fortios_system_sdwan – Configure redundant Internet connections with multiple outbound links and health-check profiles in Fortinet’s FortiOS and FortiGate.¶
New in version 2.0.0.
Synopsis¶
- This module is able to configure a FortiGate or FortiOS (FOS) device by allowing the user to set and modify system feature and sdwan category. Examples include all parameters and values need to be adjusted to datasources before usage. Tested with FOS v6.0.0
FortiOS Version Compatibility¶
v6.4.0 |
v6.4.1 |
v6.4.4 |
v7.0.0 |
v7.0.1 |
v7.0.2 |
v7.0.3 |
v7.0.4 |
v7.0.5 |
v7.0.6 |
v7.0.7 |
v7.0.8 |
v7.2.0 |
v7.2.1 |
v7.2.2 |
|
| fortios_system_sdwan | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes |
Parameters¶
- access_token - Token-based authentication. Generated from GUI of Fortigate. type: str required: false
- enable_log - Enable/Disable logging for task. type: bool required: false default: False
- vdom - Virtual domain, among those defined previously. A vdom is a virtual instance of the FortiGate that can be configured and used as a different unit. type: str default: root
- member_path - Member attribute path to operate on. type: str
- member_state - Add or delete a member under specified attribute path. type: str choices: present, absent
- system_sdwan - Configure redundant Internet connections with multiple outbound links and health-check profiles. type: dict more...
- duplication - Create SD-WAN duplication rule. type: list more...
- dstaddr - Destination address or address group names. type: list more...
- name - Address or address group name. Source firewall.address.name firewall.addrgrp.name. type: str more...
- dstaddr6 - Destination address6 or address6 group names. type: list more...
- name - Address6 or address6 group name. Source firewall.address6.name firewall.addrgrp6.name. type: str more...
- dstintf - Outgoing (egress) interfaces or zones. type: list more...
- name - Interface, zone or SDWAN zone name. Source system.interface.name system.zone.name system.sdwan.zone.name. type: str more...
- id - Duplication rule ID (1 - 255). type: int more...
- packet_de_duplication - Enable/disable discarding of packets that have been duplicated. type: str choices: enable, disable more...
- packet_duplication - Configure packet duplication method. type: str choices: disable, force, on-demand more...
- service - Service and service group name. type: list more...
- name - Service and service group name. Source firewall.service.custom.name firewall.service.group.name. type: str more...
- service_id - SD-WAN service rule ID list. type: list more...
- id - SD-WAN service rule ID. Source system.sdwan.service.id. type: int more...
- sla_match_service - Enable/disable packet duplication matching health-check SLAs in service rule. type: str choices: enable, disable more...
- srcaddr - Source address or address group names. type: list more...
- name - Address or address group name. Source firewall.address.name firewall.addrgrp.name. type: str more...
- srcaddr6 - Source address6 or address6 group names. type: list more...
- name - Address6 or address6 group name. Source firewall.address6.name firewall.addrgrp6.name. type: str more...
- srcintf - Incoming (ingress) interfaces or zones. type: list more...
- name - Interface, zone or SDWAN zone name. Source system.interface.name system.zone.name system.sdwan.zone.name. type: str more...
- duplication_max_num - Maximum number of interface members a packet is duplicated in the SD-WAN zone (2 - 4). type: int more...
- fail_alert_interfaces - Physical interfaces that will be alerted. type: list more...
- name - Physical interface name. Source system.interface.name. type: str more...
- fail_detect - Enable/disable SD-WAN Internet connection status checking (failure detection). type: str choices: enable, disable more...
- health_check - SD-WAN status checking or health checking. Identify a server on the Internet and determine how SD-WAN verifies that the FortiGate can communicate with it. type: list more...
- addr_mode - Address mode (IPv4 or IPv6). type: str choices: ipv4, ipv6 more...
- detect_mode - The mode determining how to detect the server. type: str choices: active, passive, prefer-passive, remote more...
- diffservcode - Differentiated services code point (DSCP) in the IP header of the probe packet. type: str more...
- dns_match_ip - Response IP expected from DNS server if the protocol is DNS. type: str more...
- dns_request_domain - Fully qualified domain name to resolve for the DNS probe. type: str more...
- embed_measured_health - Enable/disable embedding measured health information. type: str choices: enable, disable more...
