the captive portal.
    cifsProfile String
    Name of an existing CIFS profile.
    comments String
    Comment.
    diffservForward String
    Enable to change packet's DiffServ values to the specified diffservcode-forward value.
    diffservReverse String
    Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
    diffservcodeForward String
    Change packet's DiffServ to this value.
    diffservcodeRev String
    Change packet's reverse (reply) DiffServ to this value.
    dlpSensor String
    Name of an existing DLP sensor.
    dnsfilterProfile String
    Name of an existing DNS filter profile.
    dstaddr4s List<GetPolicyDstaddr4>
    Destination IPv4 address name and address group names. The structure of dstaddr4 block is documented below.
    dstaddr6s List<GetPolicyDstaddr6>
    Destination IPv6 address name and address group names. The structure of dstaddr6 block is documented below.
    dstaddrNegate String
    When enabled dstaddr specifies what the destination address must NOT be.
    dstintfs List<GetPolicyDstintf>
    Outgoing (egress) interface. The structure of dstintf block is documented below.
    emailfilterProfile String
    Name of an existing email filter profile.
    fixedport String
    Enable to prevent source NAT from changing a session's source port.
    fssoGroups List<GetPolicyFssoGroup>
    Names of FSSO groups. The structure of fsso_groups block is documented below.
    groups List<GetPolicyGroup>
    Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
    httpPolicyRedirect String
    Redirect HTTP(S) traffic to matching transparent web proxy policy.
    icapProfile String
    Name of an existing ICAP profile.
    id String
    The provider-assigned unique ID for this managed resource.
    inbound String
    Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
    inspectionMode String
    Policy inspection mode (Flow/proxy). Default is Flow mode.
    internetService String
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
    internetServiceCustomGroups List<GetPolicyInternetServiceCustomGroup>
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internetServiceCustoms List<GetPolicyInternetServiceCustom>
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internetServiceGroups List<GetPolicyInternetServiceGroup>
    Internet Service group name. The structure of internet_service_group block is documented below.
    internetServiceIds List<GetPolicyInternetServiceId>
    Internet Service ID. The structure of internet_service_id block is documented below.
    internetServiceNames List<GetPolicyInternetServiceName>
    Internet Service name. The structure of internet_service_name block is documented below.
    internetServiceNegate String
    When enabled internet-service specifies what the service must NOT be.
    internetServiceSrc String
    Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
    internetServiceSrcCustomGroups List<GetPolicyInternetServiceSrcCustomGroup>
    Custom Internet Service source group name. The structure of internet_service_src_custom_group block is documented below.
    internetServiceSrcCustoms List<GetPolicyInternetServiceSrcCustom>
    Custom Internet Service source name. The structure of internet_service_src_custom block is documented below.
    internetServiceSrcGroups List<GetPolicyInternetServiceSrcGroup>
    Internet Service source group name. The structure of internet_service_src_group block is documented below.
    internetServiceSrcIds List<GetPolicyInternetServiceSrcId>
    Internet Service source ID. The structure of internet_service_src_id block is documented below.
    internetServiceSrcNames List<GetPolicyInternetServiceSrcName>
    Internet Service source name. The structure of internet_service_src_name block is documented below.
    internetServiceSrcNegate String
    When enabled internet-service-src specifies what the service must NOT be.
    ippool String
    Enable to use IP Pools for source NAT.
    ipsSensor String
    Name of an existing IPS sensor.
    logtraffic String
    Enable or disable logging. Log all sessions or security profile sessions.
    logtrafficStart String
    Record logs when a session starts.
    name String
    Application group names.
    nat String
    Enable/disable source NAT.
    outbound String
    Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
    perIpShaper String
    Per-IP traffic shaper.
    policyid Integer
    Policy ID.
    poolname4s List<GetPolicyPoolname4>
    IPv4 pool names. The structure of poolname4 block is documented below.
    poolname6s List<GetPolicyPoolname6>
    IPv6 pool names. The structure of poolname6 block is documented below.
    profileGroup String
    Name of profile group.
    profileProtocolOptions String
    Name of an existing Protocol options profile.
    profileType String
    Determine whether the firewall policy allows security profile groups or single profiles only.
    schedule String
    Schedule name.
    serviceNegate String
    When enabled service specifies what the service must NOT be.
    services List<GetPolicyService>
    Service and service group names. The structure of service block is documented below.
    sessionTtl Integer
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilterProfile String
    Name of an existing Spam filter profile.
    srcaddr4s List<GetPolicySrcaddr4>
