Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortios
  3. API Docs
  4. vpn
  5. vpn/ssl
  6. vpn/ssl/web
  7. Portal
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

fortios.vpn/ssl/web.Portal

Explore with Pulumi AI

fortios logo
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

    Portal.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as fortios from "@pulumiverse/fortios";

const trname = new fortios.vpn.ssl.web.Portal("trname", {
    allowUserAccess: "web ftp smb sftp telnet ssh vnc rdp ping citrix portforward",
    autoConnect: "disable",
    customizeForticlientDownloadUrl: "disable",
    displayBookmark: "enable",
    displayConnectionTools: "enable",
    displayHistory: "enable",
    displayStatus: "enable",
    dnsServer1: "0.0.0.0",
    dnsServer2: "0.0.0.0",
    exclusiveRouting: "disable",
    forticlientDownload: "enable",
    forticlientDownloadMethod: "direct",
    heading: "SSL-VPN Portal",
    hideSsoCredential: "enable",
    hostCheck: "none",
    ipMode: "range",
    ipPools: [{
        name: "SSLVPN_TUNNEL_ADDR1",
    }],
    ipv6DnsServer1: "::",
    ipv6DnsServer2: "::",
    ipv6ExclusiveRouting: "disable",
    ipv6Pools: [{
        name: "SSLVPN_TUNNEL_IPv6_ADDR1",
    }],
    ipv6ServiceRestriction: "disable",
    ipv6SplitTunneling: "enable",
    ipv6TunnelMode: "enable",
    ipv6WinsServer1: "::",
    ipv6WinsServer2: "::",
    keepAlive: "disable",
    limitUserLogins: "disable",
    macAddrAction: "allow",
    macAddrCheck: "disable",
    osCheck: "disable",
    savePassword: "disable",
    serviceRestriction: "disable",
    skipCheckForBrowser: "enable",
    skipCheckForUnsupportedOs: "enable",
    smbNtlmv1Auth: "disable",
    smbv1: "disable",
    splitTunneling: "enable",
    theme: "blue",
    tunnelMode: "enable",
    userBookmark: "enable",
    userGroupBookmark: "enable",
    webMode: "disable",
    winsServer1: "0.0.0.0",
    winsServer2: "0.0.0.0",
});

    import pulumi
import pulumiverse_fortios as fortios

trname = fortios.vpn.ssl.web.Portal("trname",
    allow_user_access="web ftp smb sftp telnet ssh vnc rdp ping citrix portforward",
    auto_connect="disable",
    customize_forticlient_download_url="disable",
    display_bookmark="enable",
    display_connection_tools="enable",
    display_history="enable",
    display_status="enable",
    dns_server1="0.0.0.0",
    dns_server2="0.0.0.0",
    exclusive_routing="disable",
    forticlient_download="enable",
    forticlient_download_method="direct",
    heading="SSL-VPN Portal",
    hide_sso_credential="enable",
    host_check="none",
    ip_mode="range",
    ip_pools=[fortios.vpn.ssl.web.PortalIpPoolArgs(
        name="SSLVPN_TUNNEL_ADDR1",
    )],
    ipv6_dns_server1="::",
    ipv6_dns_server2="::",
    ipv6_exclusive_routing="disable",
    ipv6_pools=[fortios.vpn.ssl.web.PortalIpv6PoolArgs(
        name="SSLVPN_TUNNEL_IPv6_ADDR1",
    )],
    ipv6_service_restriction="disable",
    ipv6_split_tunneling="enable",
    ipv6_tunnel_mode="enable",
    ipv6_wins_server1="::",
    ipv6_wins_server2="::",
    keep_alive="disable",
    limit_user_logins="disable",
    mac_addr_action="allow",
    mac_addr_check="disable",
    os_check="disable",
    save_password="disable",
    service_restriction="disable",
    skip_check_for_browser="enable",
    skip_check_for_unsupported_os="enable",
    smb_ntlmv1_auth="disable",
    smbv1="disable",
    split_tunneling="enable",
    theme="blue",
    tunnel_mode="enable",
    user_bookmark="enable",
    user_group_bookmark="enable",
    web_mode="disable",
    wins_server1="0.0.0.0",
    wins_server2="0.0.0.0")

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-fortios/sdk/go/fortios/vpn"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := vpn.NewPortal(ctx, "trname", &vpn.PortalArgs{
			AllowUserAccess:                 pulumi.String("web ftp smb sftp telnet ssh vnc rdp ping citrix portforward"),
			AutoConnect:                     pulumi.String("disable"),
			CustomizeForticlientDownloadUrl: pulumi.String("disable"),
			DisplayBookmark:                 pulumi.String("enable"),
			DisplayConnectionTools:          pulumi.String("enable"),
			DisplayHistory:                  pulumi.String("enable"),
			DisplayStatus:                   pulumi.String("enable"),
			DnsServer1:                      pulumi.String("0.0.0.0"),
			DnsServer2:                      pulumi.String("0.0.0.0"),
			ExclusiveRouting:                pulumi.String("disable"),
			ForticlientDownload:             pulumi.String("enable"),
			ForticlientDownloadMethod:       pulumi.String("direct"),
			Heading:                         pulumi.String("SSL-VPN Portal"),
			HideSsoCredential:               pulumi.String("enable"),
			HostCheck:                       pulumi.String("none"),
			IpMode:                          pulumi.String("range"),
			IpPools: ssl / web.PortalIpPoolArray{
				&ssl / web.PortalIpPoolArgs{
					Name: pulumi.String("SSLVPN_TUNNEL_ADDR1"),
				},
			},
			Ipv6DnsServer1:       pulumi.String("::"),
			Ipv6DnsServer2:       pulumi.String("::"),
			Ipv6ExclusiveRouting: pulumi.String("disable"),
			Ipv6Pools: ssl / web.PortalIpv6PoolArray{
				&ssl / web.PortalIpv6PoolArgs{
					Name: pulumi.String("SSLVPN_TUNNEL_IPv6_ADDR1"),
				},
			},
			Ipv6ServiceRestriction:    pulumi.String("disable"),
			Ipv6SplitTunneling:        pulumi.String("enable"),
			Ipv6TunnelMode:            pulumi.String("enable"),
			Ipv6WinsServer1:           pulumi.String("::"),
			Ipv6WinsServer2:           pulumi.String("::"),
			KeepAlive:                 pulumi.String("disable"),
			LimitUserLogins:           pulumi.String("disable"),
			MacAddrAction:             pulumi.String("allow"),
			MacAddrCheck:              pulumi.String("disable"),
			OsCheck:                   pulumi.String("disable"),
			SavePassword:              pulumi.String("disable"),
			ServiceRestriction:        pulumi.String("disable"),
			SkipCheckForBrowser:       pulumi.String("enable"),
			SkipCheckForUnsupportedOs: pulumi.String("enable"),
			SmbNtlmv1Auth:             pulumi.String("disable"),
			Smbv1:                     pulumi.String("disable"),
			SplitTunneling:            pulumi.String("enable"),
			Theme:                     pulumi.String("blue"),
			TunnelMode:                pulumi.String("enable"),
			UserBookmark:              pulumi.String("enable"),
			UserGroupBookmark:         pulumi.String("enable"),
			WebMode:                   pulumi.String("disable"),
			WinsServer1:               pulumi.String("0.0.0.0"),
			WinsServer2:               pulumi.String("0.0.0.0"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortios = Pulumiverse.Fortios;

return await Deployment.RunAsync(() => 
{
    var trname = new Fortios.Vpn.Ssl.Web.Portal("trname", new()
    {
        AllowUserAccess = "web ftp smb sftp telnet ssh vnc rdp ping citrix portforward",
        AutoConnect = "disable",
        CustomizeForticlientDownloadUrl = "disable",
        DisplayBookmark = "enable",
        DisplayConnectionTools = "enable",
        DisplayHistory = "enable",
        DisplayStatus = "enable",
        DnsServer1 = "0.0.0.0",
        DnsServer2 = "0.0.0.0",
        ExclusiveRouting = "disable",
        ForticlientDownload = "enable",
        ForticlientDownloadMethod = "direct",
        Heading = "SSL-VPN Portal",
        HideSsoCredential = "enable",
        HostCheck = "none",
        IpMode = "range",
        IpPools = new[]
        {
            new Fortios.Vpn.Ssl.Web.Inputs.PortalIpPoolArgs
            {
                Name = "SSLVPN_TUNNEL_ADDR1",
            },
        },
        Ipv6DnsServer1 = "::",
        Ipv6DnsServer2 = "::",
        Ipv6ExclusiveRouting = "disable",
        Ipv6Pools = new[]
        {
            new Fortios.Vpn.Ssl.Web.Inputs.PortalIpv6PoolArgs
            {
                Name = "SSLVPN_TUNNEL_IPv6_ADDR1",
            },
        },
        Ipv6ServiceRestriction = "disable",
        Ipv6SplitTunneling = "enable",
        Ipv6TunnelMode = "enable",
        Ipv6WinsServer1 = "::",
        Ipv6WinsServer2 = "::",
        KeepAlive = "disable",
        LimitUserLogins = "disable",
        MacAddrAction = "allow",
        MacAddrCheck = "disable",
        OsCheck = "disable",
        SavePassword = "disable",
        ServiceRestriction = "disable",
        SkipCheckForBrowser = "enable",
        SkipCheckForUnsupportedOs = "enable",
        SmbNtlmv1Auth = "disable",
        Smbv1 = "disable",
        SplitTunneling = "enable",
        Theme = "blue",
        TunnelMode = "enable",
        UserBookmark = "enable",
        UserGroupBookmark = "enable",
        WebMode = "disable",
        WinsServer1 = "0.0.0.0",
        WinsServer2 = "0.0.0.0",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortios.vpn.Portal;
import com.pulumi.fortios.vpn.PortalArgs;
import com.pulumi.fortios.vpn.inputs.PortalIpPoolArgs;
import com.pulumi.fortios.vpn.inputs.PortalIpv6PoolArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trname = new Portal("trname", PortalArgs.builder()
            .allowUserAccess("web ftp smb sftp telnet ssh vnc rdp ping citrix portforward")
            .autoConnect("disable")
            .customizeForticlientDownloadUrl("disable")
            .displayBookmark("enable")
            .displayConnectionTools("enable")
            .displayHistory("enable")
            .displayStatus("enable")
            .dnsServer1("0.0.0.0")
            .dnsServer2("0.0.0.0")
            .exclusiveRouting("disable")
            .forticlientDownload("enable")
            .forticlientDownloadMethod("direct")
            .heading("SSL-VPN Portal")
            .hideSsoCredential("enable")
            .hostCheck("none")
            .ipMode("range")
            .ipPools(PortalIpPoolArgs.builder()
                .name("SSLVPN_TUNNEL_ADDR1")
                .build())
            .ipv6DnsServer1("::")
            .ipv6DnsServer2("::")
            .ipv6ExclusiveRouting("disable")
            .ipv6Pools(PortalIpv6PoolArgs.builder()
                .name("SSLVPN_TUNNEL_IPv6_ADDR1")
                .build())
            .ipv6ServiceRestriction("disable")
            .ipv6SplitTunneling("enable")
            .ipv6TunnelMode("enable")
            .ipv6WinsServer1("::")
            .ipv6WinsServer2("::")
            .keepAlive("disable")
            .limitUserLogins("disable")
            .macAddrAction("allow")
            .macAddrCheck("disable")
            .osCheck("disable")
            .savePassword("disable")
            .serviceRestriction("disable")
            .skipCheckForBrowser("enable")
            .skipCheckForUnsupportedOs("enable")
            .smbNtlmv1Auth("disable")
            .smbv1("disable")
            .splitTunneling("enable")
            .theme("blue")
            .tunnelMode("enable")
            .userBookmark("enable")
            .userGroupBookmark("enable")
            .webMode("disable")
            .winsServer1("0.0.0.0")
            .winsServer2("0.0.0.0")
            .build());