- failtime - Number of failures before server is considered lost (1 - 3600). type: int more...
- ftp_file - Full path and file name on the FTP server to download for FTP health-check to probe. type: str more...
- ftp_mode - FTP mode. type: str choices: passive, port more...
- ha_priority - HA election priority (1 - 50). type: int more...
- http_agent - String in the http-agent field in the HTTP header. type: str more...
- http_get - URL used to communicate with the server if the protocol if the protocol is HTTP. type: str more...
- http_match - Response string expected from the server if the protocol is HTTP. type: str more...
- interval - Status check interval in milliseconds, or the time between attempting to connect to the server (500 - 3600*1000 msec). type: int more...
- members - Member sequence number list. type: list more...
- seq_num - Member sequence number. Source system.sdwan.members.seq-num. type: int more...
- mos_codec - Codec to use for MOS calculation . type: str choices: g711, g722, g729 more...
- name - Status check or health check name. type: str more...
- packet_size - Packet size of a TWAMP test session. type: int more...
- password - TWAMP controller password in authentication mode. type: str more...
- port - Port number used to communicate with the server over the selected protocol (0 - 65535). type: int more...
- probe_count - Number of most recent probes that should be used to calculate latency and jitter (5 - 30). type: int more...
- probe_packets - Enable/disable transmission of probe packets. type: str choices: disable, enable more...
- probe_timeout - Time to wait before a probe packet is considered lost (500 - 3600*1000 msec). type: int more...
- protocol - Protocol used to determine if the FortiGate can communicate with the server. type: str choices: ping, tcp-echo, udp-echo, http, twamp, dns, tcp-connect, ftp, ping6 more...
- quality_measured_method - Method to measure the quality of tcp-connect. type: str choices: half-open, half-close more...
- recoverytime - Number of successful responses received before server is considered recovered (1 - 3600). type: int more...
- security_mode - Twamp controller security mode. type: str choices: none, authentication more...
- server - IP address or FQDN name of the server. type: list
- sla - Service level agreement (SLA). type: list more...
- id - SLA ID. type: int more...
- jitter_threshold - Jitter for SLA to make decision in milliseconds. (0 - 10000000). type: int more...
- latency_threshold - Latency for SLA to make decision in milliseconds. (0 - 10000000). type: int more...
- link_cost_factor - Criteria on which to base link selection. type: list choices: latency, jitter, packet-loss, mos more...
- mos_threshold - Minimum Mean Opinion Score for SLA to be marked as pass. (1.0 - 5.0). type: str more...
- packetloss_threshold - Packet loss for SLA to make decision in percentage. (0 - 100). type: int more...
- priority_in_sla - Value to be distributed into routing table when in-sla (0 - 65535). type: int more...
- priority_out_sla - Value to be distributed into routing table when out-sla (0 - 65535). type: int more...
- sla_fail_log_period - Time interval in seconds that SLA fail log messages will be generated (0 - 3600). type: int more...
- sla_id_redistribute - Select the ID from the SLA sub-table. The selected SLA"s priority value will be distributed into the routing table (0 - 32). type: int more...
- sla_pass_log_period - Time interval in seconds that SLA pass log messages will be generated (0 - 3600). type: int more...
- source - Source IP address used in the health-check packet to the server. type: str more...
- system_dns - Enable/disable system DNS as the probe server. type: str choices: disable, enable more...
- threshold_alert_jitter - Alert threshold for jitter (ms). type: int more...
- threshold_alert_latency - Alert threshold for latency (ms). type: int more...
- threshold_alert_packetloss - Alert threshold for packet loss (percentage). type: int more...
- threshold_warning_jitter - Warning threshold for jitter (ms). type: int more...
- threshold_warning_latency - Warning threshold for latency (ms). type: int more...
- threshold_warning_packetloss - Warning threshold for packet loss (percentage). type: int more...
- update_cascade_interface - Enable/disable update cascade interface. type: str choices: enable, disable more...
- update_static_route - Enable/disable updating the static route. type: str choices: enable, disable more...
- user - The user name to access probe server. type: str more...
- vrf - Virtual Routing Forwarding ID. type: int more...
