:source: fortios_firewall_profile_protocol_options.py :orphan: .. fortios_firewall_profile_protocol_options: fortios_firewall_profile_protocol_options -- Configure protocol options in Fortinet's FortiOS and FortiGate. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ .. versionadded:: 2.0.0 .. contents:: :local: :depth: 1 Synopsis -------- - This module is able to configure a FortiGate or FortiOS (FOS) device by allowing the user to set and modify firewall feature and profile_protocol_options category. Examples include all parameters and values need to be adjusted to datasources before usage. Tested with FOS v6.0.0 Requirements ------------ The below requirements are needed on the host that executes this module. - ansible>=2.16 Tips ---- Using member operation to add an element to an existing object. FortiOS Version Compatibility ----------------------------- Supported Version Ranges: v6.0.0 -> v7.6.6 Parameters ---------- .. raw:: html Notes ----- .. note:: - Legacy fortiosapi has been deprecated, httpapi is the preferred way to run playbooks - The module supports check_mode. Examples -------- .. code-block:: yaml+jinja - name: Configure protocol options. fortinet.fortios.fortios_firewall_profile_protocol_options: vdom: "{{ vdom }}" state: "present" access_token: "" firewall_profile_protocol_options: cifs: domain_controller: " (source user.domain-controller.name credential-store.domain-controller.server-name)" options: "oversize" oversize_limit: "10" ports: "" scan_bzip2: "enable" server_credential_type: "none" server_keytab: - keytab: "" principal: "" status: "enable" tcp_window_maximum: "8388608" tcp_window_minimum: "131072" tcp_window_size: "262144" tcp_window_type: "auto-tuning" uncompressed_nest_limit: "12" uncompressed_oversize_limit: "10" comment: "Optional comments." dns: ports: "" status: "enable" ftp: comfort_amount: "1" comfort_interval: "10" explicit_ftp_tls: "enable" inspect_all: "enable" options: "clientcomfort" oversize_limit: "10" ports: "" scan_bzip2: "enable" ssl_offloaded: "no" status: "enable" stream_based_uncompressed_limit: "0" tcp_window_maximum: "8388608" tcp_window_minimum: "131072" tcp_window_size: "262144" tcp_window_type: "auto-tuning" uncompressed_nest_limit: "12" uncompressed_oversize_limit: "10" http: address_ip_rating: "enable" block_page_status_code: "403" comfort_amount: "1" comfort_interval: "10" domain_fronting: "allow" fortinet_bar: "enable" fortinet_bar_port: "32767" h2c: "enable" set_http_0dot9: "allow" http_policy: "disable" inspect_all: "enable" options: "clientcomfort" oversize_limit: "10" ports: "" post_lang: "jisx0201" proxy_after_tcp_handshake: "enable" range_block: "disable" retry_count: "0" scan_bzip2: "enable" ssl_offloaded: "no" status: "enable" stream_based_uncompressed_limit: "0" streaming_content_bypass: "enable" strip_x_forwarded_for: "disable" switching_protocols: "bypass" tcp_window_maximum: "8388608" tcp_window_minimum: "131072" tcp_window_size: "262144" tcp_window_type: "auto-tuning" tunnel_non_http: "enable" uncompressed_nest_limit: "12" uncompressed_oversize_limit: "10" unknown_content_encoding: "block" unknown_http_version: "reject" verify_dns_for_policy_matching: "enable" imap: inspect_all: "enable" options: "fragmail" oversize_limit: "10" ports: "" proxy_after_tcp_handshake: "enable" scan_bzip2: "enable" ssl_offloaded: "no" status: "enable" uncompressed_nest_limit: "12" uncompressed_oversize_limit: "10" mail_signature: signature: "" status: "disable" mapi: options: "fragmail" oversize_limit: "10" ports: "" scan_bzip2: "enable" status: "enable" uncompressed_nest_limit: "12" uncompressed_oversize_limit: "10" name: "default_name_100" nntp: inspect_all: "enable" options: "oversize" oversize_limit: "10" ports: "" proxy_after_tcp_handshake: "enable" scan_bzip2: "enable" status: "enable" uncompressed_nest_limit: "12" uncompressed_oversize_limit: "10" oversize_log: "disable" pop3: inspect_all: "enable" options: "fragmail" oversize_limit: "10" ports: "" proxy_after_tcp_handshake: "enable" scan_bzip2: "enable" ssl_offloaded: "no" status: "enable" uncompressed_nest_limit: "12" uncompressed_oversize_limit: "10" replacemsg_group: " (source system.replacemsg-group.name)" rpc_over_http: "enable" smtp: inspect_all: "enable" options: "fragmail" oversize_limit: "10" ports: "" proxy_after_tcp_handshake: "enable" scan_bzip2: "enable" server_busy: "enable" ssl_offloaded: "no" status: "enable" uncompressed_nest_limit: "12" uncompressed_oversize_limit: "10" ssh: comfort_amount: "1" comfort_interval: "10" options: "oversize" oversize_limit: "10" scan_bzip2: "enable" ssl_offloaded: "no" stream_based_uncompressed_limit: "0" tcp_window_maximum: "8388608" tcp_window_minimum: "131072" tcp_window_size: "262144" tcp_window_type: "auto-tuning" uncompressed_nest_limit: "12" uncompressed_oversize_limit: "10" switching_protocols_log: "disable" Return Values ------------- Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module: .. raw:: html
  • build - Build number of the fortigate image returned: always type: str sample: 1547
  • http_method - Last method used to provision the content into FortiGate returned: always type: str sample: PUT
  • http_status - Last result given by FortiGate on last operation applied returned: always type: str sample: 200
  • mkey - Master key (id) used in the last call to FortiGate returned: success type: str sample: id
  • name - Name of the table used to fulfill the request returned: always type: str sample: urlfilter
  • path - Path of the table used to fulfill the request returned: always type: str sample: webfilter
  • revision - Internal revision number returned: always type: str sample: 17.0.2.10658
  • serial - Serial number of the unit returned: always type: str sample: FGVMEVYYQT3AB5352
  • status - Indication of the operation's result returned: always type: str sample: success
  • vdom - Virtual domain used returned: always type: str sample: root
  • version - Version of the FortiGate returned: always type: str sample: v5.6.3
Status ------ - This module is not guaranteed to have a backwards compatible interface. Authors ------- - Link Zheng (@chillancezen) - Jie Xue (@JieX19) - Hongbin Lu (@fgtdev-hblu) - Frank Shen (@frankshen01) - Miguel Angel Munoz (@mamunozgonzalez) - Nicolas Thomas (@thomnico) .. hint:: If you notice any issues in this documentation, you can create a pull request to improve it.