    }
}

    resources:
  trname:
    type: fortios:vpn/ssl/web:Portal
    properties:
      allowUserAccess: web ftp smb sftp telnet ssh vnc rdp ping citrix portforward
      autoConnect: disable
      customizeForticlientDownloadUrl: disable
      displayBookmark: enable
      displayConnectionTools: enable
      displayHistory: enable
      displayStatus: enable
      dnsServer1: 0.0.0.0
      dnsServer2: 0.0.0.0
      exclusiveRouting: disable
      forticlientDownload: enable
      forticlientDownloadMethod: direct
      heading: SSL-VPN Portal
      hideSsoCredential: enable
      hostCheck: none
      ipMode: range
      ipPools:
        - name: SSLVPN_TUNNEL_ADDR1
      ipv6DnsServer1: '::'
      ipv6DnsServer2: '::'
      ipv6ExclusiveRouting: disable
      ipv6Pools:
        - name: SSLVPN_TUNNEL_IPv6_ADDR1
      ipv6ServiceRestriction: disable
      ipv6SplitTunneling: enable
      ipv6TunnelMode: enable
      ipv6WinsServer1: '::'
      ipv6WinsServer2: '::'
      keepAlive: disable
      limitUserLogins: disable
      macAddrAction: allow
      macAddrCheck: disable
      osCheck: disable
      savePassword: disable
      serviceRestriction: disable
      skipCheckForBrowser: enable
      skipCheckForUnsupportedOs: enable
      smbNtlmv1Auth: disable
      smbv1: disable
      splitTunneling: enable
      theme: blue
      tunnelMode: enable
      userBookmark: enable
      userGroupBookmark: enable
      webMode: disable
      winsServer1: 0.0.0.0
      winsServer2: 0.0.0.0

    Create Portal Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Portal(name: string, args?: PortalArgs, opts?: CustomResourceOptions);
    @overload
def Portal(resource_name: str,
           args: Optional[PortalArgs] = None,
           opts: Optional[ResourceOptions] = None)

@overload
def Portal(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           allow_user_access: Optional[str] = None,
           auto_connect: Optional[str] = None,
           bookmark_groups: Optional[Sequence[PortalBookmarkGroupArgs]] = None,
           client_src_range: Optional[str] = None,
           clipboard: Optional[str] = None,
           custom_lang: Optional[str] = None,
           customize_forticlient_download_url: Optional[str] = None,
           default_protocol: Optional[str] = None,
           default_window_height: Optional[int] = None,
           default_window_width: Optional[int] = None,
           dhcp6_ra_linkaddr: Optional[str] = None,
           dhcp_ip_overlap: Optional[str] = None,
           dhcp_ra_giaddr: Optional[str] = None,
           display_bookmark: Optional[str] = None,
           display_connection_tools: Optional[str] = None,
           display_history: Optional[str] = None,
           display_status: Optional[str] = None,
           dns_server1: Optional[str] = None,
           dns_server2: Optional[str] = None,
           dns_suffix: Optional[str] = None,
           dynamic_sort_subtable: Optional[str] = None,
           exclusive_routing: Optional[str] = None,
           focus_bookmark: Optional[str] = None,
           forticlient_download: Optional[str] = None,
           forticlient_download_method: Optional[str] = None,
           get_all_tables: Optional[str] = None,
           heading: Optional[str] = None,
           hide_sso_credential: Optional[str] = None,
           host_check: Optional[str] = None,
           host_check_interval: Optional[int] = None,
           host_check_policies: Optional[Sequence[PortalHostCheckPolicyArgs]] = None,
           ip_mode: Optional[str] = None,
           ip_pools: Optional[Sequence[PortalIpPoolArgs]] = None,
           ipv6_dns_server1: Optional[str] = None,
           ipv6_dns_server2: Optional[str] = None,
           ipv6_exclusive_routing: Optional[str] = None,
           ipv6_pools: Optional[Sequence[PortalIpv6PoolArgs]] = None,
           ipv6_service_restriction: Optional[str] = None,
           ipv6_split_tunneling: Optional[str] = None,
           ipv6_split_tunneling_routing_addresses: Optional[Sequence[PortalIpv6SplitTunnelingRoutingAddressArgs]] = None,
           ipv6_split_tunneling_routing_negate: Optional[str] = None,
           ipv6_tunnel_mode: Optional[str] = None,
           ipv6_wins_server1: Optional[str] = None,
           ipv6_wins_server2: Optional[str] = None,
           keep_alive: Optional[str] = None,
           landing_page: Optional[PortalLandingPageArgs] = None,
           landing_page_mode: Optional[str] = None,
           limit_user_logins: Optional[str] = None,
           mac_addr_action: Optional[str] = None,
           mac_addr_check: Optional[str] = None,
           mac_addr_check_rules: Optional[Sequence[PortalMacAddrCheckRuleArgs]] = None,
           macos_forticlient_download_url: Optional[str] = None,
           name: Optional[str] = None,
           os_check: Optional[str] = None,
           os_check_lists: Optional[Sequence[PortalOsCheckListArgs]] = None,
           prefer_ipv6_dns: Optional[str] = None,
           redir_url: Optional[str] = None,
           rewrite_ip_uri_ui: Optional[str] = None,
           save_password: Optional[str] = None,
           service_restriction: Optional[str] = None,
           skip_check_for_browser: Optional[str] = None,
           skip_check_for_unsupported_os: Optional[str] = None,
           smb_max_version: Optional[str] = None,
           smb_min_version: Optional[str] = None,
           smb_ntlmv1_auth: Optional[str] = None,
           smbv1: Optional[str] = None,
           split_dns: Optional[Sequence[PortalSplitDnArgs]] = None,
           split_tunneling: Optional[str] = None,
           split_tunneling_routing_addresses: Optional[Sequence[PortalSplitTunnelingRoutingAddressArgs]] = None,
           split_tunneling_routing_negate: Optional[str] = None,
           theme: Optional[str] = None,
           transform_backward_slashes: Optional[str] = None,
           tunnel_mode: Optional[str] = None,
           use_sdwan: Optional[str] = None,
           user_bookmark: Optional[str] = None,
           user_group_bookmark: Optional[str] = None,
           vdomparam: Optional[str] = None,
           web_mode: Optional[str] = None,
           windows_forticlient_download_url: Optional[str] = None,
           wins_server1: Optional[str] = None,
           wins_server2: Optional[str] = None)
    func NewPortal(ctx *Context, name string, args *PortalArgs, opts ...ResourceOption) (*Portal, error)
    public Portal(string name, PortalArgs? args = null, CustomResourceOptions? opts = null)
    public Portal(String name, PortalArgs args)
public Portal(String name, PortalArgs args, CustomResourceOptions options)

    type: fortios:vpn/ssl/web/portal:Portal
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args PortalArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PortalArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PortalArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PortalArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PortalArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Portal Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Portal resource accepts the following input properties:

    AllowUserAccess string
    Allow user access to SSL-VPN applications.
    AutoConnect string
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    BookmarkGroups List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalBookmarkGroup>
    Portal bookmark group. The structure of bookmark_group block is documented below.
    ClientSrcRange string
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    Clipboard string
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    CustomLang string
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    CustomizeForticlientDownloadUrl string
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    DefaultProtocol string
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    DefaultWindowHeight int
    Screen height (range from 0 - 65535, default = 768).
    DefaultWindowWidth int
    Screen width (range from 0 - 65535, default = 1024).
    Dhcp6RaLinkaddr string
    Relay agent IPv6 link address to use in DHCP6 requests.
    DhcpIpOverlap string
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    DhcpRaGiaddr string
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    DisplayBookmark string
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    DisplayConnectionTools string
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    DisplayHistory string
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    DisplayStatus string
    Enable to display the web portal status widget. Valid values: enable, disable.
    DnsServer1 string
    IPv4 DNS server 1.
    DnsServer2 string
    IPv4 DNS server 2.
    DnsSuffix string
    DNS suffix.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    ExclusiveRouting string
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    FocusBookmark string
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    ForticlientDownload string
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    ForticlientDownloadMethod string
    FortiClient download method. Valid values: direct, ssl-vpn.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    Heading string
    Web portal heading message.
    HideSsoCredential string
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    HostCheck string
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    HostCheckInterval int
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    HostCheckPolicies List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalHostCheckPolicy>
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    IpMode string
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    IpPools List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalIpPool>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    Ipv6DnsServer1 string
    IPv6 DNS server 1.
    Ipv6DnsServer2 string
    IPv6 DNS server 2.
    Ipv6ExclusiveRouting string
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    Ipv6Pools List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalIpv6Pool>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    Ipv6ServiceRestriction string
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    Ipv6SplitTunneling string
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    Ipv6SplitTunnelingRoutingAddresses List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalIpv6SplitTunnelingRoutingAddress>
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    Ipv6SplitTunnelingRoutingNegate string
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    Ipv6TunnelMode string
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    Ipv6WinsServer1 string
    IPv6 WINS server 1.
    Ipv6WinsServer2 string
    IPv6 WINS server 2.
    KeepAlive string
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    LandingPage Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalLandingPage
    Landing page options. The structure of landing_page block is documented below.
    LandingPageMode string
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    LimitUserLogins string
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    MacAddrAction string
    Client MAC address action. Valid values: allow, deny.
    MacAddrCheck string
    Enable/disable MAC address host checking. Valid values: enable, disable.
    MacAddrCheckRules List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalMacAddrCheckRule>
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    MacosForticlientDownloadUrl string
    Download URL for Mac FortiClient.
    Name string
    Portal name.
    OsCheck string
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    OsCheckLists List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalOsCheckList>
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    PreferIpv6Dns string
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    RedirUrl string
    Client login redirect URL.
    RewriteIpUriUi string
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    SavePassword string
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    ServiceRestriction string
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    SkipCheckForBrowser string
    Enable to skip host check for browser support. Valid values: enable, disable.
    SkipCheckForUnsupportedOs string
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    SmbMaxVersion string
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    SmbMinVersion string
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    SmbNtlmv1Auth string
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    Smbv1 string
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    SplitDns List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalSplitDn>
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    SplitTunneling string
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    SplitTunnelingRoutingAddresses List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalSplitTunnelingRoutingAddress>
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    SplitTunnelingRoutingNegate string
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    Theme string
    Web portal color scheme.
    TransformBackwardSlashes string
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    TunnelMode string
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    UseSdwan string
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    UserBookmark string
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    UserGroupBookmark string
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    WebMode string
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    WindowsForticlientDownloadUrl string
    Download URL for Windows FortiClient.
    WinsServer1 string
    IPv4 WINS server 1.
    WinsServer2 string
    IPv4 WINS server 1.
    AllowUserAccess string
    Allow user access to SSL-VPN applications.
    AutoConnect string
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    BookmarkGroups []PortalBookmarkGroupArgs
    Portal bookmark group. The structure of bookmark_group block is documented below.
    ClientSrcRange string
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    Clipboard string
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    CustomLang string
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    CustomizeForticlientDownloadUrl string
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    DefaultProtocol string
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    DefaultWindowHeight int
    Screen height (range from 0 - 65535, default = 768).
    DefaultWindowWidth int
    Screen width (range from 0 - 65535, default = 1024).
    Dhcp6RaLinkaddr string
    Relay agent IPv6 link address to use in DHCP6 requests.
    DhcpIpOverlap string
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    DhcpRaGiaddr string
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    DisplayBookmark string
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    DisplayConnectionTools string
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    DisplayHistory string
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    DisplayStatus string
    Enable to display the web portal status widget. Valid values: enable, disable.
    DnsServer1 string
    IPv4 DNS server 1.
    DnsServer2 string
    IPv4 DNS server 2.
    DnsSuffix string
    DNS suffix.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    ExclusiveRouting string
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    FocusBookmark string
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    ForticlientDownload string
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    ForticlientDownloadMethod string
    FortiClient download method. Valid values: direct, ssl-vpn.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    Heading string
    Web portal heading message.
    HideSsoCredential string
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    HostCheck string
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    HostCheckInterval int
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    HostCheckPolicies []PortalHostCheckPolicyArgs
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    IpMode string
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    IpPools []PortalIpPoolArgs
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    Ipv6DnsServer1 string
    IPv6 DNS server 1.
    Ipv6DnsServer2 string
    IPv6 DNS server 2.
    Ipv6ExclusiveRouting string
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    Ipv6Pools []PortalIpv6PoolArgs
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    Ipv6ServiceRestriction string
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    Ipv6SplitTunneling string
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    Ipv6SplitTunnelingRoutingAddresses []PortalIpv6SplitTunnelingRoutingAddressArgs
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    Ipv6SplitTunnelingRoutingNegate string
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    Ipv6TunnelMode string
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    Ipv6WinsServer1 string
    IPv6 WINS server 1.
    Ipv6WinsServer2 string
    IPv6 WINS server 2.
    KeepAlive string
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    LandingPage PortalLandingPageArgs
    Landing page options. The structure of landing_page block is documented below.
    LandingPageMode string
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    LimitUserLogins string
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    MacAddrAction string
    Client MAC address action. Valid values: allow, deny.
    MacAddrCheck string
    Enable/disable MAC address host checking. Valid values: enable, disable.
    MacAddrCheckRules []PortalMacAddrCheckRuleArgs
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    MacosForticlientDownloadUrl string
    Download URL for Mac FortiClient.
    Name string
    Portal name.
    OsCheck string
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    OsCheckLists []PortalOsCheckListArgs
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    PreferIpv6Dns string
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    RedirUrl string
    Client login redirect URL.
    RewriteIpUriUi string
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    SavePassword string
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    ServiceRestriction string
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    SkipCheckForBrowser string
    Enable to skip host check for browser support. Valid values: enable, disable.
    SkipCheckForUnsupportedOs string
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    SmbMaxVersion string
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    SmbMinVersion string
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    SmbNtlmv1Auth string
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    Smbv1 string
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    SplitDns []PortalSplitDnArgs
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    SplitTunneling string
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    SplitTunnelingRoutingAddresses []PortalSplitTunnelingRoutingAddressArgs
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    SplitTunnelingRoutingNegate string
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    Theme string
    Web portal color scheme.
    TransformBackwardSlashes string
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    TunnelMode string
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    UseSdwan string
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    UserBookmark string
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    UserGroupBookmark string
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    WebMode string
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    WindowsForticlientDownloadUrl string
    Download URL for Windows FortiClient.
    WinsServer1 string
    IPv4 WINS server 1.
    WinsServer2 string
    IPv4 WINS server 1.
    allowUserAccess String
    Allow user access to SSL-VPN applications.
    autoConnect String
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    bookmarkGroups List<PortalBookmarkGroup>
    Portal bookmark group. The structure of bookmark_group block is documented below.
    clientSrcRange String
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    clipboard String
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    customLang String
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    customizeForticlientDownloadUrl String
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    defaultProtocol String
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    defaultWindowHeight Integer
    Screen height (range from 0 - 65535, default = 768).
    defaultWindowWidth Integer
    Screen width (range from 0 - 65535, default = 1024).
    dhcp6RaLinkaddr String
    Relay agent IPv6 link address to use in DHCP6 requests.
    dhcpIpOverlap String
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    dhcpRaGiaddr String
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    displayBookmark String
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    displayConnectionTools String
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    displayHistory String
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    displayStatus String
    Enable to display the web portal status widget. Valid values: enable, disable.
    dnsServer1 String
    IPv4 DNS server 1.
    dnsServer2 String
    IPv4 DNS server 2.
    dnsSuffix String
    DNS suffix.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    exclusiveRouting String
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    focusBookmark String
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    forticlientDownload String
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    forticlientDownloadMethod String
    FortiClient download method. Valid values: direct, ssl-vpn.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    heading String
    Web portal heading message.
    hideSsoCredential String
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    hostCheck String
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    hostCheckInterval Integer
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    hostCheckPolicies List<PortalHostCheckPolicy>
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    ipMode String
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    ipPools List<PortalIpPool>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    ipv6DnsServer1 String
    IPv6 DNS server 1.
    ipv6DnsServer2 String
    IPv6 DNS server 2.
    ipv6ExclusiveRouting String
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    ipv6Pools List<PortalIpv6Pool>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    ipv6ServiceRestriction String
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    ipv6SplitTunneling String
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    ipv6SplitTunnelingRoutingAddresses List<PortalIpv6SplitTunnelingRoutingAddress>
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    ipv6SplitTunnelingRoutingNegate String
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    ipv6TunnelMode String
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    ipv6WinsServer1 String
    IPv6 WINS server 1.
    ipv6WinsServer2 String
    IPv6 WINS server 2.
    keepAlive String
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    landingPage PortalLandingPage
    Landing page options. The structure of landing_page block is documented below.
    landingPageMode String
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    limitUserLogins String
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    macAddrAction String
    Client MAC address action. Valid values: allow, deny.
    macAddrCheck String
    Enable/disable MAC address host checking. Valid values: enable, disable.
    macAddrCheckRules List<PortalMacAddrCheckRule>
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    macosForticlientDownloadUrl String
    Download URL for Mac FortiClient.
    name String
    Portal name.
    osCheck String
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    osCheckLists List<PortalOsCheckList>
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    preferIpv6Dns String
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    redirUrl String
    Client login redirect URL.
    rewriteIpUriUi String
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    savePassword String
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    serviceRestriction String
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    skipCheckForBrowser String
    Enable to skip host check for browser support. Valid values: enable, disable.
    skipCheckForUnsupportedOs String
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    smbMaxVersion String
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbMinVersion String
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbNtlmv1Auth String
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    smbv1 String
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    splitDns List<PortalSplitDn>
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    splitTunneling String
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    splitTunnelingRoutingAddresses List<PortalSplitTunnelingRoutingAddress>
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    splitTunnelingRoutingNegate String
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    theme String
    Web portal color scheme.
    transformBackwardSlashes String
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    tunnelMode String
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    useSdwan String
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    userBookmark String
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    userGroupBookmark String
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    webMode String
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    windowsForticlientDownloadUrl String