- load_balance_mode - Algorithm or mode to use for load balancing Internet traffic to SD-WAN members. type: str choices: source-ip-based, weight-based, usage-based, source-dest-ip-based, measured-volume-based more...
- members - FortiGate interfaces added to the SD-WAN. type: list more...
- comment - Comments. type: str more...
- cost - Cost of this interface for services in SLA mode (0 - 4294967295). type: int more...
- gateway - The default gateway for this interface. Usually the default gateway of the Internet service provider that this interface is connected to. type: str more...
- gateway6 - IPv6 gateway. type: str more...
- ingress_spillover_threshold - Ingress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN. type: int more...
- interface - Interface name. Source system.interface.name. type: str more...
- priority - Priority of the interface for IPv4 (1 - 65535). Used for SD-WAN rules or priority rules. type: int more...
- priority6 - Priority of the interface for IPv6 (1 - 65535). Used for SD-WAN rules or priority rules. type: int more...
- seq_num - Sequence number(1-512). type: int more...
- source - Source IP address used in the health-check packet to the server. type: str more...
- source6 - Source IPv6 address used in the health-check packet to the server. type: str more...
- spillover_threshold - Egress spillover threshold for this interface (0 - 16776000 kbit/s). When this traffic volume threshold is reached, new sessions spill over to other interfaces in the SD-WAN. type: int more...
- status - Enable/disable this interface in the SD-WAN. type: str choices: disable, enable more...
- volume_ratio - Measured volume ratio (this value / sum of all values = percentage of link volume, 1 - 255). type: int more...
- weight - Weight of this interface for weighted load balancing. (1 - 255) More traffic is directed to interfaces with higher weights. type: int more...
- zone - Zone name. Source system.sdwan.zone.name. type: str more...
- neighbor - Create SD-WAN neighbor from BGP neighbor table to control route advertisements according to SLA status. type: list more...
- health_check - SD-WAN health-check name. Source system.sdwan.health-check.name. type: str more...
- ip - IP/IPv6 address of neighbor. Source router.bgp.neighbor.ip. type: str more...
- member - Member sequence number list. Source system.sdwan.members.seq-num. type: list more...
- seq_num - Member sequence number. Source system.sdwan.members.seq-num. type: int more...
- minimum_sla_meet_members - Minimum number of members which meet SLA when the neighbor is preferred. type: int more...
- mode - What metric to select the neighbor. type: str choices: sla, speedtest more...
- role - Role of neighbor. type: str choices: standalone, primary, secondary more...
- sla_id - SLA ID. type: int more...
- neighbor_hold_boot_time - Waiting period in seconds when switching from the primary neighbor to the secondary neighbor from the neighbor start. (0 - 10000000). type: int more...
- neighbor_hold_down - Enable/disable hold switching from the secondary neighbor to the primary neighbor. type: str choices: enable, disable more...
- neighbor_hold_down_time - Waiting period in seconds when switching from the secondary neighbor to the primary neighbor when hold-down is disabled. (0 - 10000000). type: int more...
- service - Create SD-WAN rules (also called services) to control how sessions are distributed to interfaces in the SD-WAN. type: list more...
- addr_mode - Address mode (IPv4 or IPv6). type: str choices: ipv4, ipv6 more...
- bandwidth_weight - Coefficient of reciprocal of available bidirectional bandwidth in the formula of custom-profile-1. type: int more...
- default - Enable/disable use of SD-WAN as default service. type: str choices: enable, disable more...
- dscp_forward - Enable/disable forward traffic DSCP tag. type: str choices: enable, disable more...
- dscp_forward_tag - Forward traffic DSCP tag. type: str more...
- dscp_reverse - Enable/disable reverse traffic DSCP tag. type: str choices: enable, disable more...
- dscp_reverse_tag - Reverse traffic DSCP tag. type: str more...
- dst - Destination address name. type: list more...
- name - Address or address group name. Source firewall.address.name firewall.addrgrp.name. type: str more...
- dst_negate - Enable/disable negation of destination address match. type: str choices: enable, disable more...
- dst6 - Destination address6 name. type: list more...
- name - Address6 or address6 group name. Source firewall.address6.name firewall.addrgrp6.name. type: str more...
- end_port - End destination port number. type: int more...
- gateway - Enable/disable SD-WAN service gateway. type: str choices: enable, disable more...
- groups - User groups. type: list more...