    Source IPv4 address name and address group names. The structure of srcaddr4 block is documented below.
    srcaddr6s List<GetPolicySrcaddr6>
    Source IPv6 address name and address group names. The structure of srcaddr6 block is documented below.
    srcaddrNegate String
    When enabled srcaddr specifies what the source address must NOT be.
    srcintfs List<GetPolicySrcintf>
    Incoming (ingress) interface. The structure of srcintf block is documented below.
    sshFilterProfile String
    Name of an existing SSH filter profile.
    sshPolicyRedirect String
    Redirect SSH traffic to matching transparent proxy policy.
    sslSshProfile String
    Name of an existing SSL SSH profile.
    status String
    Enable or disable this policy.
    tcpMssReceiver Integer
    Receiver TCP maximum segment size (MSS).
    tcpMssSender Integer
    Sender TCP maximum segment size (MSS).
    trafficShaper String
    Traffic shaper.
    trafficShaperReverse String
    Reverse traffic shaper.
    urlCategories List<GetPolicyUrlCategory>
    URL category ID list. The structure of url_category block is documented below.
    users List<GetPolicyUser>
    Names of individual users that can authenticate with this policy. The structure of users block is documented below.
    utmStatus String
    Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    voipProfile String
    Name of an existing VoIP profile.
    vpntunnel String
    Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
    wafProfile String
    Name of an existing Web application firewall profile.
    wanopt String
    Enable/disable WAN optimization.
    wanoptDetection String
    WAN optimization auto-detection mode.
    wanoptPassiveOpt String
    WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
    wanoptPeer String
    WAN optimization peer.
    wanoptProfile String
    WAN optimization profile.
    webcache String
    Enable/disable web cache.
    webcacheHttps String
    Enable/disable web cache for HTTPS.
    webfilterProfile String
    Name of an existing Web filter profile.
    webproxyForwardServer String
    Webproxy forward server name.
    webproxyProfile String
    Webproxy profile name.
    vdomparam String
    action string
    Policy action (allow/deny/ipsec).
    appCategories GetPolicyAppCategory[]
    Application category ID list. The structure of app_category block is documented below.
    appGroups GetPolicyAppGroup[]
    Application group names. The structure of app_group block is documented below.
    applicationList string
    Name of an existing Application list.
    applications GetPolicyApplication[]
    Application ID list. The structure of application block is documented below.
    autoAsicOffload string
    Enable/disable policy traffic ASIC offloading.
    avProfile string
    Name of an existing Antivirus profile.
    captivePortalExempt string
    Enable exemption of some users from the captive portal.
    cifsProfile string
    Name of an existing CIFS profile.
    comments string
    Comment.
    diffservForward string
    Enable to change packet's DiffServ values to the specified diffservcode-forward value.
    diffservReverse string
    Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
    diffservcodeForward string
    Change packet's DiffServ to this value.
    diffservcodeRev string
    Change packet's reverse (reply) DiffServ to this value.
    dlpSensor string
    Name of an existing DLP sensor.
    dnsfilterProfile string
    Name of an existing DNS filter profile.
    dstaddr4s GetPolicyDstaddr4[]
    Destination IPv4 address name and address group names. The structure of dstaddr4 block is documented below.
    dstaddr6s GetPolicyDstaddr6[]
    Destination IPv6 address name and address group names. The structure of dstaddr6 block is documented below.
    dstaddrNegate string
    When enabled dstaddr specifies what the destination address must NOT be.
    dstintfs GetPolicyDstintf[]
    Outgoing (egress) interface. The structure of dstintf block is documented below.
    emailfilterProfile string
    Name of an existing email filter profile.
    fixedport string
    Enable to prevent source NAT from changing a session's source port.
    fssoGroups GetPolicyFssoGroup[]
    Names of FSSO groups. The structure of fsso_groups block is documented below.
    groups GetPolicyGroup[]
    Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
    httpPolicyRedirect string
    Redirect HTTP(S) traffic to matching transparent web proxy policy.
    icapProfile string
    Name of an existing ICAP profile.
    id string
    The provider-assigned unique ID for this managed resource.
    inbound string
    Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
    inspectionMode string
    Policy inspection mode (Flow/proxy). Default is Flow mode.
    internetService string
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
    internetServiceCustomGroups GetPolicyInternetServiceCustomGroup[]
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internetServiceCustoms GetPolicyInternetServiceCustom[]
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internetServiceGroups GetPolicyInternetServiceGroup[]
    Internet Service group name. The structure of internet_service_group block is documented below.
    internetServiceIds GetPolicyInternetServiceId[]
    Internet Service ID. The structure of internet_service_id block is documented below.