    Download URL for Windows FortiClient.
    winsServer1 String
    IPv4 WINS server 1.
    winsServer2 String
    IPv4 WINS server 1.
    allowUserAccess string
    Allow user access to SSL-VPN applications.
    autoConnect string
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    bookmarkGroups PortalBookmarkGroup[]
    Portal bookmark group. The structure of bookmark_group block is documented below.
    clientSrcRange string
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    clipboard string
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    customLang string
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    customizeForticlientDownloadUrl string
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    defaultProtocol string
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    defaultWindowHeight number
    Screen height (range from 0 - 65535, default = 768).
    defaultWindowWidth number
    Screen width (range from 0 - 65535, default = 1024).
    dhcp6RaLinkaddr string
    Relay agent IPv6 link address to use in DHCP6 requests.
    dhcpIpOverlap string
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    dhcpRaGiaddr string
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    displayBookmark string
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    displayConnectionTools string
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    displayHistory string
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    displayStatus string
    Enable to display the web portal status widget. Valid values: enable, disable.
    dnsServer1 string
    IPv4 DNS server 1.
    dnsServer2 string
    IPv4 DNS server 2.
    dnsSuffix string
    DNS suffix.
    dynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    exclusiveRouting string
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    focusBookmark string
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    forticlientDownload string
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    forticlientDownloadMethod string
    FortiClient download method. Valid values: direct, ssl-vpn.
    getAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    heading string
    Web portal heading message.
    hideSsoCredential string
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    hostCheck string
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    hostCheckInterval number
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    hostCheckPolicies PortalHostCheckPolicy[]
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    ipMode string
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    ipPools PortalIpPool[]
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    ipv6DnsServer1 string
    IPv6 DNS server 1.
    ipv6DnsServer2 string
    IPv6 DNS server 2.
    ipv6ExclusiveRouting string
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    ipv6Pools PortalIpv6Pool[]
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    ipv6ServiceRestriction string
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    ipv6SplitTunneling string
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    ipv6SplitTunnelingRoutingAddresses PortalIpv6SplitTunnelingRoutingAddress[]
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    ipv6SplitTunnelingRoutingNegate string
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    ipv6TunnelMode string
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    ipv6WinsServer1 string
    IPv6 WINS server 1.
    ipv6WinsServer2 string
    IPv6 WINS server 2.
    keepAlive string
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    landingPage PortalLandingPage
    Landing page options. The structure of landing_page block is documented below.
    landingPageMode string
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    limitUserLogins string
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    macAddrAction string
    Client MAC address action. Valid values: allow, deny.
    macAddrCheck string
    Enable/disable MAC address host checking. Valid values: enable, disable.
    macAddrCheckRules PortalMacAddrCheckRule[]
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    macosForticlientDownloadUrl string
    Download URL for Mac FortiClient.
    name string
    Portal name.
    osCheck string
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    osCheckLists PortalOsCheckList[]
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    preferIpv6Dns string
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    redirUrl string
    Client login redirect URL.
    rewriteIpUriUi string
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    savePassword string
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    serviceRestriction string
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    skipCheckForBrowser string
    Enable to skip host check for browser support. Valid values: enable, disable.
    skipCheckForUnsupportedOs string
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    smbMaxVersion string
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbMinVersion string
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbNtlmv1Auth string
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    smbv1 string
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    splitDns PortalSplitDn[]
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    splitTunneling string
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    splitTunnelingRoutingAddresses PortalSplitTunnelingRoutingAddress[]
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    splitTunnelingRoutingNegate string
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    theme string
    Web portal color scheme.
    transformBackwardSlashes string
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    tunnelMode string
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    useSdwan string
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    userBookmark string
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    userGroupBookmark string
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    webMode string
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    windowsForticlientDownloadUrl string
    Download URL for Windows FortiClient.
    winsServer1 string
    IPv4 WINS server 1.
    winsServer2 string
    IPv4 WINS server 1.
    allow_user_access str
    Allow user access to SSL-VPN applications.
    auto_connect str
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    bookmark_groups Sequence[PortalBookmarkGroupArgs]
    Portal bookmark group. The structure of bookmark_group block is documented below.
    client_src_range str
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    clipboard str
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    custom_lang str
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    customize_forticlient_download_url str
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    default_protocol str
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    default_window_height int
    Screen height (range from 0 - 65535, default = 768).
    default_window_width int
    Screen width (range from 0 - 65535, default = 1024).
    dhcp6_ra_linkaddr str
    Relay agent IPv6 link address to use in DHCP6 requests.
    dhcp_ip_overlap str
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    dhcp_ra_giaddr str
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    display_bookmark str
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    display_connection_tools str
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    display_history str
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    display_status str
    Enable to display the web portal status widget. Valid values: enable, disable.
    dns_server1 str
    IPv4 DNS server 1.
    dns_server2 str
    IPv4 DNS server 2.
    dns_suffix str
    DNS suffix.
    dynamic_sort_subtable str
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    exclusive_routing str
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    focus_bookmark str
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    forticlient_download str
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    forticlient_download_method str
    FortiClient download method. Valid values: direct, ssl-vpn.
    get_all_tables str
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    heading str
    Web portal heading message.
    hide_sso_credential str
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    host_check str
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    host_check_interval int
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    host_check_policies Sequence[PortalHostCheckPolicyArgs]
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    ip_mode str
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    ip_pools Sequence[PortalIpPoolArgs]
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    ipv6_dns_server1 str
    IPv6 DNS server 1.
    ipv6_dns_server2 str
    IPv6 DNS server 2.
    ipv6_exclusive_routing str
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    ipv6_pools Sequence[PortalIpv6PoolArgs]
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    ipv6_service_restriction str
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    ipv6_split_tunneling str
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    ipv6_split_tunneling_routing_addresses Sequence[PortalIpv6SplitTunnelingRoutingAddressArgs]
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    ipv6_split_tunneling_routing_negate str
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    ipv6_tunnel_mode str
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    ipv6_wins_server1 str
    IPv6 WINS server 1.
    ipv6_wins_server2 str
    IPv6 WINS server 2.
    keep_alive str
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    landing_page PortalLandingPageArgs
    Landing page options. The structure of landing_page block is documented below.
    landing_page_mode str
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    limit_user_logins str
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    mac_addr_action str
    Client MAC address action. Valid values: allow, deny.
    mac_addr_check str
    Enable/disable MAC address host checking. Valid values: enable, disable.
    mac_addr_check_rules Sequence[PortalMacAddrCheckRuleArgs]
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    macos_forticlient_download_url str
    Download URL for Mac FortiClient.
    name str
    Portal name.
    os_check str
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    os_check_lists Sequence[PortalOsCheckListArgs]
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    prefer_ipv6_dns str
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    redir_url str
    Client login redirect URL.
    rewrite_ip_uri_ui str
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    save_password str
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    service_restriction str
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    skip_check_for_browser str
    Enable to skip host check for browser support. Valid values: enable, disable.
    skip_check_for_unsupported_os str
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    smb_max_version str
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smb_min_version str
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smb_ntlmv1_auth str
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    smbv1 str
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    split_dns Sequence[PortalSplitDnArgs]
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    split_tunneling str
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    split_tunneling_routing_addresses Sequence[PortalSplitTunnelingRoutingAddressArgs]
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    split_tunneling_routing_negate str
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    theme str
    Web portal color scheme.
    transform_backward_slashes str
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    tunnel_mode str
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    use_sdwan str
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    user_bookmark str
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    user_group_bookmark str
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    vdomparam str
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    web_mode str
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    windows_forticlient_download_url str
    Download URL for Windows FortiClient.
    wins_server1 str
    IPv4 WINS server 1.
    wins_server2 str
    IPv4 WINS server 1.
    allowUserAccess String
    Allow user access to SSL-VPN applications.
    autoConnect String
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    bookmarkGroups List<Property Map>
    Portal bookmark group. The structure of bookmark_group block is documented below.
    clientSrcRange String
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    clipboard String
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    customLang String
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    customizeForticlientDownloadUrl String
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    defaultProtocol String
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    defaultWindowHeight Number
    Screen height (range from 0 - 65535, default = 768).
    defaultWindowWidth Number
    Screen width (range from 0 - 65535, default = 1024).
    dhcp6RaLinkaddr String
    Relay agent IPv6 link address to use in DHCP6 requests.
    dhcpIpOverlap String
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    dhcpRaGiaddr String
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    displayBookmark String
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    displayConnectionTools String
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    displayHistory String
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    displayStatus String
    Enable to display the web portal status widget. Valid values: enable, disable.
    dnsServer1 String
    IPv4 DNS server 1.
    dnsServer2 String
    IPv4 DNS server 2.
    dnsSuffix String
    DNS suffix.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    exclusiveRouting String
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    focusBookmark String
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    forticlientDownload String
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    forticlientDownloadMethod String
    FortiClient download method. Valid values: direct, ssl-vpn.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    heading String
    Web portal heading message.
    hideSsoCredential String
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    hostCheck String
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    hostCheckInterval Number
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    hostCheckPolicies List<Property Map>
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    ipMode String
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    ipPools List<Property Map>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    ipv6DnsServer1 String
    IPv6 DNS server 1.
    ipv6DnsServer2 String
    IPv6 DNS server 2.
    ipv6ExclusiveRouting String
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    ipv6Pools List<Property Map>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    ipv6ServiceRestriction String
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    ipv6SplitTunneling String
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    ipv6SplitTunnelingRoutingAddresses List<Property Map>
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    ipv6SplitTunnelingRoutingNegate String
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    ipv6TunnelMode String
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    ipv6WinsServer1 String
    IPv6 WINS server 1.
    ipv6WinsServer2 String
    IPv6 WINS server 2.
    keepAlive String
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    landingPage Property Map
    Landing page options. The structure of landing_page block is documented below.
    landingPageMode String
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    limitUserLogins String
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    macAddrAction String
    Client MAC address action. Valid values: allow, deny.
    macAddrCheck String
    Enable/disable MAC address host checking. Valid values: enable, disable.
    macAddrCheckRules List<Property Map>
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    macosForticlientDownloadUrl String
    Download URL for Mac FortiClient.
    name String
    Portal name.
    osCheck String
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    osCheckLists List<Property Map>
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    preferIpv6Dns String
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    redirUrl String
    Client login redirect URL.
    rewriteIpUriUi String
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    savePassword String
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    serviceRestriction String
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    skipCheckForBrowser String
    Enable to skip host check for browser support. Valid values: enable, disable.
    skipCheckForUnsupportedOs String
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    smbMaxVersion String
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbMinVersion String
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbNtlmv1Auth String
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    smbv1 String
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    splitDns List<Property Map>
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    splitTunneling String
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    splitTunnelingRoutingAddresses List<Property Map>
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    splitTunnelingRoutingNegate String
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    theme String
    Web portal color scheme.
    transformBackwardSlashes String
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    tunnelMode String
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    useSdwan String
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    userBookmark String
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    userGroupBookmark String
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    webMode String
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    windowsForticlientDownloadUrl String
    Download URL for Windows FortiClient.
    winsServer1 String
    IPv4 WINS server 1.
    winsServer2 String
    IPv4 WINS server 1.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Portal resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Portal Resource

