Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. PackagesFirewallSecuritypolicy
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.PackagesFirewallSecuritypolicy

Explore with Pulumi AI

fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

Configure NGFW IPv4/IPv6 application policies.

Create PackagesFirewallSecuritypolicy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PackagesFirewallSecuritypolicy(name: string, args: PackagesFirewallSecuritypolicyArgs, opts?: CustomResourceOptions);
@overload
def PackagesFirewallSecuritypolicy(resource_name: str,
                                   args: PackagesFirewallSecuritypolicyArgs,
                                   opts: Optional[ResourceOptions] = None)

@overload
def PackagesFirewallSecuritypolicy(resource_name: str,
                                   opts: Optional[ResourceOptions] = None,
                                   pkg: Optional[str] = None,
                                   _policy_block: Optional[float] = None,
                                   action: Optional[str] = None,
                                   adom: Optional[str] = None,
                                   app_category: Optional[str] = None,
                                   app_group: Optional[str] = None,
                                   application_list: Optional[str] = None,
                                   applications: Optional[Sequence[float]] = None,
                                   av_profile: Optional[str] = None,
                                   casb_profile: Optional[str] = None,
                                   cifs_profile: Optional[str] = None,
                                   comments: Optional[str] = None,
                                   diameter_filter_profile: Optional[str] = None,
                                   dlp_profile: Optional[str] = None,
                                   dlp_sensor: Optional[str] = None,
                                   dnsfilter_profile: Optional[str] = None,
                                   dstaddr: Optional[str] = None,
                                   dstaddr4: Optional[str] = None,
                                   dstaddr6: Optional[str] = None,
                                   dstaddr6_negate: Optional[str] = None,
                                   dstaddr_negate: Optional[str] = None,
                                   dstintf: Optional[str] = None,
                                   emailfilter_profile: Optional[str] = None,
                                   enforce_default_app_port: Optional[str] = None,
                                   file_filter_profile: Optional[str] = None,
                                   fsso_groups: Optional[str] = None,
                                   global_label: Optional[str] = None,
                                   groups: Optional[str] = None,
                                   icap_profile: Optional[str] = None,
                                   internet_service: Optional[str] = None,
                                   internet_service6: Optional[str] = None,
                                   internet_service6_custom_groups: Optional[Sequence[str]] = None,
                                   internet_service6_customs: Optional[Sequence[str]] = None,
                                   internet_service6_groups: Optional[Sequence[str]] = None,
                                   internet_service6_names: Optional[Sequence[str]] = None,
                                   internet_service6_negate: Optional[str] = None,
                                   internet_service6_src: Optional[str] = None,
                                   internet_service6_src_custom_groups: Optional[Sequence[str]] = None,
                                   internet_service6_src_customs: Optional[Sequence[str]] = None,
                                   internet_service6_src_groups: Optional[Sequence[str]] = None,
                                   internet_service6_src_names: Optional[Sequence[str]] = None,
                                   internet_service6_src_negate: Optional[str] = None,
                                   internet_service_custom: Optional[str] = None,
                                   internet_service_custom_group: Optional[str] = None,
                                   internet_service_group: Optional[str] = None,
                                   internet_service_id: Optional[str] = None,
                                   internet_service_name: Optional[str] = None,
                                   internet_service_negate: Optional[str] = None,
                                   internet_service_src: Optional[str] = None,