    internetServiceNames GetPolicyInternetServiceName[]
    Internet Service name. The structure of internet_service_name block is documented below.
    internetServiceNegate string
    When enabled internet-service specifies what the service must NOT be.
    internetServiceSrc string
    Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
    internetServiceSrcCustomGroups GetPolicyInternetServiceSrcCustomGroup[]
    Custom Internet Service source group name. The structure of internet_service_src_custom_group block is documented below.
    internetServiceSrcCustoms GetPolicyInternetServiceSrcCustom[]
    Custom Internet Service source name. The structure of internet_service_src_custom block is documented below.
    internetServiceSrcGroups GetPolicyInternetServiceSrcGroup[]
    Internet Service source group name. The structure of internet_service_src_group block is documented below.
    internetServiceSrcIds GetPolicyInternetServiceSrcId[]
    Internet Service source ID. The structure of internet_service_src_id block is documented below.
    internetServiceSrcNames GetPolicyInternetServiceSrcName[]
    Internet Service source name. The structure of internet_service_src_name block is documented below.
    internetServiceSrcNegate string
    When enabled internet-service-src specifies what the service must NOT be.
    ippool string
    Enable to use IP Pools for source NAT.
    ipsSensor string
    Name of an existing IPS sensor.
    logtraffic string
    Enable or disable logging. Log all sessions or security profile sessions.
    logtrafficStart string
    Record logs when a session starts.
    name string
    Application group names.
    nat string
    Enable/disable source NAT.
    outbound string
    Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
    perIpShaper string
    Per-IP traffic shaper.
    policyid number
    Policy ID.
    poolname4s GetPolicyPoolname4[]
    IPv4 pool names. The structure of poolname4 block is documented below.
    poolname6s GetPolicyPoolname6[]
    IPv6 pool names. The structure of poolname6 block is documented below.
    profileGroup string
    Name of profile group.
    profileProtocolOptions string
    Name of an existing Protocol options profile.
    profileType string
    Determine whether the firewall policy allows security profile groups or single profiles only.
    schedule string
    Schedule name.
    serviceNegate string
    When enabled service specifies what the service must NOT be.
    services GetPolicyService[]
    Service and service group names. The structure of service block is documented below.
    sessionTtl number
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilterProfile string
    Name of an existing Spam filter profile.
    srcaddr4s GetPolicySrcaddr4[]
    Source IPv4 address name and address group names. The structure of srcaddr4 block is documented below.
    srcaddr6s GetPolicySrcaddr6[]
    Source IPv6 address name and address group names. The structure of srcaddr6 block is documented below.
    srcaddrNegate string
    When enabled srcaddr specifies what the source address must NOT be.
    srcintfs GetPolicySrcintf[]
    Incoming (ingress) interface. The structure of srcintf block is documented below.
    sshFilterProfile string
    Name of an existing SSH filter profile.
    sshPolicyRedirect string
    Redirect SSH traffic to matching transparent proxy policy.
    sslSshProfile string
    Name of an existing SSL SSH profile.
    status string
    Enable or disable this policy.
    tcpMssReceiver number
    Receiver TCP maximum segment size (MSS).
    tcpMssSender number
    Sender TCP maximum segment size (MSS).
    trafficShaper string
    Traffic shaper.
    trafficShaperReverse string
    Reverse traffic shaper.
    urlCategories GetPolicyUrlCategory[]
    URL category ID list. The structure of url_category block is documented below.
    users GetPolicyUser[]
    Names of individual users that can authenticate with this policy. The structure of users block is documented below.
    utmStatus string
    Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
    uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    voipProfile string
    Name of an existing VoIP profile.
    vpntunnel string
    Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
    wafProfile string
    Name of an existing Web application firewall profile.
    wanopt string
    Enable/disable WAN optimization.
    wanoptDetection string
    WAN optimization auto-detection mode.
    wanoptPassiveOpt string
    WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
    wanoptPeer string
    WAN optimization peer.
    wanoptProfile string
    WAN optimization profile.
    webcache string
    Enable/disable web cache.
    webcacheHttps string
    Enable/disable web cache for HTTPS.
    webfilterProfile string
    Name of an existing Web filter profile.
    webproxyForwardServer string
    Webproxy forward server name.
    webproxyProfile string
    Webproxy profile name.
    vdomparam string
    action str
    Policy action (allow/deny/ipsec).
    app_categories Sequence[GetPolicyAppCategory]
    Application category ID list. The structure of app_category block is documented below.
    app_groups Sequence[GetPolicyAppGroup]
    Application group names. The structure of app_group block is documented below.
    application_list str