    Get an existing Portal resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: PortalState, opts?: CustomResourceOptions): Portal
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allow_user_access: Optional[str] = None,
        auto_connect: Optional[str] = None,
        bookmark_groups: Optional[Sequence[PortalBookmarkGroupArgs]] = None,
        client_src_range: Optional[str] = None,
        clipboard: Optional[str] = None,
        custom_lang: Optional[str] = None,
        customize_forticlient_download_url: Optional[str] = None,
        default_protocol: Optional[str] = None,
        default_window_height: Optional[int] = None,
        default_window_width: Optional[int] = None,
        dhcp6_ra_linkaddr: Optional[str] = None,
        dhcp_ip_overlap: Optional[str] = None,
        dhcp_ra_giaddr: Optional[str] = None,
        display_bookmark: Optional[str] = None,
        display_connection_tools: Optional[str] = None,
        display_history: Optional[str] = None,
        display_status: Optional[str] = None,
        dns_server1: Optional[str] = None,
        dns_server2: Optional[str] = None,
        dns_suffix: Optional[str] = None,
        dynamic_sort_subtable: Optional[str] = None,
        exclusive_routing: Optional[str] = None,
        focus_bookmark: Optional[str] = None,
        forticlient_download: Optional[str] = None,
        forticlient_download_method: Optional[str] = None,
        get_all_tables: Optional[str] = None,
        heading: Optional[str] = None,
        hide_sso_credential: Optional[str] = None,
        host_check: Optional[str] = None,
        host_check_interval: Optional[int] = None,
        host_check_policies: Optional[Sequence[PortalHostCheckPolicyArgs]] = None,
        ip_mode: Optional[str] = None,
        ip_pools: Optional[Sequence[PortalIpPoolArgs]] = None,
        ipv6_dns_server1: Optional[str] = None,
        ipv6_dns_server2: Optional[str] = None,
        ipv6_exclusive_routing: Optional[str] = None,
        ipv6_pools: Optional[Sequence[PortalIpv6PoolArgs]] = None,
        ipv6_service_restriction: Optional[str] = None,
        ipv6_split_tunneling: Optional[str] = None,
        ipv6_split_tunneling_routing_addresses: Optional[Sequence[PortalIpv6SplitTunnelingRoutingAddressArgs]] = None,
        ipv6_split_tunneling_routing_negate: Optional[str] = None,
        ipv6_tunnel_mode: Optional[str] = None,
        ipv6_wins_server1: Optional[str] = None,
        ipv6_wins_server2: Optional[str] = None,
        keep_alive: Optional[str] = None,
        landing_page: Optional[PortalLandingPageArgs] = None,
        landing_page_mode: Optional[str] = None,
        limit_user_logins: Optional[str] = None,
        mac_addr_action: Optional[str] = None,
        mac_addr_check: Optional[str] = None,
        mac_addr_check_rules: Optional[Sequence[PortalMacAddrCheckRuleArgs]] = None,
        macos_forticlient_download_url: Optional[str] = None,
        name: Optional[str] = None,
        os_check: Optional[str] = None,
        os_check_lists: Optional[Sequence[PortalOsCheckListArgs]] = None,
        prefer_ipv6_dns: Optional[str] = None,
        redir_url: Optional[str] = None,
        rewrite_ip_uri_ui: Optional[str] = None,
        save_password: Optional[str] = None,
        service_restriction: Optional[str] = None,
        skip_check_for_browser: Optional[str] = None,
        skip_check_for_unsupported_os: Optional[str] = None,
        smb_max_version: Optional[str] = None,
        smb_min_version: Optional[str] = None,
        smb_ntlmv1_auth: Optional[str] = None,
        smbv1: Optional[str] = None,
        split_dns: Optional[Sequence[PortalSplitDnArgs]] = None,
        split_tunneling: Optional[str] = None,
        split_tunneling_routing_addresses: Optional[Sequence[PortalSplitTunnelingRoutingAddressArgs]] = None,
        split_tunneling_routing_negate: Optional[str] = None,
        theme: Optional[str] = None,
        transform_backward_slashes: Optional[str] = None,
        tunnel_mode: Optional[str] = None,
        use_sdwan: Optional[str] = None,
        user_bookmark: Optional[str] = None,
        user_group_bookmark: Optional[str] = None,
        vdomparam: Optional[str] = None,
        web_mode: Optional[str] = None,
        windows_forticlient_download_url: Optional[str] = None,
        wins_server1: Optional[str] = None,
        wins_server2: Optional[str] = None) -> Portal
    func GetPortal(ctx *Context, name string, id IDInput, state *PortalState, opts ...ResourceOption) (*Portal, error)
    public static Portal Get(string name, Input<string> id, PortalState? state, CustomResourceOptions? opts = null)
    public static Portal get(String name, Output<String> id, PortalState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllowUserAccess string
    Allow user access to SSL-VPN applications.
    AutoConnect string
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    BookmarkGroups List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalBookmarkGroup>
    Portal bookmark group. The structure of bookmark_group block is documented below.
    ClientSrcRange string
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    Clipboard string
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    CustomLang string
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    CustomizeForticlientDownloadUrl string
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    DefaultProtocol string
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    DefaultWindowHeight int
    Screen height (range from 0 - 65535, default = 768).
    DefaultWindowWidth int
    Screen width (range from 0 - 65535, default = 1024).
    Dhcp6RaLinkaddr string
    Relay agent IPv6 link address to use in DHCP6 requests.
    DhcpIpOverlap string
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    DhcpRaGiaddr string
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    DisplayBookmark string
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    DisplayConnectionTools string
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    DisplayHistory string
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    DisplayStatus string
    Enable to display the web portal status widget. Valid values: enable, disable.
    DnsServer1 string
    IPv4 DNS server 1.
    DnsServer2 string
    IPv4 DNS server 2.
    DnsSuffix string
    DNS suffix.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    ExclusiveRouting string
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    FocusBookmark string
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    ForticlientDownload string
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    ForticlientDownloadMethod string
    FortiClient download method. Valid values: direct, ssl-vpn.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    Heading string
    Web portal heading message.
    HideSsoCredential string
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    HostCheck string
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    HostCheckInterval int
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    HostCheckPolicies List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalHostCheckPolicy>
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    IpMode string
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    IpPools List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalIpPool>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    Ipv6DnsServer1 string
    IPv6 DNS server 1.
    Ipv6DnsServer2 string
    IPv6 DNS server 2.
    Ipv6ExclusiveRouting string
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    Ipv6Pools List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalIpv6Pool>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    Ipv6ServiceRestriction string
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    Ipv6SplitTunneling string
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    Ipv6SplitTunnelingRoutingAddresses List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalIpv6SplitTunnelingRoutingAddress>
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    Ipv6SplitTunnelingRoutingNegate string
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    Ipv6TunnelMode string
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    Ipv6WinsServer1 string
    IPv6 WINS server 1.
    Ipv6WinsServer2 string
    IPv6 WINS server 2.
    KeepAlive string
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    LandingPage Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalLandingPage
    Landing page options. The structure of landing_page block is documented below.
    LandingPageMode string
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    LimitUserLogins string
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    MacAddrAction string
    Client MAC address action. Valid values: allow, deny.
    MacAddrCheck string
    Enable/disable MAC address host checking. Valid values: enable, disable.
    MacAddrCheckRules List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalMacAddrCheckRule>
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    MacosForticlientDownloadUrl string
    Download URL for Mac FortiClient.
    Name string
    Portal name.
    OsCheck string
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    OsCheckLists List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalOsCheckList>
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    PreferIpv6Dns string
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    RedirUrl string
    Client login redirect URL.
    RewriteIpUriUi string
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    SavePassword string
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    ServiceRestriction string
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    SkipCheckForBrowser string
    Enable to skip host check for browser support. Valid values: enable, disable.
    SkipCheckForUnsupportedOs string
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    SmbMaxVersion string
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    SmbMinVersion string
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    SmbNtlmv1Auth string
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    Smbv1 string
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    SplitDns List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalSplitDn>
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    SplitTunneling string
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    SplitTunnelingRoutingAddresses List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalSplitTunnelingRoutingAddress>
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    SplitTunnelingRoutingNegate string
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    Theme string
    Web portal color scheme.
    TransformBackwardSlashes string
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    TunnelMode string
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    UseSdwan string
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    UserBookmark string
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    UserGroupBookmark string
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    WebMode string
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    WindowsForticlientDownloadUrl string
    Download URL for Windows FortiClient.
    WinsServer1 string
    IPv4 WINS server 1.
    WinsServer2 string
    IPv4 WINS server 1.
    AllowUserAccess string
    Allow user access to SSL-VPN applications.
    AutoConnect string
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    BookmarkGroups []PortalBookmarkGroupArgs
    Portal bookmark group. The structure of bookmark_group block is documented below.
    ClientSrcRange string
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    Clipboard string
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    CustomLang string
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    CustomizeForticlientDownloadUrl string
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    DefaultProtocol string
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    DefaultWindowHeight int
    Screen height (range from 0 - 65535, default = 768).
    DefaultWindowWidth int
    Screen width (range from 0 - 65535, default = 1024).
    Dhcp6RaLinkaddr string
    Relay agent IPv6 link address to use in DHCP6 requests.
    DhcpIpOverlap string
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    DhcpRaGiaddr string
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    DisplayBookmark string
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    DisplayConnectionTools string
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    DisplayHistory string
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    DisplayStatus string
    Enable to display the web portal status widget. Valid values: enable, disable.
    DnsServer1 string
    IPv4 DNS server 1.
    DnsServer2 string
    IPv4 DNS server 2.
    DnsSuffix string
    DNS suffix.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    ExclusiveRouting string
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    FocusBookmark string
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    ForticlientDownload string
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    ForticlientDownloadMethod string
    FortiClient download method. Valid values: direct, ssl-vpn.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    Heading string
    Web portal heading message.
    HideSsoCredential string
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    HostCheck string
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    HostCheckInterval int
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    HostCheckPolicies []PortalHostCheckPolicyArgs
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    IpMode string
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    IpPools []PortalIpPoolArgs
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    Ipv6DnsServer1 string
    IPv6 DNS server 1.
    Ipv6DnsServer2 string
    IPv6 DNS server 2.
    Ipv6ExclusiveRouting string
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    Ipv6Pools []PortalIpv6PoolArgs
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    Ipv6ServiceRestriction string
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    Ipv6SplitTunneling string
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    Ipv6SplitTunnelingRoutingAddresses []PortalIpv6SplitTunnelingRoutingAddressArgs
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    Ipv6SplitTunnelingRoutingNegate string
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    Ipv6TunnelMode string
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    Ipv6WinsServer1 string
    IPv6 WINS server 1.
    Ipv6WinsServer2 string
    IPv6 WINS server 2.
    KeepAlive string
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    LandingPage PortalLandingPageArgs
    Landing page options. The structure of landing_page block is documented below.
    LandingPageMode string
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    LimitUserLogins string
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    MacAddrAction string
    Client MAC address action. Valid values: allow, deny.
    MacAddrCheck string
    Enable/disable MAC address host checking. Valid values: enable, disable.
    MacAddrCheckRules []PortalMacAddrCheckRuleArgs
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    MacosForticlientDownloadUrl string
    Download URL for Mac FortiClient.
    Name string
    Portal name.
    OsCheck string
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    OsCheckLists []PortalOsCheckListArgs
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    PreferIpv6Dns string
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    RedirUrl string
    Client login redirect URL.
    RewriteIpUriUi string
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    SavePassword string
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    ServiceRestriction string
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    SkipCheckForBrowser string
    Enable to skip host check for browser support. Valid values: enable, disable.
    SkipCheckForUnsupportedOs string
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    SmbMaxVersion string
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    SmbMinVersion string
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    SmbNtlmv1Auth string
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    Smbv1 string
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    SplitDns []PortalSplitDnArgs
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    SplitTunneling string
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    SplitTunnelingRoutingAddresses []PortalSplitTunnelingRoutingAddressArgs
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    SplitTunnelingRoutingNegate string
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    Theme string
    Web portal color scheme.
    TransformBackwardSlashes string
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    TunnelMode string
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    UseSdwan string
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    UserBookmark string
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    UserGroupBookmark string
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    WebMode string
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    WindowsForticlientDownloadUrl string
    Download URL for Windows FortiClient.
    WinsServer1 string
    IPv4 WINS server 1.
    WinsServer2 string
    IPv4 WINS server 1.
    allowUserAccess String
    Allow user access to SSL-VPN applications.
    autoConnect String
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    bookmarkGroups List<PortalBookmarkGroup>
    Portal bookmark group. The structure of bookmark_group block is documented below.
    clientSrcRange String
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    clipboard String
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    customLang String
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    customizeForticlientDownloadUrl String
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    defaultProtocol String
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    defaultWindowHeight Integer
    Screen height (range from 0 - 65535, default = 768).
    defaultWindowWidth Integer
    Screen width (range from 0 - 65535, default = 1024).
    dhcp6RaLinkaddr String
    Relay agent IPv6 link address to use in DHCP6 requests.
    dhcpIpOverlap String
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    dhcpRaGiaddr String
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    displayBookmark String
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    displayConnectionTools String
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    displayHistory String
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    displayStatus String
    Enable to display the web portal status widget. Valid values: enable, disable.
    dnsServer1 String
    IPv4 DNS server 1.
    dnsServer2 String
    IPv4 DNS server 2.
    dnsSuffix String
    DNS suffix.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    exclusiveRouting String
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    focusBookmark String
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    forticlientDownload String
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    forticlientDownloadMethod String
    FortiClient download method. Valid values: direct, ssl-vpn.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    heading String
    Web portal heading message.
    hideSsoCredential String
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    hostCheck String
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    hostCheckInterval Integer
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    hostCheckPolicies List<PortalHostCheckPolicy>
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    ipMode String
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    ipPools List<PortalIpPool>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    ipv6DnsServer1 String
    IPv6 DNS server 1.
    ipv6DnsServer2 String
    IPv6 DNS server 2.
    ipv6ExclusiveRouting String
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    ipv6Pools List<PortalIpv6Pool>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    ipv6ServiceRestriction String
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    ipv6SplitTunneling String
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    ipv6SplitTunnelingRoutingAddresses List<PortalIpv6SplitTunnelingRoutingAddress>
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    ipv6SplitTunnelingRoutingNegate String
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    ipv6TunnelMode String
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    ipv6WinsServer1 String
    IPv6 WINS server 1.
    ipv6WinsServer2 String
    IPv6 WINS server 2.
    keepAlive String
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    landingPage PortalLandingPage
    Landing page options. The structure of landing_page block is documented below.
    landingPageMode String
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    limitUserLogins String
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    macAddrAction String
    Client MAC address action. Valid values: allow, deny.
    macAddrCheck String
    Enable/disable MAC address host checking. Valid values: enable, disable.
    macAddrCheckRules List<PortalMacAddrCheckRule>
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    macosForticlientDownloadUrl String
    Download URL for Mac FortiClient.
    name String
    Portal name.
    osCheck String
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    osCheckLists List<PortalOsCheckList>
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    preferIpv6Dns String
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    redirUrl String
    Client login redirect URL.
    rewriteIpUriUi String