                                   internet_service_src_custom: Optional[str] = None,
                                   internet_service_src_custom_group: Optional[str] = None,
                                   internet_service_src_group: Optional[str] = None,
                                   internet_service_src_id: Optional[str] = None,
                                   internet_service_src_name: Optional[str] = None,
                                   internet_service_src_negate: Optional[str] = None,
                                   ips_sensor: Optional[str] = None,
                                   ips_voip_filter: Optional[str] = None,
                                   learning_mode: Optional[str] = None,
                                   logtraffic: Optional[str] = None,
                                   logtraffic_start: Optional[str] = None,
                                   mms_profile: Optional[str] = None,
                                   name: Optional[str] = None,
                                   nat46: Optional[str] = None,
                                   nat64: Optional[str] = None,
                                   packages_firewall_securitypolicy_id: Optional[str] = None,
                                   pkg_folder_path: Optional[str] = None,
                                   policyid: Optional[float] = None,
                                   profile_group: Optional[str] = None,
                                   profile_protocol_options: Optional[str] = None,
                                   profile_type: Optional[str] = None,
                                   schedule: Optional[str] = None,
                                   scopetype: Optional[str] = None,
                                   sctp_filter_profile: Optional[str] = None,
                                   send_deny_packet: Optional[str] = None,
                                   service: Optional[str] = None,
                                   service_negate: Optional[str] = None,
                                   srcaddr: Optional[str] = None,
                                   srcaddr4: Optional[str] = None,
                                   srcaddr6: Optional[str] = None,
                                   srcaddr6_negate: Optional[str] = None,
                                   srcaddr_negate: Optional[str] = None,
                                   srcintf: Optional[str] = None,
                                   ssh_filter_profile: Optional[str] = None,
                                   ssl_ssh_profile: Optional[str] = None,
                                   status: Optional[str] = None,
                                   url_category: Optional[str] = None,
                                   users: Optional[str] = None,
                                   utm_status: Optional[str] = None,
                                   uuid: Optional[str] = None,
                                   videofilter_profile: Optional[str] = None,
                                   virtual_patch_profile: Optional[str] = None,
                                   voip_profile: Optional[str] = None,
                                   webfilter_profile: Optional[str] = None)
func NewPackagesFirewallSecuritypolicy(ctx *Context, name string, args PackagesFirewallSecuritypolicyArgs, opts ...ResourceOption) (*PackagesFirewallSecuritypolicy, error)
public PackagesFirewallSecuritypolicy(string name, PackagesFirewallSecuritypolicyArgs args, CustomResourceOptions? opts = null)
public PackagesFirewallSecuritypolicy(String name, PackagesFirewallSecuritypolicyArgs args)
public PackagesFirewallSecuritypolicy(String name, PackagesFirewallSecuritypolicyArgs args, CustomResourceOptions options)

type: fortimanager:PackagesFirewallSecuritypolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. PackagesFirewallSecuritypolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. PackagesFirewallSecuritypolicyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. PackagesFirewallSecuritypolicyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. PackagesFirewallSecuritypolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. PackagesFirewallSecuritypolicyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var packagesFirewallSecuritypolicyResource = new Fortimanager.PackagesFirewallSecuritypolicy("packagesFirewallSecuritypolicyResource", new()
{
    Pkg = "string",
    _policyBlock = 0,
    Action = "string",
    Adom = "string",
    AppCategory = "string",
    AppGroup = "string",
    ApplicationList = "string",
    Applications = new[]
    {
        0,
    },
    AvProfile = "string",
    CasbProfile = "string",
    CifsProfile = "string",
    Comments = "string",