    Name of an existing Application list.
    applications Sequence[GetPolicyApplication]
    Application ID list. The structure of application block is documented below.
    auto_asic_offload str
    Enable/disable policy traffic ASIC offloading.
    av_profile str
    Name of an existing Antivirus profile.
    captive_portal_exempt str
    Enable exemption of some users from the captive portal.
    cifs_profile str
    Name of an existing CIFS profile.
    comments str
    Comment.
    diffserv_forward str
    Enable to change packet's DiffServ values to the specified diffservcode-forward value.
    diffserv_reverse str
    Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
    diffservcode_forward str
    Change packet's DiffServ to this value.
    diffservcode_rev str
    Change packet's reverse (reply) DiffServ to this value.
    dlp_sensor str
    Name of an existing DLP sensor.
    dnsfilter_profile str
    Name of an existing DNS filter profile.
    dstaddr4s Sequence[GetPolicyDstaddr4]
    Destination IPv4 address name and address group names. The structure of dstaddr4 block is documented below.
    dstaddr6s Sequence[GetPolicyDstaddr6]
    Destination IPv6 address name and address group names. The structure of dstaddr6 block is documented below.
    dstaddr_negate str
    When enabled dstaddr specifies what the destination address must NOT be.
    dstintfs Sequence[GetPolicyDstintf]
    Outgoing (egress) interface. The structure of dstintf block is documented below.
    emailfilter_profile str
    Name of an existing email filter profile.
    fixedport str
    Enable to prevent source NAT from changing a session's source port.
    fsso_groups Sequence[GetPolicyFssoGroup]
    Names of FSSO groups. The structure of fsso_groups block is documented below.
    groups Sequence[GetPolicyGroup]
    Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
    http_policy_redirect str
    Redirect HTTP(S) traffic to matching transparent web proxy policy.
    icap_profile str
    Name of an existing ICAP profile.
    id str
    The provider-assigned unique ID for this managed resource.
    inbound str
    Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
    inspection_mode str
    Policy inspection mode (Flow/proxy). Default is Flow mode.
    internet_service str
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
    internet_service_custom_groups Sequence[GetPolicyInternetServiceCustomGroup]
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internet_service_customs Sequence[GetPolicyInternetServiceCustom]
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internet_service_groups Sequence[GetPolicyInternetServiceGroup]
    Internet Service group name. The structure of internet_service_group block is documented below.
    internet_service_ids Sequence[GetPolicyInternetServiceId]
    Internet Service ID. The structure of internet_service_id block is documented below.
    internet_service_names Sequence[GetPolicyInternetServiceName]
    Internet Service name. The structure of internet_service_name block is documented below.
    internet_service_negate str
    When enabled internet-service specifies what the service must NOT be.
    internet_service_src str
    Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
    internet_service_src_custom_groups Sequence[GetPolicyInternetServiceSrcCustomGroup]
    Custom Internet Service source group name. The structure of internet_service_src_custom_group block is documented below.
    internet_service_src_customs Sequence[GetPolicyInternetServiceSrcCustom]
    Custom Internet Service source name. The structure of internet_service_src_custom block is documented below.
    internet_service_src_groups Sequence[GetPolicyInternetServiceSrcGroup]
    Internet Service source group name. The structure of internet_service_src_group block is documented below.
    internet_service_src_ids Sequence[GetPolicyInternetServiceSrcId]
    Internet Service source ID. The structure of internet_service_src_id block is documented below.
    internet_service_src_names Sequence[GetPolicyInternetServiceSrcName]
    Internet Service source name. The structure of internet_service_src_name block is documented below.
    internet_service_src_negate str
    When enabled internet-service-src specifies what the service must NOT be.
    ippool str
    Enable to use IP Pools for source NAT.
    ips_sensor str
    Name of an existing IPS sensor.
    logtraffic str
    Enable or disable logging. Log all sessions or security profile sessions.
    logtraffic_start str
    Record logs when a session starts.
    name str
    Application group names.
    nat str
    Enable/disable source NAT.
    outbound str
    Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
    per_ip_shaper str
    Per-IP traffic shaper.
    policyid int
    Policy ID.
    poolname4s Sequence[GetPolicyPoolname4]
    IPv4 pool names. The structure of poolname4 block is documented below.
    poolname6s Sequence[GetPolicyPoolname6]
    IPv6 pool names. The structure of poolname6 block is documented below.
    profile_group str
    Name of profile group.
    profile_protocol_options str
    Name of an existing Protocol options profile.
    profile_type str
    Determine whether the firewall policy allows security profile groups or single profiles only.
    schedule str
    Schedule name.
    service_negate str