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    savePassword String
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    serviceRestriction String
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    skipCheckForBrowser String
    Enable to skip host check for browser support. Valid values: enable, disable.
    skipCheckForUnsupportedOs String
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    smbMaxVersion String
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbMinVersion String
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbNtlmv1Auth String
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    smbv1 String
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    splitDns List<PortalSplitDn>
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    splitTunneling String
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    splitTunnelingRoutingAddresses List<PortalSplitTunnelingRoutingAddress>
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    splitTunnelingRoutingNegate String
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    theme String
    Web portal color scheme.
    transformBackwardSlashes String
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    tunnelMode String
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    useSdwan String
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    userBookmark String
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    userGroupBookmark String
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    webMode String
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    windowsForticlientDownloadUrl String
    Download URL for Windows FortiClient.
    winsServer1 String
    IPv4 WINS server 1.
    winsServer2 String
    IPv4 WINS server 1.
    allowUserAccess string
    Allow user access to SSL-VPN applications.
    autoConnect string
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    bookmarkGroups PortalBookmarkGroup[]
    Portal bookmark group. The structure of bookmark_group block is documented below.
    clientSrcRange string
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    clipboard string
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    customLang string
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    customizeForticlientDownloadUrl string
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    defaultProtocol string
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    defaultWindowHeight number
    Screen height (range from 0 - 65535, default = 768).
    defaultWindowWidth number
    Screen width (range from 0 - 65535, default = 1024).
    dhcp6RaLinkaddr string
    Relay agent IPv6 link address to use in DHCP6 requests.
    dhcpIpOverlap string
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    dhcpRaGiaddr string
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    displayBookmark string
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    displayConnectionTools string
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    displayHistory string
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    displayStatus string
    Enable to display the web portal status widget. Valid values: enable, disable.
    dnsServer1 string
    IPv4 DNS server 1.
    dnsServer2 string
    IPv4 DNS server 2.
    dnsSuffix string
    DNS suffix.
    dynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    exclusiveRouting string
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    focusBookmark string
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    forticlientDownload string
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    forticlientDownloadMethod string
    FortiClient download method. Valid values: direct, ssl-vpn.
    getAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    heading string
    Web portal heading message.
    hideSsoCredential string
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    hostCheck string
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    hostCheckInterval number
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    hostCheckPolicies PortalHostCheckPolicy[]
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    ipMode string
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    ipPools PortalIpPool[]
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    ipv6DnsServer1 string
    IPv6 DNS server 1.
    ipv6DnsServer2 string
    IPv6 DNS server 2.
    ipv6ExclusiveRouting string
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    ipv6Pools PortalIpv6Pool[]
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    ipv6ServiceRestriction string
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    ipv6SplitTunneling string
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    ipv6SplitTunnelingRoutingAddresses PortalIpv6SplitTunnelingRoutingAddress[]
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    ipv6SplitTunnelingRoutingNegate string
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    ipv6TunnelMode string
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    ipv6WinsServer1 string
    IPv6 WINS server 1.
    ipv6WinsServer2 string
    IPv6 WINS server 2.
    keepAlive string
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    landingPage PortalLandingPage
    Landing page options. The structure of landing_page block is documented below.
    landingPageMode string
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    limitUserLogins string
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    macAddrAction string
    Client MAC address action. Valid values: allow, deny.
    macAddrCheck string
    Enable/disable MAC address host checking. Valid values: enable, disable.
    macAddrCheckRules PortalMacAddrCheckRule[]
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    macosForticlientDownloadUrl string
    Download URL for Mac FortiClient.
    name string
    Portal name.
    osCheck string
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    osCheckLists PortalOsCheckList[]
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    preferIpv6Dns string
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    redirUrl string
    Client login redirect URL.
    rewriteIpUriUi string
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    savePassword string
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    serviceRestriction string
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    skipCheckForBrowser string
    Enable to skip host check for browser support. Valid values: enable, disable.
    skipCheckForUnsupportedOs string
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    smbMaxVersion string
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbMinVersion string
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbNtlmv1Auth string
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    smbv1 string
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    splitDns PortalSplitDn[]
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    splitTunneling string
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    splitTunnelingRoutingAddresses PortalSplitTunnelingRoutingAddress[]
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    splitTunnelingRoutingNegate string
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    theme string
    Web portal color scheme.
    transformBackwardSlashes string
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    tunnelMode string
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    useSdwan string
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    userBookmark string
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    userGroupBookmark string
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    webMode string
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    windowsForticlientDownloadUrl string
    Download URL for Windows FortiClient.
    winsServer1 string
    IPv4 WINS server 1.
    winsServer2 string
    IPv4 WINS server 1.
    allow_user_access str
    Allow user access to SSL-VPN applications.
    auto_connect str
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    bookmark_groups Sequence[PortalBookmarkGroupArgs]
    Portal bookmark group. The structure of bookmark_group block is documented below.
    client_src_range str
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    clipboard str
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    custom_lang str
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    customize_forticlient_download_url str
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    default_protocol str
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    default_window_height int
    Screen height (range from 0 - 65535, default = 768).
    default_window_width int
    Screen width (range from 0 - 65535, default = 1024).
    dhcp6_ra_linkaddr str
    Relay agent IPv6 link address to use in DHCP6 requests.
    dhcp_ip_overlap str
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    dhcp_ra_giaddr str
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    display_bookmark str
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    display_connection_tools str
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    display_history str
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    display_status str
    Enable to display the web portal status widget. Valid values: enable, disable.
    dns_server1 str
    IPv4 DNS server 1.
    dns_server2 str
    IPv4 DNS server 2.
    dns_suffix str
    DNS suffix.
    dynamic_sort_subtable str
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    exclusive_routing str
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    focus_bookmark str
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    forticlient_download str
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    forticlient_download_method str
    FortiClient download method. Valid values: direct, ssl-vpn.
    get_all_tables str
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    heading str
    Web portal heading message.
    hide_sso_credential str
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    host_check str
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    host_check_interval int
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    host_check_policies Sequence[PortalHostCheckPolicyArgs]
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    ip_mode str
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    ip_pools Sequence[PortalIpPoolArgs]
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    ipv6_dns_server1 str
    IPv6 DNS server 1.
    ipv6_dns_server2 str
    IPv6 DNS server 2.
    ipv6_exclusive_routing str
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    ipv6_pools Sequence[PortalIpv6PoolArgs]
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    ipv6_service_restriction str
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    ipv6_split_tunneling str
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    ipv6_split_tunneling_routing_addresses Sequence[PortalIpv6SplitTunnelingRoutingAddressArgs]
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    ipv6_split_tunneling_routing_negate str
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    ipv6_tunnel_mode str
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    ipv6_wins_server1 str
    IPv6 WINS server 1.
    ipv6_wins_server2 str
    IPv6 WINS server 2.
    keep_alive str
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    landing_page PortalLandingPageArgs
    Landing page options. The structure of landing_page block is documented below.
    landing_page_mode str
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    limit_user_logins str
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    mac_addr_action str
    Client MAC address action. Valid values: allow, deny.
    mac_addr_check str
    Enable/disable MAC address host checking. Valid values: enable, disable.
    mac_addr_check_rules Sequence[PortalMacAddrCheckRuleArgs]
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    macos_forticlient_download_url str
    Download URL for Mac FortiClient.
    name str
    Portal name.
    os_check str
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    os_check_lists Sequence[PortalOsCheckListArgs]
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    prefer_ipv6_dns str
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    redir_url str
    Client login redirect URL.
    rewrite_ip_uri_ui str
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    save_password str
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    service_restriction str
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    skip_check_for_browser str
    Enable to skip host check for browser support. Valid values: enable, disable.
    skip_check_for_unsupported_os str
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    smb_max_version str
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smb_min_version str
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smb_ntlmv1_auth str
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    smbv1 str
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    split_dns Sequence[PortalSplitDnArgs]
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    split_tunneling str
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    split_tunneling_routing_addresses Sequence[PortalSplitTunnelingRoutingAddressArgs]
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    split_tunneling_routing_negate str
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    theme str
    Web portal color scheme.
    transform_backward_slashes str
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    tunnel_mode str
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    use_sdwan str
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    user_bookmark str
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    user_group_bookmark str
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    vdomparam str
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    web_mode str
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    windows_forticlient_download_url str
    Download URL for Windows FortiClient.
    wins_server1 str
    IPv4 WINS server 1.
    wins_server2 str
    IPv4 WINS server 1.
    allowUserAccess String
    Allow user access to SSL-VPN applications.
    autoConnect String
    Enable/disable automatic connect by client when system is up. Valid values: enable, disable.
    bookmarkGroups List<Property Map>
    Portal bookmark group. The structure of bookmark_group block is documented below.
    clientSrcRange String
    Allow client to add source range for the tunnel traffic. Valid values: enable, disable.
    clipboard String
    Enable to support RDP/VPC clipboard functionality. Valid values: enable, disable.
    customLang String
    Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
    customizeForticlientDownloadUrl String
    Enable support of customized download URL for FortiClient. Valid values: enable, disable.
    defaultProtocol String
    Application type that is set by default. Valid values: web, ftp, telnet, smb, vnc, rdp, ssh, sftp.
    defaultWindowHeight Number
    Screen height (range from 0 - 65535, default = 768).
    defaultWindowWidth Number
    Screen width (range from 0 - 65535, default = 1024).
    dhcp6RaLinkaddr String
    Relay agent IPv6 link address to use in DHCP6 requests.
    dhcpIpOverlap String
    Configure overlapping DHCP IP allocation assignment. Valid values: use-new, use-old.
    dhcpRaGiaddr String
    Relay agent gateway IP address to use in the giaddr field of DHCP requests.
    displayBookmark String
    Enable to display the web portal bookmark widget. Valid values: enable, disable.
    displayConnectionTools String
    Enable to display the web portal connection tools widget. Valid values: enable, disable.
    displayHistory String
    Enable to display the web portal user login history widget. Valid values: enable, disable.
    displayStatus String
    Enable to display the web portal status widget. Valid values: enable, disable.
    dnsServer1 String
    IPv4 DNS server 1.
    dnsServer2 String
    IPv4 DNS server 2.
    dnsSuffix String
    DNS suffix.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    exclusiveRouting String
    Enable/disable all traffic go through tunnel only. Valid values: enable, disable.
    focusBookmark String
    Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable, disable.
    forticlientDownload String
    Enable/disable download option for FortiClient. Valid values: enable, disable.
    forticlientDownloadMethod String
    FortiClient download method. Valid values: direct, ssl-vpn.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    heading String
    Web portal heading message.
    hideSsoCredential String
    Enable to prevent SSO credential being sent to client. Valid values: enable, disable.
    hostCheck String
    Type of host checking performed on endpoints. Valid values: none, av, fw, av-fw, custom.
    hostCheckInterval Number
    Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
    hostCheckPolicies List<Property Map>
    One or more policies to require the endpoint to have specific security software. The structure of host_check_policy block is documented below.
    ipMode String
    Method by which users of this SSL-VPN tunnel obtain IP addresses.
    ipPools List<Property Map>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_pools block is documented below.
    ipv6DnsServer1 String
    IPv6 DNS server 1.
    ipv6DnsServer2 String
    IPv6 DNS server 2.
    ipv6ExclusiveRouting String
    Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable, disable.
    ipv6Pools List<Property Map>
    IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_pools block is documented below.
    ipv6ServiceRestriction String
    Enable/disable IPv6 tunnel service restriction. Valid values: enable, disable.
    ipv6SplitTunneling String
    Enable/disable IPv6 split tunneling. Valid values: enable, disable.
    ipv6SplitTunnelingRoutingAddresses List<Property Map>
    IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_address block is documented below.
    ipv6SplitTunnelingRoutingNegate String
    Enable to negate IPv6 split tunneling routing address. Valid values: enable, disable.
    ipv6TunnelMode String
    Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable, disable.
    ipv6WinsServer1 String
    IPv6 WINS server 1.
    ipv6WinsServer2 String
    IPv6 WINS server 2.
    keepAlive String
    Enable/disable automatic reconnect for FortiClient connections. Valid values: enable, disable.
    landingPage Property Map
    Landing page options. The structure of landing_page block is documented below.
    landingPageMode String
    Enable/disable SSL-VPN landing page mode. Valid values: enable, disable.
    limitUserLogins String
    Enable to limit each user to one SSL-VPN session at a time. Valid values: enable, disable.
    macAddrAction String
    Client MAC address action. Valid values: allow, deny.
    macAddrCheck String
    Enable/disable MAC address host checking. Valid values: enable, disable.
    macAddrCheckRules List<Property Map>
    Client MAC address check rule. The structure of mac_addr_check_rule block is documented below.
    macosForticlientDownloadUrl String
    Download URL for Mac FortiClient.
    name String
    Portal name.
    osCheck String
    Enable to let the FortiGate decide action based on client OS. Valid values: enable, disable.
    osCheckLists List<Property Map>
    SSL VPN OS checks. The structure of os_check_list block is documented below.
    preferIpv6Dns String
    prefer to query IPv6 dns first if enabled. Valid values: enable, disable.
    redirUrl String
    Client login redirect URL.
    rewriteIpUriUi String
    Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable, disable.
    savePassword String
    Enable/disable FortiClient saving the user's password. Valid values: enable, disable.
    serviceRestriction String
    Enable/disable tunnel service restriction. Valid values: enable, disable.
    skipCheckForBrowser String
    Enable to skip host check for browser support. Valid values: enable, disable.
    skipCheckForUnsupportedOs String
    Enable to skip host check if client OS does not support it. Valid values: enable, disable.
    smbMaxVersion String
    SMB maximum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbMinVersion String
    SMB minimum client protocol version. Valid values: smbv1, smbv2, smbv3.
    smbNtlmv1Auth String
    Enable support of NTLMv1 for Samba authentication. Valid values: enable, disable.
    smbv1 String
    Enable/disable support of SMBv1 for Samba. Valid values: enable, disable.
    splitDns List<Property Map>
    Split DNS for SSL VPN. The structure of split_dns block is documented below.
    splitTunneling String
    Enable/disable IPv4 split tunneling. Valid values: enable, disable.
    splitTunnelingRoutingAddresses List<Property Map>
    IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_address block is documented below.
    splitTunnelingRoutingNegate String
    Enable to negate split tunneling routing address. Valid values: enable, disable.
    theme String
    Web portal color scheme.
    transformBackwardSlashes String
    Transform backward slashes to forward slashes in URLs. Valid values: enable, disable.
    tunnelMode String
    Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable, disable.
    useSdwan String
    Use SD-WAN rules to get output interface. Valid values: enable, disable.
    userBookmark String
    Enable to allow web portal users to create their own bookmarks. Valid values: enable, disable.
    userGroupBookmark String
    Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable, disable.
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    webMode String
    Enable/disable SSL VPN web mode. Valid values: enable, disable.
    windowsForticlientDownloadUrl String
    Download URL for Windows FortiClient.
    winsServer1 String
    IPv4 WINS server 1.
    winsServer2 String
    IPv4 WINS server 1.