    DiameterFilterProfile = "string",
    DlpProfile = "string",
    DlpSensor = "string",
    DnsfilterProfile = "string",
    Dstaddr = "string",
    Dstaddr4 = "string",
    Dstaddr6 = "string",
    Dstaddr6Negate = "string",
    DstaddrNegate = "string",
    Dstintf = "string",
    EmailfilterProfile = "string",
    EnforceDefaultAppPort = "string",
    FileFilterProfile = "string",
    FssoGroups = "string",
    GlobalLabel = "string",
    Groups = "string",
    IcapProfile = "string",
    InternetService = "string",
    InternetService6 = "string",
    InternetService6CustomGroups = new[]
    {
        "string",
    },
    InternetService6Customs = new[]
    {
        "string",
    },
    InternetService6Groups = new[]
    {
        "string",
    },
    InternetService6Names = new[]
    {
        "string",
    },
    InternetService6Negate = "string",
    InternetService6Src = "string",
    InternetService6SrcCustomGroups = new[]
    {
        "string",
    },
    InternetService6SrcCustoms = new[]
    {
        "string",
    },
    InternetService6SrcGroups = new[]
    {
        "string",
    },
    InternetService6SrcNames = new[]
    {
        "string",
    },
    InternetService6SrcNegate = "string",
    InternetServiceCustom = "string",
    InternetServiceCustomGroup = "string",
    InternetServiceGroup = "string",
    InternetServiceId = "string",
    InternetServiceName = "string",
    InternetServiceNegate = "string",
    InternetServiceSrc = "string",
    InternetServiceSrcCustom = "string",
    InternetServiceSrcCustomGroup = "string",
    InternetServiceSrcGroup = "string",
    InternetServiceSrcId = "string",
    InternetServiceSrcName = "string",
    InternetServiceSrcNegate = "string",
    IpsSensor = "string",
    IpsVoipFilter = "string",
    LearningMode = "string",
    Logtraffic = "string",
    LogtrafficStart = "string",
    MmsProfile = "string",
    Name = "string",
    Nat46 = "string",
    Nat64 = "string",
    PackagesFirewallSecuritypolicyId = "string",
    PkgFolderPath = "string",
    Policyid = 0,
    ProfileGroup = "string",
    ProfileProtocolOptions = "string",
    ProfileType = "string",
    Schedule = "string",
    Scopetype = "string",
    SctpFilterProfile = "string",
    SendDenyPacket = "string",
    Service = "string",
    ServiceNegate = "string",
    Srcaddr = "string",
    Srcaddr4 = "string",
    Srcaddr6 = "string",
    Srcaddr6Negate = "string",
    SrcaddrNegate = "string",
    Srcintf = "string",
    SshFilterProfile = "string",
    SslSshProfile = "string",
    Status = "string",
    UrlCategory = "string",
    Users = "string",
    UtmStatus = "string",
    Uuid = "string",
    VideofilterProfile = "string",
    VirtualPatchProfile = "string",
    VoipProfile = "string",
    WebfilterProfile = "string",
});
Copy
example, err := fortimanager.NewPackagesFirewallSecuritypolicy(ctx, "packagesFirewallSecuritypolicyResource", &fortimanager.PackagesFirewallSecuritypolicyArgs{
Pkg: pulumi.String("string"),
_policyBlock: pulumi.Float64(0),
Action: pulumi.String("string"),
Adom: pulumi.String("string"),
AppCategory: pulumi.String("string"),
AppGroup: pulumi.String("string"),
ApplicationList: pulumi.String("string"),
Applications: pulumi.Float64Array{
pulumi.Float64(0),
},
AvProfile: pulumi.String("string"),
CasbProfile: pulumi.String("string"),
CifsProfile: pulumi.String("string"),
Comments: pulumi.String("string"),
DiameterFilterProfile: pulumi.String("string"),
DlpProfile: pulumi.String("string"),
DlpSensor: pulumi.String("string"),
DnsfilterProfile: pulumi.String("string"),
Dstaddr: pulumi.String("string"),
Dstaddr4: pulumi.String("string"),
Dstaddr6: pulumi.String("string"),
Dstaddr6Negate: pulumi.String("string"),
DstaddrNegate: pulumi.String("string"),
Dstintf: pulumi.String("string"),
EmailfilterProfile: pulumi.String("string"),
EnforceDefaultAppPort: pulumi.String("string"),
FileFilterProfile: pulumi.String("string"),
FssoGroups: pulumi.String("string"),
GlobalLabel: pulumi.String("string"),
Groups: pulumi.String("string"),
IcapProfile: pulumi.String("string"),
InternetService: pulumi.String("string"),
InternetService6: pulumi.String("string"),
InternetService6CustomGroups: pulumi.StringArray{
pulumi.String("string"),
},
InternetService6Customs: pulumi.StringArray{
pulumi.String("string"),
},
InternetService6Groups: pulumi.StringArray{
pulumi.String("string"),
},
InternetService6Names: pulumi.StringArray{
pulumi.String("string"),
},
InternetService6Negate: pulumi.String("string"),
InternetService6Src: pulumi.String("string"),
InternetService6SrcCustomGroups: pulumi.StringArray{
pulumi.String("string"),
},
InternetService6SrcCustoms: pulumi.StringArray{
pulumi.String("string"),
},
InternetService6SrcGroups: pulumi.StringArray{
pulumi.String("string"),
},
InternetService6SrcNames: pulumi.StringArray{
pulumi.String("string"),
},
InternetService6SrcNegate: pulumi.String("string"),
InternetServiceCustom: pulumi.String("string"),
InternetServiceCustomGroup: pulumi.String("string"),
InternetServiceGroup: pulumi.String("string"),
InternetServiceId: pulumi.String("string"),
InternetServiceName: pulumi.String("string"),
InternetServiceNegate: pulumi.String("string"),
InternetServiceSrc: pulumi.String("string"),
InternetServiceSrcCustom: pulumi.String("string"),
InternetServiceSrcCustomGroup: pulumi.String("string"),
InternetServiceSrcGroup: pulumi.String("string"),
InternetServiceSrcId: pulumi.String("string"),
InternetServiceSrcName: pulumi.String("string"),
InternetServiceSrcNegate: pulumi.String("string"),
IpsSensor: pulumi.String("string"),
IpsVoipFilter: pulumi.String("string"),
LearningMode: pulumi.String("string"),
Logtraffic: pulumi.String("string"),
LogtrafficStart: pulumi.String("string"),
MmsProfile: pulumi.String("string"),
Name: pulumi.String("string"),
Nat46: pulumi.String("string"),
Nat64: pulumi.String("string"),
PackagesFirewallSecuritypolicyId: pulumi.String("string"),
PkgFolderPath: pulumi.String("string"),
Policyid: pulumi.Float64(0),
ProfileGroup: pulumi.String("string"),
ProfileProtocolOptions: pulumi.String("string"),
ProfileType: pulumi.String("string"),
Schedule: pulumi.String("string"),
Scopetype: pulumi.String("string"),
SctpFilterProfile: pulumi.String("string"),
SendDenyPacket: pulumi.String("string"),
Service: pulumi.String("string"),
ServiceNegate: pulumi.String("string"),
Srcaddr: pulumi.String("string"),
Srcaddr4: pulumi.String("string"),
Srcaddr6: pulumi.String("string"),
Srcaddr6Negate: pulumi.String("string"),
SrcaddrNegate: pulumi.String("string"),
Srcintf: pulumi.String("string"),
SshFilterProfile: pulumi.String("string"),
SslSshProfile: pulumi.String("string"),
Status: pulumi.String("string"),
UrlCategory: pulumi.String("string"),
Users: pulumi.String("string"),
UtmStatus: pulumi.String("string"),
Uuid: pulumi.String("string"),
VideofilterProfile: pulumi.String("string"),
VirtualPatchProfile: pulumi.String("string"),
VoipProfile: pulumi.String("string"),
WebfilterProfile: pulumi.String("string"),
})
Copy
var packagesFirewallSecuritypolicyResource = new PackagesFirewallSecuritypolicy("packagesFirewallSecuritypolicyResource", PackagesFirewallSecuritypolicyArgs.builder()
    .pkg("string")
    ._policyBlock(0)
    .action("string")
    .adom("string")
    .appCategory("string")
    .appGroup("string")
    .applicationList("string")
    .applications(0)
    .avProfile("string")
    .casbProfile("string")
    .cifsProfile("string")
    .comments("string")
    .diameterFilterProfile("string")
    .dlpProfile("string")
    .dlpSensor("string")
    .dnsfilterProfile("string")
    .dstaddr("string")
    .dstaddr4("string")
    .dstaddr6("string")
    .dstaddr6Negate("string")
    .dstaddrNegate("string")
    .dstintf("string")
    .emailfilterProfile("string")
    .enforceDefaultAppPort("string")
    .fileFilterProfile("string")
    .fssoGroups("string")
    .globalLabel("string")
    .groups("string")
    .icapProfile("string")
    .internetService("string")
    .internetService6("string")
    .internetService6CustomGroups("string")
    .internetService6Customs("string")
    .internetService6Groups("string")
    .internetService6Names("string")
    .internetService6Negate("string")
    .internetService6Src("string")
    .internetService6SrcCustomGroups("string")
    .internetService6SrcCustoms("string")
    .internetService6SrcGroups("string")
    .internetService6SrcNames("string")
    .internetService6SrcNegate("string")
    .internetServiceCustom("string")
    .internetServiceCustomGroup("string")
    .internetServiceGroup("string")
    .internetServiceId("string")
    .internetServiceName("string")
    .internetServiceNegate("string")
    .internetServiceSrc("string")
    .internetServiceSrcCustom("string")
    .internetServiceSrcCustomGroup("string")
    .internetServiceSrcGroup("string")
    .internetServiceSrcId("string")
    .internetServiceSrcName("string")
    .internetServiceSrcNegate("string")
    .ipsSensor("string")
    .ipsVoipFilter("string")
    .learningMode("string")
    .logtraffic("string")
    .logtrafficStart("string")
    .mmsProfile("string")
    .name("string")
    .nat46("string")
    .nat64("string")
    .packagesFirewallSecuritypolicyId("string")
    .pkgFolderPath("string")
    .policyid(0)
    .profileGroup("string")
    .profileProtocolOptions("string")
    .profileType("string")
    .schedule("string")
    .scopetype("string")
    .sctpFilterProfile("string")
    .sendDenyPacket("string")
    .service("string")
    .serviceNegate("string")
    .srcaddr("string")
    .srcaddr4("string")
    .srcaddr6("string")
    .srcaddr6Negate("string")
    .srcaddrNegate("string")
    .srcintf("string")
    .sshFilterProfile("string")
    .sslSshProfile("string")
    .status("string")
    .urlCategory("string")
    .users("string")
    .utmStatus("string")
    .uuid("string")
    .videofilterProfile("string")
    .virtualPatchProfile("string")
    .voipProfile("string")
    .webfilterProfile("string")
    .build());
Copy
packages_firewall_securitypolicy_resource = fortimanager.PackagesFirewallSecuritypolicy("packagesFirewallSecuritypolicyResource",
    pkg="string",
    _policy_block=0,
    action="string",
    adom="string",
    app_category="string",
    app_group="string",
    application_list="string",
    applications=[0],
    av_profile="string",
    casb_profile="string",
    cifs_profile="string",
    comments="string",
    diameter_filter_profile="string",
    dlp_profile="string",
    dlp_sensor="string",
    dnsfilter_profile="string",
    dstaddr="string",
    dstaddr4="string",
    dstaddr6="string",
    dstaddr6_negate="string",
    dstaddr_negate="string",
    dstintf="string",
    emailfilter_profile="string",
    enforce_default_app_port="string",
    file_filter_profile="string",
    fsso_groups="string",
    global_label="string",
    groups="string",
    icap_profile="string",
    internet_service="string",
    internet_service6="string",
    internet_service6_custom_groups=["string"],
    internet_service6_customs=["string"],
    internet_service6_groups=["string"],
    internet_service6_names=["string"],
    internet_service6_negate="string",
    internet_service6_src="string",
    internet_service6_src_custom_groups=["string"],
    internet_service6_src_customs=["string"],
    internet_service6_src_groups=["string"],
    internet_service6_src_names=["string"],
    internet_service6_src_negate="string",
    internet_service_custom="string",
    internet_service_custom_group="string",
    internet_service_group="string",
    internet_service_id="string",
    internet_service_name="string",
    internet_service_negate="string",
    internet_service_src="string",
    internet_service_src_custom="string",
    internet_service_src_custom_group="string",
    internet_service_src_group="string",
    internet_service_src_id="string",
    internet_service_src_name="string",
    internet_service_src_negate="string",
    ips_sensor="string",
    ips_voip_filter="string",
    learning_mode="string",
    logtraffic="string",
    logtraffic_start="string",
    mms_profile="string",
    name="string",
    nat46="string",
    nat64="string",
    packages_firewall_securitypolicy_id="string",
    pkg_folder_path="string",
    policyid=0,
    profile_group="string",
    profile_protocol_options="string",
    profile_type="string",
    schedule="string",
    scopetype="string",
    sctp_filter_profile="string",
    send_deny_packet="string",
    service="string",
    service_negate="string",
    srcaddr="string",
    srcaddr4="string",
    srcaddr6="string",
    srcaddr6_negate="string",
    srcaddr_negate="string",
    srcintf="string",
    ssh_filter_profile="string",
    ssl_ssh_profile="string",
    status="string",
    url_category="string",
    users="string",
    utm_status="string",
    uuid="string",
    videofilter_profile="string",
    virtual_patch_profile="string",
    voip_profile="string",
    webfilter_profile="string")
Copy
const packagesFirewallSecuritypolicyResource = new fortimanager.PackagesFirewallSecuritypolicy("packagesFirewallSecuritypolicyResource", {
    pkg: "string",
    _policyBlock: 0,
    action: "string",
    adom: "string",
    appCategory: "string",
    appGroup: "string",
    applicationList: "string",
    applications: [0],
    avProfile: "string",
    casbProfile: "string",
    cifsProfile: "string",
    comments: "string",
    diameterFilterProfile: "string",
    dlpProfile: "string",
    dlpSensor: "string",
    dnsfilterProfile: "string",
    dstaddr: "string",
    dstaddr4: "string",
    dstaddr6: "string",
    dstaddr6Negate: "string",
    dstaddrNegate: "string",
    dstintf: "string",
    emailfilterProfile: "string",
    enforceDefaultAppPort: "string",
    fileFilterProfile: "string",
    fssoGroups: "string",
    globalLabel: "string",
    groups: "string",
    icapProfile: "string",
    internetService: "string",
    internetService6: "string",
    internetService6CustomGroups: ["string"],
    internetService6Customs: ["string"],
    internetService6Groups: ["string"],
    internetService6Names: ["string"],