    When enabled service specifies what the service must NOT be.
    services Sequence[GetPolicyService]
    Service and service group names. The structure of service block is documented below.
    session_ttl int
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilter_profile str
    Name of an existing Spam filter profile.
    srcaddr4s Sequence[GetPolicySrcaddr4]
    Source IPv4 address name and address group names. The structure of srcaddr4 block is documented below.
    srcaddr6s Sequence[GetPolicySrcaddr6]
    Source IPv6 address name and address group names. The structure of srcaddr6 block is documented below.
    srcaddr_negate str
    When enabled srcaddr specifies what the source address must NOT be.
    srcintfs Sequence[GetPolicySrcintf]
    Incoming (ingress) interface. The structure of srcintf block is documented below.
    ssh_filter_profile str
    Name of an existing SSH filter profile.
    ssh_policy_redirect str
    Redirect SSH traffic to matching transparent proxy policy.
    ssl_ssh_profile str
    Name of an existing SSL SSH profile.
    status str
    Enable or disable this policy.
    tcp_mss_receiver int
    Receiver TCP maximum segment size (MSS).
    tcp_mss_sender int
    Sender TCP maximum segment size (MSS).
    traffic_shaper str
    Traffic shaper.
    traffic_shaper_reverse str
    Reverse traffic shaper.
    url_categories Sequence[GetPolicyUrlCategory]
    URL category ID list. The structure of url_category block is documented below.
    users Sequence[GetPolicyUser]
    Names of individual users that can authenticate with this policy. The structure of users block is documented below.
    utm_status str
    Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
    uuid str
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    voip_profile str
    Name of an existing VoIP profile.
    vpntunnel str
    Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
    waf_profile str
    Name of an existing Web application firewall profile.
    wanopt str
    Enable/disable WAN optimization.
    wanopt_detection str
    WAN optimization auto-detection mode.
    wanopt_passive_opt str
    WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
    wanopt_peer str
    WAN optimization peer.
    wanopt_profile str
    WAN optimization profile.
    webcache str
    Enable/disable web cache.
    webcache_https str
    Enable/disable web cache for HTTPS.
    webfilter_profile str
    Name of an existing Web filter profile.
    webproxy_forward_server str
    Webproxy forward server name.
    webproxy_profile str
    Webproxy profile name.
    vdomparam str
    action String
    Policy action (allow/deny/ipsec).
    appCategories List<Property Map>
    Application category ID list. The structure of app_category block is documented below.
    appGroups List<Property Map>
    Application group names. The structure of app_group block is documented below.
    applicationList String
    Name of an existing Application list.
    applications List<Property Map>
    Application ID list. The structure of application block is documented below.
    autoAsicOffload String
    Enable/disable policy traffic ASIC offloading.
    avProfile String
    Name of an existing Antivirus profile.
    captivePortalExempt String
    Enable exemption of some users from the captive portal.
    cifsProfile String
    Name of an existing CIFS profile.
    comments String
    Comment.
    diffservForward String
    Enable to change packet's DiffServ values to the specified diffservcode-forward value.
    diffservReverse String
    Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
    diffservcodeForward String
    Change packet's DiffServ to this value.
    diffservcodeRev String
    Change packet's reverse (reply) DiffServ to this value.
    dlpSensor String
    Name of an existing DLP sensor.
    dnsfilterProfile String
    Name of an existing DNS filter profile.
    dstaddr4s List<Property Map>
    Destination IPv4 address name and address group names. The structure of dstaddr4 block is documented below.
    dstaddr6s List<Property Map>
    Destination IPv6 address name and address group names. The structure of dstaddr6 block is documented below.
    dstaddrNegate String
    When enabled dstaddr specifies what the destination address must NOT be.
    dstintfs List<Property Map>
    Outgoing (egress) interface. The structure of dstintf block is documented below.
    emailfilterProfile String
    Name of an existing email filter profile.
    fixedport String
    Enable to prevent source NAT from changing a session's source port.
    fssoGroups List<Property Map>
    Names of FSSO groups. The structure of fsso_groups block is documented below.
    groups List<Property Map>
    Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
    httpPolicyRedirect String
    Redirect HTTP(S) traffic to matching transparent web proxy policy.
    icapProfile String
    Name of an existing ICAP profile.
    id String
    The provider-assigned unique ID for this managed resource.
    inbound String
    Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
    inspectionMode String
    Policy inspection mode (Flow/proxy). Default is Flow mode.
    internetService String
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used.
    internetServiceCustomGroups List<Property Map>