    Supporting Types

    PortalBookmarkGroup, PortalBookmarkGroupArgs

    Bookmarks List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalBookmarkGroupBookmark>
    Bookmark table. The structure of bookmarks block is documented below.
    Name string
    Bookmark group name.
    Bookmarks []PortalBookmarkGroupBookmark
    Bookmark table. The structure of bookmarks block is documented below.
    Name string
    Bookmark group name.
    bookmarks List<PortalBookmarkGroupBookmark>
    Bookmark table. The structure of bookmarks block is documented below.
    name String
    Bookmark group name.
    bookmarks PortalBookmarkGroupBookmark[]
    Bookmark table. The structure of bookmarks block is documented below.
    name string
    Bookmark group name.
    bookmarks Sequence[PortalBookmarkGroupBookmark]
    Bookmark table. The structure of bookmarks block is documented below.
    name str
    Bookmark group name.
    bookmarks List<Property Map>
    Bookmark table. The structure of bookmarks block is documented below.
    name String
    Bookmark group name.

    PortalBookmarkGroupBookmark, PortalBookmarkGroupBookmarkArgs

    AdditionalParams string
    Additional parameters.
    Apptype string
    Application type.
    ColorDepth string
    Color depth per pixel. Valid values: 32, 16, 8.
    Description string
    Description.
    Domain string
    Login domain.
    Folder string
    Network shared file folder parameter.
    FormDatas List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalBookmarkGroupBookmarkFormData>
    Form data. The structure of form_data block is documented below.
    Height int
    Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    Host string
    Host name/IP parameter.
    KeyboardLayout string
    Keyboard layout.
    ListeningPort int
    Listening port (0 - 65535).
    LoadBalancingInfo string
    The load balancing information or cookie which should be provided to the connection broker.
    LogonPassword string
    Logon password.
    LogonUser string
    Logon user.
    Name string
    Bookmark name.
    Port int
    Remote port.
    PreconnectionBlob string
    An arbitrary string which identifies the RDP source.
    PreconnectionId int
    The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
    RemotePort int
    Remote port (0 - 65535).
    RestrictedAdmin string
    Enable/disable restricted admin mode for RDP. Valid values: enable, disable.
    Security string
    Security mode for RDP connection (default = any). Valid values: rdp, nla, tls, any.
    SendPreconnectionId string
    Enable/disable sending of preconnection ID. Valid values: enable, disable.
    ServerLayout string
    Server side keyboard layout.
    ShowStatusWindow string
    Enable/disable showing of status window. Valid values: enable, disable.
    Sso string
    Single Sign-On. Valid values: disable, static, auto.
    SsoCredential string
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    SsoCredentialSentOnce string
    Single sign-on credentials are only sent once to remote server. Valid values: enable, disable.
    SsoPassword string
    SSO password.
    SsoUsername string
    SSO user name.
    Url string
    URL parameter.
    VncKeyboardLayout string
    Keyboard layout. Valid values: default, da, nl, en-uk, en-uk-ext, fi, fr, fr-be, fr-ca-mul, de, de-ch, it, it-142, pt, pt-br-abnt2, no, gd, es, sv, us-intl.
    Width int
    Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    AdditionalParams string
    Additional parameters.
    Apptype string
    Application type.
    ColorDepth string
    Color depth per pixel. Valid values: 32, 16, 8.
    Description string
    Description.
    Domain string
    Login domain.
    Folder string
    Network shared file folder parameter.
    FormDatas []PortalBookmarkGroupBookmarkFormData
    Form data. The structure of form_data block is documented below.
    Height int
    Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    Host string
    Host name/IP parameter.
    KeyboardLayout string
    Keyboard layout.
    ListeningPort int
    Listening port (0 - 65535).
    LoadBalancingInfo string
    The load balancing information or cookie which should be provided to the connection broker.
    LogonPassword string
    Logon password.
    LogonUser string
    Logon user.
    Name string
    Bookmark name.
    Port int
    Remote port.
    PreconnectionBlob string
    An arbitrary string which identifies the RDP source.
    PreconnectionId int
    The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
    RemotePort int
    Remote port (0 - 65535).
    RestrictedAdmin string
    Enable/disable restricted admin mode for RDP. Valid values: enable, disable.
    Security string
    Security mode for RDP connection (default = any). Valid values: rdp, nla, tls, any.
    SendPreconnectionId string
    Enable/disable sending of preconnection ID. Valid values: enable, disable.
    ServerLayout string
    Server side keyboard layout.
    ShowStatusWindow string
    Enable/disable showing of status window. Valid values: enable, disable.
    Sso string
    Single Sign-On. Valid values: disable, static, auto.
    SsoCredential string
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    SsoCredentialSentOnce string
    Single sign-on credentials are only sent once to remote server. Valid values: enable, disable.
    SsoPassword string
    SSO password.
    SsoUsername string
    SSO user name.
    Url string
    URL parameter.
    VncKeyboardLayout string
    Keyboard layout. Valid values: default, da, nl, en-uk, en-uk-ext, fi, fr, fr-be, fr-ca-mul, de, de-ch, it, it-142, pt, pt-br-abnt2, no, gd, es, sv, us-intl.
    Width int
    Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    additionalParams String
    Additional parameters.
    apptype String
    Application type.
    colorDepth String
    Color depth per pixel. Valid values: 32, 16, 8.
    description String
    Description.
    domain String
    Login domain.
    folder String
    Network shared file folder parameter.
    formDatas List<PortalBookmarkGroupBookmarkFormData>
    Form data. The structure of form_data block is documented below.
    height Integer
    Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    host String
    Host name/IP parameter.
    keyboardLayout String
    Keyboard layout.
    listeningPort Integer
    Listening port (0 - 65535).
    loadBalancingInfo String
    The load balancing information or cookie which should be provided to the connection broker.
    logonPassword String
    Logon password.
    logonUser String
    Logon user.
    name String
    Bookmark name.
    port Integer
    Remote port.
    preconnectionBlob String
    An arbitrary string which identifies the RDP source.
    preconnectionId Integer
    The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
    remotePort Integer
    Remote port (0 - 65535).
    restrictedAdmin String
    Enable/disable restricted admin mode for RDP. Valid values: enable, disable.
    security String
    Security mode for RDP connection (default = any). Valid values: rdp, nla, tls, any.
    sendPreconnectionId String
    Enable/disable sending of preconnection ID. Valid values: enable, disable.
    serverLayout String
    Server side keyboard layout.
    showStatusWindow String
    Enable/disable showing of status window. Valid values: enable, disable.
    sso String
    Single Sign-On. Valid values: disable, static, auto.
    ssoCredential String
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    ssoCredentialSentOnce String
    Single sign-on credentials are only sent once to remote server. Valid values: enable, disable.
    ssoPassword String
    SSO password.
    ssoUsername String
    SSO user name.
    url String
    URL parameter.
    vncKeyboardLayout String
    Keyboard layout. Valid values: default, da, nl, en-uk, en-uk-ext, fi, fr, fr-be, fr-ca-mul, de, de-ch, it, it-142, pt, pt-br-abnt2, no, gd, es, sv, us-intl.
    width Integer
    Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    additionalParams string
    Additional parameters.
    apptype string
    Application type.
    colorDepth string
    Color depth per pixel. Valid values: 32, 16, 8.
    description string
    Description.
    domain string
    Login domain.
    folder string
    Network shared file folder parameter.
    formDatas PortalBookmarkGroupBookmarkFormData[]
    Form data. The structure of form_data block is documented below.
    height number
    Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    host string
    Host name/IP parameter.
    keyboardLayout string
    Keyboard layout.
    listeningPort number
    Listening port (0 - 65535).
    loadBalancingInfo string
    The load balancing information or cookie which should be provided to the connection broker.
    logonPassword string
    Logon password.
    logonUser string
    Logon user.
    name string
    Bookmark name.
    port number
    Remote port.
    preconnectionBlob string
    An arbitrary string which identifies the RDP source.
    preconnectionId number
    The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
    remotePort number
    Remote port (0 - 65535).
    restrictedAdmin string
    Enable/disable restricted admin mode for RDP. Valid values: enable, disable.
    security string
    Security mode for RDP connection (default = any). Valid values: rdp, nla, tls, any.
    sendPreconnectionId string
    Enable/disable sending of preconnection ID. Valid values: enable, disable.
    serverLayout string
    Server side keyboard layout.
    showStatusWindow string
    Enable/disable showing of status window. Valid values: enable, disable.
    sso string
    Single Sign-On. Valid values: disable, static, auto.
    ssoCredential string
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    ssoCredentialSentOnce string
    Single sign-on credentials are only sent once to remote server. Valid values: enable, disable.
    ssoPassword string
    SSO password.
    ssoUsername string
    SSO user name.
    url string
    URL parameter.
    vncKeyboardLayout string
    Keyboard layout. Valid values: default, da, nl, en-uk, en-uk-ext, fi, fr, fr-be, fr-ca-mul, de, de-ch, it, it-142, pt, pt-br-abnt2, no, gd, es, sv, us-intl.
    width number
    Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    additional_params str
    Additional parameters.
    apptype str
    Application type.
    color_depth str
    Color depth per pixel. Valid values: 32, 16, 8.
    description str
    Description.
    domain str
    Login domain.
    folder str
    Network shared file folder parameter.
    form_datas Sequence[PortalBookmarkGroupBookmarkFormData]
    Form data. The structure of form_data block is documented below.
    height int
    Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    host str
    Host name/IP parameter.
    keyboard_layout str
    Keyboard layout.
    listening_port int
    Listening port (0 - 65535).
    load_balancing_info str
    The load balancing information or cookie which should be provided to the connection broker.
    logon_password str
    Logon password.
    logon_user str
    Logon user.
    name str
    Bookmark name.
    port int
    Remote port.
    preconnection_blob str
    An arbitrary string which identifies the RDP source.
    preconnection_id int
    The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
    remote_port int
    Remote port (0 - 65535).
    restricted_admin str
    Enable/disable restricted admin mode for RDP. Valid values: enable, disable.
    security str
    Security mode for RDP connection (default = any). Valid values: rdp, nla, tls, any.
    send_preconnection_id str
    Enable/disable sending of preconnection ID. Valid values: enable, disable.
    server_layout str
    Server side keyboard layout.
    show_status_window str
    Enable/disable showing of status window. Valid values: enable, disable.
    sso str
    Single Sign-On. Valid values: disable, static, auto.
    sso_credential str
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    sso_credential_sent_once str
    Single sign-on credentials are only sent once to remote server. Valid values: enable, disable.
    sso_password str
    SSO password.
    sso_username str
    SSO user name.
    url str
    URL parameter.
    vnc_keyboard_layout str
    Keyboard layout. Valid values: default, da, nl, en-uk, en-uk-ext, fi, fr, fr-be, fr-ca-mul, de, de-ch, it, it-142, pt, pt-br-abnt2, no, gd, es, sv, us-intl.
    width int
    Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    additionalParams String
    Additional parameters.
    apptype String
    Application type.
    colorDepth String
    Color depth per pixel. Valid values: 32, 16, 8.
    description String
    Description.
    domain String
    Login domain.
    folder String
    Network shared file folder parameter.
    formDatas List<Property Map>
    Form data. The structure of form_data block is documented below.
    height Number
    Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
    host String
    Host name/IP parameter.
    keyboardLayout String
    Keyboard layout.
    listeningPort Number
    Listening port (0 - 65535).
    loadBalancingInfo String
    The load balancing information or cookie which should be provided to the connection broker.
    logonPassword String
    Logon password.
    logonUser String
    Logon user.
    name String
    Bookmark name.
    port Number
    Remote port.
    preconnectionBlob String
    An arbitrary string which identifies the RDP source.
    preconnectionId Number
    The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
    remotePort Number
    Remote port (0 - 65535).
    restrictedAdmin String
    Enable/disable restricted admin mode for RDP. Valid values: enable, disable.
    security String
    Security mode for RDP connection (default = any). Valid values: rdp, nla, tls, any.
    sendPreconnectionId String
    Enable/disable sending of preconnection ID. Valid values: enable, disable.
    serverLayout String
    Server side keyboard layout.
    showStatusWindow String
    Enable/disable showing of status window. Valid values: enable, disable.
    sso String
    Single Sign-On. Valid values: disable, static, auto.
    ssoCredential String
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    ssoCredentialSentOnce String
    Single sign-on credentials are only sent once to remote server. Valid values: enable, disable.
    ssoPassword String
    SSO password.
    ssoUsername String
    SSO user name.
    url String
    URL parameter.
    vncKeyboardLayout String
    Keyboard layout. Valid values: default, da, nl, en-uk, en-uk-ext, fi, fr, fr-be, fr-ca-mul, de, de-ch, it, it-142, pt, pt-br-abnt2, no, gd, es, sv, us-intl.
    width Number
    Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.