    internetService6Negate: "string",
    internetService6Src: "string",
    internetService6SrcCustomGroups: ["string"],
    internetService6SrcCustoms: ["string"],
    internetService6SrcGroups: ["string"],
    internetService6SrcNames: ["string"],
    internetService6SrcNegate: "string",
    internetServiceCustom: "string",
    internetServiceCustomGroup: "string",
    internetServiceGroup: "string",
    internetServiceId: "string",
    internetServiceName: "string",
    internetServiceNegate: "string",
    internetServiceSrc: "string",
    internetServiceSrcCustom: "string",
    internetServiceSrcCustomGroup: "string",
    internetServiceSrcGroup: "string",
    internetServiceSrcId: "string",
    internetServiceSrcName: "string",
    internetServiceSrcNegate: "string",
    ipsSensor: "string",
    ipsVoipFilter: "string",
    learningMode: "string",
    logtraffic: "string",
    logtrafficStart: "string",
    mmsProfile: "string",
    name: "string",
    nat46: "string",
    nat64: "string",
    packagesFirewallSecuritypolicyId: "string",
    pkgFolderPath: "string",
    policyid: 0,
    profileGroup: "string",
    profileProtocolOptions: "string",
    profileType: "string",
    schedule: "string",
    scopetype: "string",
    sctpFilterProfile: "string",
    sendDenyPacket: "string",
    service: "string",
    serviceNegate: "string",
    srcaddr: "string",
    srcaddr4: "string",
    srcaddr6: "string",
    srcaddr6Negate: "string",
    srcaddrNegate: "string",
    srcintf: "string",
    sshFilterProfile: "string",
    sslSshProfile: "string",
    status: "string",
    urlCategory: "string",
    users: "string",
    utmStatus: "string",
    uuid: "string",
    videofilterProfile: "string",
    virtualPatchProfile: "string",
    voipProfile: "string",
    webfilterProfile: "string",
});
Copy
type: fortimanager:PackagesFirewallSecuritypolicy
properties:
    _policyBlock: 0
    action: string
    adom: string
    appCategory: string
    appGroup: string
    applicationList: string
    applications:
        - 0
    avProfile: string
    casbProfile: string
    cifsProfile: string
    comments: string
    diameterFilterProfile: string
    dlpProfile: string
    dlpSensor: string
    dnsfilterProfile: string
    dstaddr: string
    dstaddr4: string
    dstaddr6: string
    dstaddr6Negate: string
    dstaddrNegate: string
    dstintf: string
    emailfilterProfile: string
    enforceDefaultAppPort: string
    fileFilterProfile: string
    fssoGroups: string
    globalLabel: string
    groups: string
    icapProfile: string
    internetService: string
    internetService6: string
    internetService6CustomGroups:
        - string
    internetService6Customs:
        - string
    internetService6Groups:
        - string
    internetService6Names:
        - string
    internetService6Negate: string
    internetService6Src: string
    internetService6SrcCustomGroups:
        - string
    internetService6SrcCustoms:
        - string
    internetService6SrcGroups:
        - string
    internetService6SrcNames:
        - string
    internetService6SrcNegate: string
    internetServiceCustom: string
    internetServiceCustomGroup: string
    internetServiceGroup: string
    internetServiceId: string
    internetServiceName: string
    internetServiceNegate: string
    internetServiceSrc: string
    internetServiceSrcCustom: string
    internetServiceSrcCustomGroup: string
    internetServiceSrcGroup: string
    internetServiceSrcId: string
    internetServiceSrcName: string
    internetServiceSrcNegate: string
    ipsSensor: string
    ipsVoipFilter: string
    learningMode: string
    logtraffic: string
    logtrafficStart: string
    mmsProfile: string
    name: string
    nat46: string
    nat64: string
    packagesFirewallSecuritypolicyId: string
    pkg: string
    pkgFolderPath: string
    policyid: 0
    profileGroup: string
    profileProtocolOptions: string
    profileType: string
    schedule: string
    scopetype: string
    sctpFilterProfile: string
    sendDenyPacket: string
    service: string
    serviceNegate: string
    srcaddr: string
    srcaddr4: string
    srcaddr6: string
    srcaddr6Negate: string
    srcaddrNegate: string
    srcintf: string
    sshFilterProfile: string
    sslSshProfile: string
    status: string
    urlCategory: string
    users: string
    utmStatus: string
    uuid: string
    videofilterProfile: string
    virtualPatchProfile: string
    voipProfile: string
    webfilterProfile: string
Copy

PackagesFirewallSecuritypolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PackagesFirewallSecuritypolicy resource accepts the following input properties:

Pkg This property is required. string
Package.
Action string
Policy action (accept/deny). Valid values: deny, accept.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AppCategory string
Application category ID list.
AppGroup string
Application group names.
ApplicationList string
Name of an existing Application list.
Applications List<double>
Application ID list.
AvProfile string
Name of an existing Antivirus profile.
CasbProfile string
Name of an existing CASB profile.
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
DiameterFilterProfile string
Name of an existing Diameter filter profile.
DlpProfile string
Name of an existing DLP profile.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
Dstaddr string
Destination IPv4 address name and address group names.
Dstaddr4 string
Destination IPv4 address name and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
Dstaddr6Negate string
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
DstaddrNegate string
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
EmailfilterProfile string
Name of an existing email filter profile.
EnforceDefaultAppPort string
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
FileFilterProfile string
Name of an existing file-filter profile.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
IcapProfile string
Name of an existing ICAP profile.
InternetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
InternetService6 string
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
InternetService6CustomGroups List<string>
Custom IPv6 Internet Service group name.
InternetService6Customs List<string>
Custom IPv6 Internet Service name.
InternetService6Groups List<string>
Internet Service group name.
InternetService6Names List<string>
IPv6 Internet Service name.
InternetService6Negate string
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
InternetService6Src string
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetService6SrcCustomGroups List<string>
Custom Internet Service6 source group name.
InternetService6SrcCustoms List<string>
Custom IPv6 Internet Service source name.
InternetService6SrcGroups List<string>
Internet Service6 source group name.
InternetService6SrcNames List<string>
IPv6 Internet Service source name.
InternetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceCustom string
Custom Internet Service name.
InternetServiceCustomGroup string
Custom Internet Service group name.
InternetServiceGroup string
Internet Service group name.
InternetServiceId string
Internet Service ID.
InternetServiceName string
Internet Service name.
InternetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetServiceSrcCustom string
Custom Internet Service source name.
InternetServiceSrcCustomGroup string
Custom Internet Service source group name.
InternetServiceSrcGroup string
Internet Service source group name.
InternetServiceSrcId string
Internet Service source ID.
InternetServiceSrcName string
Internet Service source name.
InternetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
IpsVoipFilter string
Name of an existing VoIP (ips) profile.
LearningMode string
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat46 string
Enable/disable NAT46. Valid values: disable, enable.
Nat64 string
Enable/disable NAT64. Valid values: disable, enable.
PackagesFirewallSecuritypolicyId string
an identifier for the resource with format {{policyid}}.
PkgFolderPath string
Pkg Folder Path.
Policyid double
Policy ID.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
Schedule string
Schedule name.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SctpFilterProfile string
Name of an existing SCTP filter profile.
SendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
Srcaddr string
Source IPv4 address name and address group names.
Srcaddr4 string
Source IPv4 address name and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
Srcaddr6Negate string
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
SrcaddrNegate string
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SslSshProfile string
Name of an existing SSL SSH profile.
Status string
Enable or disable this policy. Valid values: disable, enable.
UrlCategory string
URL category ID list.
Users string
Names of individual users that can authenticate with this policy.
UtmStatus string
Enable security profiles. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VideofilterProfile string
Name of an existing VideoFilter profile.
VirtualPatchProfile string
Name of an existing virtual-patch profile.