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internetServiceCustoms List<Property Map>
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internetServiceGroups List<Property Map>
    Internet Service group name. The structure of internet_service_group block is documented below.
    internetServiceIds List<Property Map>
    Internet Service ID. The structure of internet_service_id block is documented below.
    internetServiceNames List<Property Map>
    Internet Service name. The structure of internet_service_name block is documented below.
    internetServiceNegate String
    When enabled internet-service specifies what the service must NOT be.
    internetServiceSrc String
    Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used.
    internetServiceSrcCustomGroups List<Property Map>
    Custom Internet Service source group name. The structure of internet_service_src_custom_group block is documented below.
    internetServiceSrcCustoms List<Property Map>
    Custom Internet Service source name. The structure of internet_service_src_custom block is documented below.
    internetServiceSrcGroups List<Property Map>
    Internet Service source group name. The structure of internet_service_src_group block is documented below.
    internetServiceSrcIds List<Property Map>
    Internet Service source ID. The structure of internet_service_src_id block is documented below.
    internetServiceSrcNames List<Property Map>
    Internet Service source name. The structure of internet_service_src_name block is documented below.
    internetServiceSrcNegate String
    When enabled internet-service-src specifies what the service must NOT be.
    ippool String
    Enable to use IP Pools for source NAT.
    ipsSensor String
    Name of an existing IPS sensor.
    logtraffic String
    Enable or disable logging. Log all sessions or security profile sessions.
    logtrafficStart String
    Record logs when a session starts.
    name String
    Application group names.
    nat String
    Enable/disable source NAT.
    outbound String
    Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
    perIpShaper String
    Per-IP traffic shaper.
    policyid Number
    Policy ID.
    poolname4s List<Property Map>
    IPv4 pool names. The structure of poolname4 block is documented below.
    poolname6s List<Property Map>
    IPv6 pool names. The structure of poolname6 block is documented below.
    profileGroup String
    Name of profile group.
    profileProtocolOptions String
    Name of an existing Protocol options profile.
    profileType String
    Determine whether the firewall policy allows security profile groups or single profiles only.
    schedule String
    Schedule name.
    serviceNegate String
    When enabled service specifies what the service must NOT be.
    services List<Property Map>
    Service and service group names. The structure of service block is documented below.
    sessionTtl Number
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilterProfile String
    Name of an existing Spam filter profile.
    srcaddr4s List<Property Map>
    Source IPv4 address name and address group names. The structure of srcaddr4 block is documented below.
    srcaddr6s List<Property Map>
    Source IPv6 address name and address group names. The structure of srcaddr6 block is documented below.
    srcaddrNegate String
    When enabled srcaddr specifies what the source address must NOT be.
    srcintfs List<Property Map>
    Incoming (ingress) interface. The structure of srcintf block is documented below.
    sshFilterProfile String
    Name of an existing SSH filter profile.
    sshPolicyRedirect String
    Redirect SSH traffic to matching transparent proxy policy.
    sslSshProfile String
    Name of an existing SSL SSH profile.
    status String
    Enable or disable this policy.
    tcpMssReceiver Number
    Receiver TCP maximum segment size (MSS).
    tcpMssSender Number
    Sender TCP maximum segment size (MSS).
    trafficShaper String
    Traffic shaper.
    trafficShaperReverse String
    Reverse traffic shaper.
    urlCategories List<Property Map>
    URL category ID list. The structure of url_category block is documented below.
    users List<Property Map>
    Names of individual users that can authenticate with this policy. The structure of users block is documented below.
    utmStatus String
    Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy.
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    voipProfile String
    Name of an existing VoIP profile.
    vpntunnel String
    Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
    wafProfile String
    Name of an existing Web application firewall profile.
    wanopt String
    Enable/disable WAN optimization.
    wanoptDetection String
    WAN optimization auto-detection mode.
    wanoptPassiveOpt String
    WAN optimization passive mode options. This option decides what IP address will be used to connect to server.
    wanoptPeer String
    WAN optimization peer.
    wanoptProfile String
    WAN optimization profile.
    webcache String
    Enable/disable web cache.
    webcacheHttps String
    Enable/disable web cache for HTTPS.
    webfilterProfile String
    Name of an existing Web filter profile.
    webproxyForwardServer String
    Webproxy forward server name.
    webproxyProfile String
    Webproxy profile name.
    vdomparam String

