:source: fortios_wireless_controller_wids_profile.py :orphan: .. fortios_wireless_controller_wids_profile: fortios_wireless_controller_wids_profile -- Configure wireless intrusion detection system (WIDS) profiles in Fortinet's FortiOS and FortiGate. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ .. versionadded:: 2.0.0 .. contents:: :local: :depth: 1 Synopsis -------- - This module is able to configure a FortiGate or FortiOS (FOS) device by allowing the user to set and modify wireless_controller feature and wids_profile category. Examples include all parameters and values need to be adjusted to datasources before usage. Tested with FOS v6.0.0 Requirements ------------ The below requirements are needed on the host that executes this module. - ansible>=2.16 Tips ---- Using member operation to add an element to an existing object. FortiOS Version Compatibility ----------------------------- Supported Version Ranges: v6.0.0 -> v7.6.6 Parameters ---------- .. raw:: html Notes ----- .. note:: - Legacy fortiosapi has been deprecated, httpapi is the preferred way to run playbooks - The module supports check_mode. Examples -------- .. code-block:: yaml+jinja - name: Configure wireless intrusion detection system (WIDS) profiles. fortinet.fortios.fortios_wireless_controller_wids_profile: vdom: "{{ vdom }}" state: "present" access_token: "" wireless_controller_wids_profile: adhoc_network: "enable" adhoc_valid_ssid: "enable" air_jack: "enable" ap_auto_suppress: "enable" ap_bgscan_disable_day: "sunday" ap_bgscan_disable_end: "" ap_bgscan_disable_schedules: - name: "default_name_10 (source firewall.schedule.group.name firewall.schedule.recurring.name firewall.schedule.onetime.name)" ap_bgscan_disable_start: "" ap_bgscan_duration: "30" ap_bgscan_idle: "20" ap_bgscan_intv: "3" ap_bgscan_period: "600" ap_bgscan_report_intv: "30" ap_fgscan_report_intv: "15" ap_impersonation: "enable" ap_scan: "disable" ap_scan_channel_list_2G_5G: - chan: "" ap_scan_channel_list_6G: - chan: "" ap_scan_passive: "enable" ap_scan_threshold: "" ap_spoofing: "enable" asleap_attack: "enable" assoc_flood_thresh: "30" assoc_flood_time: "10" assoc_frame_flood: "enable" auth_flood_thresh: "30" auth_flood_time: "10" auth_frame_flood: "enable" bcn_flood: "enable" bcn_flood_thresh: "15" bcn_flood_time: "1" beacon_wrong_channel: "enable" block_ack_flood: "enable" block_ack_flood_thresh: "50" block_ack_flood_time: "1" chan_based_mitm: "enable" client_flood: "enable" client_flood_thresh: "30" client_flood_time: "10" comment: "Comment." cts_flood: "enable" cts_flood_thresh: "30" cts_flood_time: "10" deauth_broadcast: "enable" deauth_unknown_src_thresh: "10" disassoc_broadcast: "enable" disconnect_station: "enable" eapol_fail_flood: "enable" eapol_fail_intv: "1" eapol_fail_thresh: "10" eapol_key_overflow: "enable" eapol_logoff_flood: "enable" eapol_logoff_intv: "1" eapol_logoff_thresh: "10" eapol_pre_fail_flood: "enable" eapol_pre_fail_intv: "1" eapol_pre_fail_thresh: "10" eapol_pre_succ_flood: "enable" eapol_pre_succ_intv: "1" eapol_pre_succ_thresh: "10" eapol_start_flood: "enable" eapol_start_intv: "1" eapol_start_thresh: "10" eapol_succ_flood: "enable" eapol_succ_intv: "1" eapol_succ_thresh: "10" fata_jack: "enable" fuzzed_beacon: "enable" fuzzed_probe_request: "enable" fuzzed_probe_response: "enable" hotspotter_attack: "enable" ht_40mhz_intolerance: "enable" ht_greenfield: "enable" invalid_addr_combination: "enable" invalid_mac_oui: "enable" long_duration_attack: "enable" long_duration_thresh: "8200" malformed_association: "enable" malformed_auth: "enable" malformed_ht_ie: "enable" name: "default_name_86" netstumbler: "enable" netstumbler_thresh: "5" netstumbler_time: "30" null_ssid_probe_resp: "enable" omerta_attack: "enable" overflow_ie: "enable" probe_flood: "enable" probe_flood_thresh: "30" probe_flood_time: "1" pspoll_flood: "enable" pspoll_flood_thresh: "30" pspoll_flood_time: "1" pwsave_dos_attack: "enable" reassoc_flood: "enable" reassoc_flood_thresh: "30" reassoc_flood_time: "10" risky_encryption: "enable" rts_flood: "enable" rts_flood_thresh: "30" rts_flood_time: "10" sensor_mode: "disable" spoofed_deauth: "enable" unencrypted_valid: "enable" valid_client_misassociation: "enable" valid_ssid_misuse: "enable" weak_wep_iv: "enable" wellenreiter: "enable" wellenreiter_thresh: "5" wellenreiter_time: "30" windows_bridge: "enable" wireless_bridge: "enable" wpa_ft_attack: "enable" Return Values ------------- Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module: .. raw:: html
  • build - Build number of the fortigate image returned: always type: str sample: 1547
  • http_method - Last method used to provision the content into FortiGate returned: always type: str sample: PUT
  • http_status - Last result given by FortiGate on last operation applied returned: always type: str sample: 200
  • mkey - Master key (id) used in the last call to FortiGate returned: success type: str sample: id
  • name - Name of the table used to fulfill the request returned: always type: str sample: urlfilter
  • path - Path of the table used to fulfill the request returned: always type: str sample: webfilter
  • revision - Internal revision number returned: always type: str sample: 17.0.2.10658
  • serial - Serial number of the unit returned: always type: str sample: FGVMEVYYQT3AB5352
  • status - Indication of the operation's result returned: always type: str sample: success
  • vdom - Virtual domain used returned: always type: str sample: root
  • version - Version of the FortiGate returned: always type: str sample: v5.6.3
Status ------ - This module is not guaranteed to have a backwards compatible interface. Authors ------- - Link Zheng (@chillancezen) - Jie Xue (@JieX19) - Hongbin Lu (@fgtdev-hblu) - Frank Shen (@frankshen01) - Miguel Angel Munoz (@mamunozgonzalez) - Nicolas Thomas (@thomnico) .. hint:: If you notice any issues in this documentation, you can create a pull request to improve it.