- name - Group name. Source user.group.name. type: str more...
- hash_mode - Hash algorithm for selected priority members for load balance mode. type: str choices: round-robin, source-ip-based, source-dest-ip-based, inbandwidth, outbandwidth, bibandwidth more...
- health_check - Health check list. type: list more...
- name - Health check name. Source system.sdwan.health-check.name. type: str more...
- hold_down_time - Waiting period in seconds when switching from the back-up member to the primary member (0 - 10000000). type: int more...
- id - SD-WAN rule ID (1 - 4000). type: int more...
- input_device - Source interface name. type: list more...
- name - Interface name. Source system.interface.name. type: str more...
- input_device_negate - Enable/disable negation of input device match. type: str choices: enable, disable more...
- input_zone - Source input-zone name. type: list more...
- name - Zone. Source system.sdwan.zone.name. type: str more...
- internet_service - Enable/disable use of Internet service for application-based load balancing. type: str choices: enable, disable more...
- internet_service_app_ctrl - Application control based Internet Service ID list. type: list more...
- id - Application control based Internet Service ID. type: int more...
- internet_service_app_ctrl_category - IDs of one or more application control categories. type: list more...
- id - Application control category ID. type: int more...
- internet_service_app_ctrl_group - Application control based Internet Service group list. type: list more...
- name - Application control based Internet Service group name. Source application.group.name. type: str more...
- internet_service_custom - Custom Internet service name list. type: list more...
- name - Custom Internet service name. Source firewall.internet-service-custom.name. type: str more...
- internet_service_custom_group - Custom Internet Service group list. type: list more...
- name - Custom Internet Service group name. Source firewall.internet-service-custom-group.name. type: str more...
- internet_service_group - Internet Service group list. type: list more...
- name - Internet Service group name. Source firewall.internet-service-group.name. type: str more...
- internet_service_name - Internet service name list. type: list more...
- name - Internet service name. Source firewall.internet-service-name.name. type: str more...
- jitter_weight - Coefficient of jitter in the formula of custom-profile-1. type: int more...
- latency_weight - Coefficient of latency in the formula of custom-profile-1. type: int more...
- link_cost_factor - Link cost factor. type: str choices: latency, jitter, packet-loss, inbandwidth, outbandwidth, bibandwidth, custom-profile-1 more...
- link_cost_threshold - Percentage threshold change of link cost values that will result in policy route regeneration (0 - 10000000). type: int more...
- minimum_sla_meet_members - Minimum number of members which meet SLA. type: int more...
- mode - Control how the SD-WAN rule sets the priority of interfaces in the SD-WAN. type: str choices: auto, manual, priority, sla, load-balance more...
- name - SD-WAN rule name. type: str more...
- packet_loss_weight - Coefficient of packet-loss in the formula of custom-profile-1. type: int more...
- passive_measurement - Enable/disable passive measurement based on the service criteria. type: str choices: enable, disable more...
- priority_members - Member sequence number list. type: list more...
- seq_num - Member sequence number. Source system.sdwan.members.seq-num. type: int more...
- priority_zone - Priority zone name list. type: list more...
- name - Priority zone name. Source system.sdwan.zone.name. type: str more...
- protocol - Protocol number. type: int more...
- quality_link - Quality grade. type: int more...
- role - Service role to work with neighbor. type: str choices: standalone, primary, secondary more...
- route_tag - IPv4 route map route-tag. type: int more...
- sla - Service level agreement (SLA). type: list more...
- health_check - SD-WAN health-check. Source system.sdwan.health-check.name. type: str more...
- id - SLA ID. type: int more...
- sla_compare_method - Method to compare SLA value for SLA mode. type: str choices: order, number more...
- src - Source address name. type: list more...
- name - Address or address group name. Source firewall.address.name firewall.addrgrp.name. type: str more...
- src_negate - Enable/disable negation of source address match. type: str choices: enable, disable more...
- src6 - Source address6 name. type: list more...
- name - Address6 or address6 group name. Source firewall.address6.name firewall.addrgrp6.name. type: str more...
- standalone_action - Enable/disable service when selected neighbor role is standalone while service role is not standalone. type: str choices: enable, disable more...
- start_port - Start destination port number. type: int more...
- status - Enable/disable SD-WAN service. type: str choices: enable, disable more...
- tie_break - Method of selecting member if more than one meets the SLA. type: str choices: zone, cfg-order, fib-best-match, input-device more...
- tos - Type of service bit pattern. type: str more...
- tos_mask - Type of service evaluated bits. type: str more...
- use_shortcut_sla - Enable/disable use of ADVPN shortcut for quality comparison. type: str choices: enable, disable more...
- users - User name. type: list more...
- name - User name. Source user.local.name. type: str more...
- speedtest_bypass_routing - Enable/disable bypass routing when speedtest on a SD-WAN member. type: str choices: disable, enable more...
- status - Enable/disable SD-WAN. type: str choices: disable, enable more...
- zone - Configure SD-WAN zones. type: list more...
Examples¶
- hosts: fortigates
collections:
- fortinet.fortios
connection: httpapi
vars:
vdom: "root"
ansible_httpapi_use_ssl: yes
ansible_httpapi_validate_certs: no
ansible_httpapi_port: 443
tasks:
- name: Configure redundant Internet connections with multiple outbound links and health-check profiles.
fortios_system_sdwan:
vdom: "{{ vdom }}"
system_sdwan:
duplication:
-
dstaddr:
-
name: "default_name_5 (source firewall.address.name firewall.addrgrp.name)"
dstaddr6:
-
name: "default_name_7 (source firewall.address6.name firewall.addrgrp6.name)"
dstintf:
-
name: "default_name_9 (source system.interface.name system.zone.name system.sdwan.zone.name)"
id: "10"
packet_de_duplication: "enable"
packet_duplication: "disable"
service:
-
name: "default_name_14 (source firewall.service.custom.name firewall.service.group.name)"
service_id:
-
id: "16 (source system.sdwan.service.id)"
sla_match_service: "enable"
srcaddr:
-
name: "default_name_19 (source firewall.address.name firewall.addrgrp.name)"
srcaddr6:
-
name: "default_name_21 (source firewall.address6.name firewall.addrgrp6.name)"
srcintf:
-
name: "default_name_23 (source system.interface.name system.zone.name system.sdwan.zone.name)"
duplication_max_num: "2"
fail_alert_interfaces:
-
name: "default_name_26 (source system.interface.name)"
fail_detect: "enable"
health_check:
-
addr_mode: "ipv4"
detect_mode: "active"
diffservcode: "<your_own_value>"
dns_match_ip: "<your_own_value>"
dns_request_domain: "<your_own_value>"
embed_measured_health: "enable"
failtime: "5"
ftp_file: "<your_own_value>"
ftp_mode: "passive"
ha_priority: "1"
http_agent: "<your_own_value>"
http_get: "<your_own_value>"
http_match: "<your_own_value>"
interval: "500"
members:
-
seq_num: "0"
mos_codec: "g711"
name: "default_name_46"
packet_size: "64"
password: "<your_own_value>"
port: "0"
probe_count: "30"
probe_packets: "disable"
probe_timeout: "500"
protocol: "ping"
quality_measured_method: "half-open"
recoverytime: "5"
security_mode: "none"
server: "192.168.100.40"
sla:
-
id: "59"
jitter_threshold: "5"
latency_threshold: "5"
link_cost_factor: "latency"
mos_threshold: "<your_own_value>"
packetloss_threshold: "0"
priority_in_sla: "0"
priority_out_sla: "0"
sla_fail_log_period: "0"
sla_id_redistribute: "0"
sla_pass_log_period: "0"
source: "<your_own_value>"
system_dns: "disable"
threshold_alert_jitter: "0"
threshold_alert_latency: "0"
threshold_alert_packetloss: "0"
threshold_warning_jitter: "0"
threshold_warning_latency: "0"
threshold_warning_packetloss: "0"
update_cascade_interface: "enable"
update_static_route: "enable"
user: "<your_own_value>"
vrf: "0"
load_balance_mode: "source-ip-based"
members:
-
comment: "Comments."
cost: "0"
gateway: "<your_own_value>"
gateway6: "<your_own_value>"
ingress_spillover_threshold: "0"
interface: "<your_own_value> (source system.interface.name)"
priority: "1"
priority6: "1024"
seq_num: "0"
source: "<your_own_value>"
source6: "<your_own_value>"
spillover_threshold: "0"
status: "disable"
volume_ratio: "1"
weight: "1"
zone: "<your_own_value> (source system.sdwan.zone.name)"
neighbor:
-
health_check: "<your_own_value> (source system.sdwan.health-check.name)"
ip: "<your_own_value> (source router.bgp.neighbor.ip)"
member:
-
seq_num: "0"
minimum_sla_meet_members: "1"
mode: "sla"
role: "standalone"
sla_id: "0"
neighbor_hold_boot_time: "0"
neighbor_hold_down: "enable"
neighbor_hold_down_time: "0"
service:
-
addr_mode: "ipv4"
bandwidth_weight: "0"
default: "enable"
dscp_forward: "enable"
dscp_forward_tag: "<your_own_value>"
dscp_reverse: "enable"
dscp_reverse_tag: "<your_own_value>"
dst:
-
name: "default_name_121 (source firewall.address.name firewall.addrgrp.name)"
dst_negate: "enable"
dst6:
-
name: "default_name_124 (source firewall.address6.name firewall.addrgrp6.name)"
end_port: "65535"
gateway: "enable"
groups:
-
name: "default_name_128 (source user.group.name)"
hash_mode: "round-robin"
health_check:
-
name: "default_name_131 (source system.sdwan.health-check.name)"
hold_down_time: "0"
id: "133"
input_device:
-
name: "default_name_135 (source system.interface.name)"
input_device_negate: "enable"
input_zone:
-
name: "default_name_138 (source system.sdwan.zone.name)"
internet_service: "enable"
internet_service_app_ctrl:
-
id: "141"
internet_service_app_ctrl_category:
-
id: "143"
internet_service_app_ctrl_group:
-
name: "default_name_145 (source application.group.name)"
internet_service_custom:
-
name: "default_name_147 (source firewall.internet-service-custom.name)"
internet_service_custom_group:
-
name: "default_name_149 (source firewall.internet-service-custom-group.name)"
internet_service_group:
-
name: "default_name_151 (source firewall.internet-service-group.name)"
internet_service_name:
-
name: "default_name_153 (source firewall.internet-service-name.name)"
jitter_weight: "0"
latency_weight: "0"
link_cost_factor: "latency"
link_cost_threshold: "10"
minimum_sla_meet_members: "0"
mode: "auto"
name: "default_name_160"
packet_loss_weight: "0"
passive_measurement: "enable"
priority_members:
-
seq_num: "0"
priority_zone:
-
name: "default_name_166 (source system.sdwan.zone.name)"
protocol: "0"
quality_link: "0"
role: "standalone"
route_tag: "0"
sla:
-
health_check: "<your_own_value> (source system.sdwan.health-check.name)"
id: "173"
sla_compare_method: "order"
src:
-
name: "default_name_176 (source firewall.address.name firewall.addrgrp.name)"
src_negate: "enable"
src6:
-
name: "default_name_179 (source firewall.address6.name firewall.addrgrp6.name)"
standalone_action: "enable"
start_port: "1"
status: "enable"
tie_break: "zone"
tos: "<your_own_value>"
tos_mask: "<your_own_value>"
use_shortcut_sla: "enable"
users:
-
name: "default_name_188 (source user.local.name)"
speedtest_bypass_routing: "disable"
status: "disable"
zone:
-
name: "default_name_192"
service_sla_tie_break: "cfg-order"
Return Values¶
Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module:
- build - Build number of the fortigate image returned: always type: str sample: 1547
- http_method - Last method used to provision the content into FortiGate returned: always type: str sample: PUT
- http_status - Last result given by FortiGate on last operation applied returned: always type: str sample: 200
- mkey - Master key (id) used in the last call to FortiGate returned: success type: str sample: id
- name - Name of the table used to fulfill the request returned: always type: str sample: urlfilter
- path - Path of the table used to fulfill the request returned: always type: str sample: webfilter
- revision - Internal revision number returned: always type: str sample: 17.0.2.10658
- serial - Serial number of the unit returned: always type: str sample: FGVMEVYYQT3AB5352
- status - Indication of the operation's result returned: always type: str sample: success
- vdom - Virtual domain used returned: always type: str sample: root
- version - Version of the FortiGate returned: always type: str sample: v5.6.3