    Supporting Types

    GetPolicyAppCategory

    Id int
    URL category ID.
    Id int
    URL category ID.
    id Integer
    URL category ID.
    id number
    URL category ID.
    id int
    URL category ID.
    id Number
    URL category ID.

    GetPolicyAppGroup

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyApplication

    Id int
    URL category ID.
    Id int
    URL category ID.
    id Integer
    URL category ID.
    id number
    URL category ID.
    id int
    URL category ID.
    id Number
    URL category ID.

    GetPolicyDstaddr4

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyDstaddr6

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyDstintf

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyFssoGroup

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyGroup

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyInternetServiceCustom

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyInternetServiceCustomGroup

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyInternetServiceGroup

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyInternetServiceId

    Id int
    URL category ID.
    Id int
    URL category ID.
    id Integer
    URL category ID.
    id number
    URL category ID.
    id int
    URL category ID.
    id Number
    URL category ID.

    GetPolicyInternetServiceName

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyInternetServiceSrcCustom

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyInternetServiceSrcCustomGroup

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyInternetServiceSrcGroup

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyInternetServiceSrcId

    Id int
    URL category ID.
    Id int
    URL category ID.
    id Integer
    URL category ID.
    id number
    URL category ID.
    id int
    URL category ID.
    id Number
    URL category ID.

    GetPolicyInternetServiceSrcName

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyPoolname4

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyPoolname6

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyService

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicySrcaddr4

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicySrcaddr6

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicySrcintf

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    GetPolicyUrlCategory

    Id int
    URL category ID.
    Id int
    URL category ID.
    id Integer
    URL category ID.
    id number
    URL category ID.
    id int
    URL category ID.
    id Number
    URL category ID.

    GetPolicyUser

    Name string
    Application group names.
    Name string
    Application group names.
    name String
    Application group names.
    name string
    Application group names.
    name str
    Application group names.
    name String
    Application group names.

    Package Details

    Repository
    fortios pulumiverse/pulumi-fortios
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the fortios Terraform Provider.
    fortios logo
    Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse