:source: fortios_ztna_web_portal.py
:orphan:
.. fortios_ztna_web_portal:
fortios_ztna_web_portal -- Configure ztna web-portal in Fortinet's FortiOS and FortiGate.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
.. versionadded:: 2.0.0
.. contents::
:local:
:depth: 1
Synopsis
--------
- This module is able to configure a FortiGate or FortiOS (FOS) device by allowing the user to set and modify ztna feature and web_portal category. Examples include all parameters and values need to be adjusted to datasources before usage. Tested with FOS v6.0.0
Requirements
------------
The below requirements are needed on the host that executes this module.
- ansible>=2.16
Tips
----
Using member operation to add an element to an existing object.
FortiOS Version Compatibility
-----------------------------
Supported Version Ranges: v7.6.1 -> v7.6.6
Parameters
----------
.. raw:: html
- access_token - Token-based authentication. Generated from GUI of Fortigate. type: str required: false
- enable_log - Enable/Disable logging for task. type: bool required: false default: False
- vdom - Virtual domain, among those defined previously. A vdom is a virtual instance of the FortiGate that can be configured and used as a different unit. type: str default: root
- member_path - Member attribute path to operate on. type: str
- member_state - Add or delete a member under specified attribute path. type: str choices: present, absent
- state - Indicates whether to create or remove the object. type: str required: true choices: present, absent
- ztna_web_portal - Configure ztna web-portal. type: dict
more...
| Supported Version Ranges |
| ztna_web_portal |
v7.6.1 -> 7.6.6 |
- auth_portal - Enable/disable authentication portal. type: str choices: disable, enable
more...
|
Supported Version Ranges |
| auth_portal |
v7.6.1 -> 7.6.6 |
| [disable] |
v7.6.1 -> 7.6.6 |
| [enable] |
v7.6.1 -> 7.6.6 |
- auth_rule - Authentication Rule. Source authentication.rule.name. type: str
more...
|
Supported Version Ranges |
| auth_rule |
v7.6.1 -> 7.6.6 |
- auth_virtual_host - Virtual host for authentication portal. Source firewall.access-proxy-virtual-host.name. type: str
more...
|
Supported Version Ranges |
| auth_virtual_host |
v7.6.1 -> 7.6.6 |
- clipboard - Enable to support RDP/VPC clipboard functionality. type: str choices: enable, disable
more...
|
Supported Version Ranges |
| clipboard |
v7.6.1 -> 7.6.6 |
| [enable] |
v7.6.1 -> 7.6.6 |
| [disable] |
v7.6.1 -> 7.6.6 |
- cookie_age - Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit. type: int
more...
|
Supported Version Ranges |
| cookie_age |
v7.6.1 -> 7.6.6 |
- customize_forticlient_download_url - Enable support of customized download URL for FortiClient. type: str choices: enable, disable
more...
|
Supported Version Ranges |
| customize_forticlient_download_url |
v7.6.1 -> 7.6.6 |
| [enable] |
v7.6.1 -> 7.6.6 |
| [disable] |
v7.6.1 -> 7.6.6 |
- decrypted_traffic_mirror - Decrypted traffic mirror. Source firewall.decrypted-traffic-mirror.name. type: str
more...
|
Supported Version Ranges |
| decrypted_traffic_mirror |
v7.6.1 -> 7.6.6 |
- default_window_height - Screen height (range from 0 - 65535). type: int
more...
|
Supported Version Ranges |
| default_window_height |
v7.6.1 -> 7.6.6 |
- default_window_width - Screen width (range from 0 - 65535). type: int
more...
|
Supported Version Ranges |
| default_window_width |
v7.6.1 -> 7.6.6 |
- display_bookmark - Enable to display the web portal bookmark widget. type: str choices: enable, disable
more...
|
Supported Version Ranges |
| display_bookmark |
v7.6.1 -> 7.6.6 |
| [enable] |
v7.6.1 -> 7.6.6 |
| [disable] |
v7.6.1 -> 7.6.6 |
- display_history - Enable to display the web portal user login history widget. type: str choices: enable, disable
more...
|
Supported Version Ranges |
| display_history |
v7.6.1 -> 7.6.6 |
| [enable] |
v7.6.1 -> 7.6.6 |
| [disable] |
v7.6.1 -> 7.6.6 |
- display_status - Enable to display the web portal status widget. type: str choices: enable, disable
more...
|
Supported Version Ranges |
| display_status |
v7.6.1 -> 7.6.6 |
| [enable] |
v7.6.1 -> 7.6.6 |
| [disable] |
v7.6.1 -> 7.6.6 |
- focus_bookmark - Enable to prioritize the placement of the bookmark section over the quick-connection section in the ztna web-portal. type: str choices: enable, disable
more...
|
Supported Version Ranges |
| focus_bookmark |
v7.6.1 -> 7.6.6 |
| [enable] |
v7.6.1 -> 7.6.6 |
| [disable] |
v7.6.1 -> 7.6.6 |
- forticlient_download - Enable/disable download option for FortiClient. type: str choices: enable, disable
more...
|
Supported Version Ranges |
| forticlient_download |
v7.6.1 -> 7.6.6 |
| [enable] |
v7.6.1 -> 7.6.6 |
| [disable] |
v7.6.1 -> 7.6.6 |
- forticlient_download_method - FortiClient download method. type: str choices: direct, ssl-vpn
more...
|
Supported Version Ranges |
| forticlient_download_method |
v7.6.1 -> v7.6.3 |
| [direct] |
v7.6.1 -> v7.6.3 |
| [ssl-vpn] |
v7.6.1 -> v7.6.3 |
- heading - Web portal heading message. type: str
more...
|
Supported Version Ranges |
| heading |
v7.6.1 -> 7.6.6 |
- host - Virtual or real host name. Source firewall.access-proxy-virtual-host.name. type: str
more...
|
Supported Version Ranges |
| host |
v7.6.1 -> 7.6.6 |
- log_blocked_traffic - Enable/disable logging of blocked traffic. type: str choices: disable, enable
more...
|
Supported Version Ranges |
| log_blocked_traffic |
v7.6.1 -> 7.6.6 |
| [disable] |
v7.6.1 -> 7.6.6 |
| [enable] |
v7.6.1 -> 7.6.6 |
- macos_forticlient_download_url - Download URL for Mac FortiClient. type: str
more...
|
Supported Version Ranges |
| macos_forticlient_download_url |
v7.6.1 -> 7.6.6 |
- name - ZTNA proxy name. type: str required: true
more...
|
Supported Version Ranges |
| name |
v7.6.1 -> 7.6.6 |
- policy_auth_sso - Enable policy sso authentication. type: str choices: enable, disable
more...
|
Supported Version Ranges |
| policy_auth_sso |
v7.6.1 -> 7.6.6 |
| [enable] |
v7.6.1 -> 7.6.6 |
| [disable] |
v7.6.1 -> 7.6.6 |
- theme - Web portal color scheme. type: str choices: jade, neutrino, mariner, graphite, melongene, jet-stream, security-fabric, dark-matter, onyx, eclipse
more...
|
Supported Version Ranges |
| theme |
v7.6.1 -> 7.6.6 |
| [jade] |
v7.6.1 -> 7.6.6 |
| [neutrino] |
v7.6.1 -> 7.6.6 |
| [mariner] |
v7.6.1 -> 7.6.6 |
| [graphite] |
v7.6.1 -> 7.6.6 |
| [melongene] |
v7.6.1 -> 7.6.6 |
| [jet-stream] |
v7.6.1 -> 7.6.6 |
| [security-fabric] |
v7.6.1 -> 7.6.6 |
| [dark-matter] |
v7.6.1 -> 7.6.6 |
| [onyx] |
v7.6.1 -> 7.6.6 |
| [eclipse] |
v7.6.1 -> 7.6.6 |
- vip - Virtual IP name. Source firewall.vip.name. type: str
more...
|
Supported Version Ranges |
| vip |
v7.6.1 -> 7.6.6 |
- vip6 - Virtual IPv6 name. Source firewall.vip6.name. type: str
more...
|
Supported Version Ranges |
| vip6 |
v7.6.1 -> 7.6.6 |
- windows_forticlient_download_url - Download URL for Windows FortiClient. type: str
more...
|
Supported Version Ranges |
| windows_forticlient_download_url |
v7.6.1 -> 7.6.6 |
Notes
-----
.. note::
- Legacy fortiosapi has been deprecated, httpapi is the preferred way to run playbooks
Examples
--------
.. code-block:: yaml+jinja
- name: Configure ztna web-portal.
fortinet.fortios.fortios_ztna_web_portal:
vdom: "{{ vdom }}"
state: "present"
access_token: ""
ztna_web_portal:
auth_portal: "disable"
auth_rule: " (source authentication.rule.name)"
auth_virtual_host: "myhostname (source firewall.access-proxy-virtual-host.name)"
clipboard: "enable"
cookie_age: "60"
customize_forticlient_download_url: "enable"
decrypted_traffic_mirror: " (source firewall.decrypted-traffic-mirror.name)"
default_window_height: "768"
default_window_width: "1024"
display_bookmark: "enable"
display_history: "enable"
display_status: "enable"
focus_bookmark: "enable"
forticlient_download: "enable"
forticlient_download_method: "direct"
heading: ""
host: "myhostname (source firewall.access-proxy-virtual-host.name)"
log_blocked_traffic: "disable"
macos_forticlient_download_url: ""
name: "default_name_22"
policy_auth_sso: "enable"
theme: "jade"
vip: " (source firewall.vip.name)"
vip6: " (source firewall.vip6.name)"
windows_forticlient_download_url: ""
Return Values
-------------
Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module:
.. raw:: html
- build - Build number of the fortigate image returned: always type: str sample: 1547
- http_method - Last method used to provision the content into FortiGate returned: always type: str sample: PUT
- http_status - Last result given by FortiGate on last operation applied returned: always type: str sample: 200
- mkey - Master key (id) used in the last call to FortiGate returned: success type: str sample: id
- name - Name of the table used to fulfill the request returned: always type: str sample: urlfilter
- path - Path of the table used to fulfill the request returned: always type: str sample: webfilter
- revision - Internal revision number returned: always type: str sample: 17.0.2.10658
- serial - Serial number of the unit returned: always type: str sample: FGVMEVYYQT3AB5352
- status - Indication of the operation's result returned: always type: str sample: success
- vdom - Virtual domain used returned: always type: str sample: root
- version - Version of the FortiGate returned: always type: str sample: v5.6.3
Status
------
- This module is not guaranteed to have a backwards compatible interface.
Authors
-------
- Link Zheng (@chillancezen)
- Jie Xue (@JieX19)
- Hongbin Lu (@fgtdev-hblu)
- Frank Shen (@frankshen01)
- Miguel Angel Munoz (@mamunozgonzalez)
- Nicolas Thomas (@thomnico)
.. hint::
If you notice any issues in this documentation, you can create a pull request to improve it.