    PortalBookmarkGroupBookmarkFormData, PortalBookmarkGroupBookmarkFormDataArgs

    Name string
    Name.
    Value string
    Value.
    Name string
    Name.
    Value string
    Value.
    name String
    Name.
    value String
    Value.
    name string
    Name.
    value string
    Value.
    name str
    Name.
    value str
    Value.
    name String
    Name.
    value String
    Value.

    PortalHostCheckPolicy, PortalHostCheckPolicyArgs

    Name string
    Host check software list name.
    Name string
    Host check software list name.
    name String
    Host check software list name.
    name string
    Host check software list name.
    name str
    Host check software list name.
    name String
    Host check software list name.

    PortalIpPool, PortalIpPoolArgs

    Name string
    Address name.
    Name string
    Address name.
    name String
    Address name.
    name string
    Address name.
    name str
    Address name.
    name String
    Address name.

    PortalIpv6Pool, PortalIpv6PoolArgs

    Name string
    Portal name.
    Name string
    Portal name.
    name String
    Portal name.
    name string
    Portal name.
    name str
    Portal name.
    name String
    Portal name.

    PortalIpv6SplitTunnelingRoutingAddress, PortalIpv6SplitTunnelingRoutingAddressArgs

    Name string
    Portal name.
    Name string
    Portal name.
    name String
    Portal name.
    name string
    Portal name.
    name str
    Portal name.
    name String
    Portal name.

    PortalLandingPage, PortalLandingPageArgs

    FormDatas List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalLandingPageFormData>
    Form data. The structure of form_data block is documented below.
    LogoutUrl string
    Landing page log out URL.
    Sso string
    Single sign-on. Valid values: disable, static, auto.
    SsoCredential string
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    SsoPassword string
    SSO password.
    SsoUsername string
    SSO user name.
    Url string
    Landing page URL.
    FormDatas []PortalLandingPageFormData
    Form data. The structure of form_data block is documented below.
    LogoutUrl string
    Landing page log out URL.
    Sso string
    Single sign-on. Valid values: disable, static, auto.
    SsoCredential string
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    SsoPassword string
    SSO password.
    SsoUsername string
    SSO user name.
    Url string
    Landing page URL.
    formDatas List<PortalLandingPageFormData>
    Form data. The structure of form_data block is documented below.
    logoutUrl String
    Landing page log out URL.
    sso String
    Single sign-on. Valid values: disable, static, auto.
    ssoCredential String
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    ssoPassword String
    SSO password.
    ssoUsername String
    SSO user name.
    url String
    Landing page URL.
    formDatas PortalLandingPageFormData[]
    Form data. The structure of form_data block is documented below.
    logoutUrl string
    Landing page log out URL.
    sso string
    Single sign-on. Valid values: disable, static, auto.
    ssoCredential string
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    ssoPassword string
    SSO password.
    ssoUsername string
    SSO user name.
    url string
    Landing page URL.
    form_datas Sequence[PortalLandingPageFormData]
    Form data. The structure of form_data block is documented below.
    logout_url str
    Landing page log out URL.
    sso str
    Single sign-on. Valid values: disable, static, auto.
    sso_credential str
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    sso_password str
    SSO password.
    sso_username str
    SSO user name.
    url str
    Landing page URL.
    formDatas List<Property Map>
    Form data. The structure of form_data block is documented below.
    logoutUrl String
    Landing page log out URL.
    sso String
    Single sign-on. Valid values: disable, static, auto.
    ssoCredential String
    Single sign-on credentials. Valid values: sslvpn-login, alternative.
    ssoPassword String
    SSO password.
    ssoUsername String
    SSO user name.
    url String
    Landing page URL.

    PortalLandingPageFormData, PortalLandingPageFormDataArgs

    Name string
    Name.
    Value string
    Value.
    Name string
    Name.
    Value string
    Value.
    name String
    Name.
    value String
    Value.
    name string
    Name.
    value string
    Value.
    name str
    Name.
    value str
    Value.
    name String
    Name.
    value String
    Value.

    PortalMacAddrCheckRule, PortalMacAddrCheckRuleArgs

    MacAddrLists List<Pulumiverse.Fortios.Vpn.Ssl.Web.Inputs.PortalMacAddrCheckRuleMacAddrList>
    Client MAC address list. The structure of mac_addr_list block is documented below.
    MacAddrMask int
    Client MAC address mask.
    Name string
    Client MAC address check rule name.
    MacAddrLists []PortalMacAddrCheckRuleMacAddrList
    Client MAC address list. The structure of mac_addr_list block is documented below.
    MacAddrMask int
    Client MAC address mask.
    Name string
    Client MAC address check rule name.
    macAddrLists List<PortalMacAddrCheckRuleMacAddrList>
    Client MAC address list. The structure of mac_addr_list block is documented below.
    macAddrMask Integer
    Client MAC address mask.
    name String
    Client MAC address check rule name.
    macAddrLists PortalMacAddrCheckRuleMacAddrList[]
    Client MAC address list. The structure of mac_addr_list block is documented below.
    macAddrMask number
    Client MAC address mask.
    name string
    Client MAC address check rule name.
    mac_addr_lists Sequence[PortalMacAddrCheckRuleMacAddrList]
    Client MAC address list. The structure of mac_addr_list block is documented below.
    mac_addr_mask int
    Client MAC address mask.
    name str
    Client MAC address check rule name.
    macAddrLists List<Property Map>
    Client MAC address list. The structure of mac_addr_list block is documented below.
    macAddrMask Number
    Client MAC address mask.
    name String
    Client MAC address check rule name.

    PortalMacAddrCheckRuleMacAddrList, PortalMacAddrCheckRuleMacAddrListArgs

    Addr string
    Client MAC address.
    Addr string
    Client MAC address.
    addr String
    Client MAC address.
    addr string
    Client MAC address.
    addr str
    Client MAC address.
    addr String
    Client MAC address.

    PortalOsCheckList, PortalOsCheckListArgs

    Action string
    OS check options. Valid values: deny, allow, check-up-to-date.
    LatestPatchLevel string
    Latest OS patch level.
    Name string
    Name.
    Tolerance int
    OS patch level tolerance.
    Action string
    OS check options. Valid values: deny, allow, check-up-to-date.
    LatestPatchLevel string
    Latest OS patch level.
    Name string
    Name.
    Tolerance int
    OS patch level tolerance.
    action String
    OS check options. Valid values: deny, allow, check-up-to-date.
    latestPatchLevel String
    Latest OS patch level.
    name String
    Name.
    tolerance Integer
    OS patch level tolerance.
    action string
    OS check options. Valid values: deny, allow, check-up-to-date.
    latestPatchLevel string
    Latest OS patch level.
    name string
    Name.
    tolerance number
    OS patch level tolerance.
    action str
    OS check options. Valid values: deny, allow, check-up-to-date.
    latest_patch_level str
    Latest OS patch level.
    name str
    Name.
    tolerance int
    OS patch level tolerance.
    action String
    OS check options. Valid values: deny, allow, check-up-to-date.
    latestPatchLevel String
    Latest OS patch level.
    name String
    Name.
    tolerance Number
    OS patch level tolerance.

    PortalSplitDn, PortalSplitDnArgs

    DnsServer1 string
    DNS server 1.
    DnsServer2 string
    DNS server 2.
    Domains string
    Split DNS domains used for SSL-VPN clients separated by comma.
    Id int
    ID.
    Ipv6DnsServer1 string
    IPv6 DNS server 1.
    Ipv6DnsServer2 string
    IPv6 DNS server 2.
    DnsServer1 string
    DNS server 1.
    DnsServer2 string
    DNS server 2.
    Domains string
    Split DNS domains used for SSL-VPN clients separated by comma.
    Id int
    ID.
    Ipv6DnsServer1 string
    IPv6 DNS server 1.
    Ipv6DnsServer2 string
    IPv6 DNS server 2.
    dnsServer1 String
    DNS server 1.
    dnsServer2 String
    DNS server 2.
    domains String
    Split DNS domains used for SSL-VPN clients separated by comma.
    id Integer
    ID.
    ipv6DnsServer1 String
    IPv6 DNS server 1.
    ipv6DnsServer2 String
    IPv6 DNS server 2.
    dnsServer1 string
    DNS server 1.
    dnsServer2 string
    DNS server 2.
    domains string
    Split DNS domains used for SSL-VPN clients separated by comma.
    id number
    ID.
    ipv6DnsServer1 string
    IPv6 DNS server 1.
    ipv6DnsServer2 string
    IPv6 DNS server 2.
    dns_server1 str
    DNS server 1.
    dns_server2 str
    DNS server 2.
    domains str
    Split DNS domains used for SSL-VPN clients separated by comma.
    id int
    ID.
    ipv6_dns_server1 str
    IPv6 DNS server 1.
    ipv6_dns_server2 str
    IPv6 DNS server 2.
    dnsServer1 String
    DNS server 1.
    dnsServer2 String
    DNS server 2.
    domains String
    Split DNS domains used for SSL-VPN clients separated by comma.
    id Number
    ID.
    ipv6DnsServer1 String
    IPv6 DNS server 1.
    ipv6DnsServer2 String
    IPv6 DNS server 2.

    PortalSplitTunnelingRoutingAddress, PortalSplitTunnelingRoutingAddressArgs

    Name string
    Address name.
    Name string
    Address name.
    name String
    Address name.
    name string
    Address name.
    name str
    Address name.
    name String
    Address name.

    Import

    VpnSslWeb Portal can be imported using any of these accepted formats:

    $ pulumi import fortios:vpn/ssl/web/portal:Portal labelname {{name}}

    If you do not want to import arguments of block:

    $ export “FORTIOS_IMPORT_TABLE”=“false”

    $ pulumi import fortios:vpn/ssl/web/portal:Portal labelname {{name}}

    $ unset “FORTIOS_IMPORT_TABLE”

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortios pulumiverse/pulumi-fortios
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the fortios Terraform Provider.
    fortios logo
    Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
    pulumiverse/pulumi-fortios