VoipProfile string
Name of an existing VoIP profile.
WebfilterProfile string
Name of an existing Web filter profile.
_policyBlock double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
Pkg This property is required. string
Package.
Action string
Policy action (accept/deny). Valid values: deny, accept.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AppCategory string
Application category ID list.
AppGroup string
Application group names.
ApplicationList string
Name of an existing Application list.
Applications []float64
Application ID list.
AvProfile string
Name of an existing Antivirus profile.
CasbProfile string
Name of an existing CASB profile.
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
DiameterFilterProfile string
Name of an existing Diameter filter profile.
DlpProfile string
Name of an existing DLP profile.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
Dstaddr string
Destination IPv4 address name and address group names.
Dstaddr4 string
Destination IPv4 address name and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
Dstaddr6Negate string
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
DstaddrNegate string
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
EmailfilterProfile string
Name of an existing email filter profile.
EnforceDefaultAppPort string
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
FileFilterProfile string
Name of an existing file-filter profile.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
IcapProfile string
Name of an existing ICAP profile.
InternetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
InternetService6 string
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
InternetService6CustomGroups []string
Custom IPv6 Internet Service group name.
InternetService6Customs []string
Custom IPv6 Internet Service name.
InternetService6Groups []string
Internet Service group name.
InternetService6Names []string
IPv6 Internet Service name.
InternetService6Negate string
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
InternetService6Src string
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetService6SrcCustomGroups []string
Custom Internet Service6 source group name.
InternetService6SrcCustoms []string
Custom IPv6 Internet Service source name.
InternetService6SrcGroups []string
Internet Service6 source group name.
InternetService6SrcNames []string
IPv6 Internet Service source name.
InternetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceCustom string
Custom Internet Service name.
InternetServiceCustomGroup string
Custom Internet Service group name.
InternetServiceGroup string
Internet Service group name.
InternetServiceId string
Internet Service ID.
InternetServiceName string
Internet Service name.
InternetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetServiceSrcCustom string
Custom Internet Service source name.
InternetServiceSrcCustomGroup string
Custom Internet Service source group name.
InternetServiceSrcGroup string
Internet Service source group name.
InternetServiceSrcId string
Internet Service source ID.
InternetServiceSrcName string
Internet Service source name.
InternetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
IpsVoipFilter string
Name of an existing VoIP (ips) profile.
LearningMode string
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat46 string
Enable/disable NAT46. Valid values: disable, enable.
Nat64 string
Enable/disable NAT64. Valid values: disable, enable.
PackagesFirewallSecuritypolicyId string
an identifier for the resource with format {{policyid}}.
PkgFolderPath string
Pkg Folder Path.
Policyid float64
Policy ID.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
Schedule string
Schedule name.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SctpFilterProfile string
Name of an existing SCTP filter profile.
SendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
Srcaddr string
Source IPv4 address name and address group names.
Srcaddr4 string
Source IPv4 address name and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
Srcaddr6Negate string
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
SrcaddrNegate string
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SslSshProfile string
Name of an existing SSL SSH profile.
Status string
Enable or disable this policy. Valid values: disable, enable.
UrlCategory string
URL category ID list.
Users string
Names of individual users that can authenticate with this policy.
UtmStatus string
Enable security profiles. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VideofilterProfile string
Name of an existing VideoFilter profile.
VirtualPatchProfile string
Name of an existing virtual-patch profile.
VoipProfile string
Name of an existing VoIP profile.
WebfilterProfile string
Name of an existing Web filter profile.
_policyBlock float64
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
pkg This property is required. String
Package.
_policyBlock Double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (accept/deny). Valid values: deny, accept.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory String
Application category ID list.
appGroup String
Application group names.
applicationList String
Name of an existing Application list.
applications List<Double>
Application ID list.
avProfile String
Name of an existing Antivirus profile.
casbProfile String
Name of an existing CASB profile.
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
diameterFilterProfile String
Name of an existing Diameter filter profile.
dlpProfile String
Name of an existing DLP profile.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dstaddr String
Destination IPv4 address name and address group names.
dstaddr4 String
Destination IPv4 address name and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddr6Negate String
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstaddrNegate String
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
emailfilterProfile String
Name of an existing email filter profile.
enforceDefaultAppPort String
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
fileFilterProfile String
Name of an existing file-filter profile.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
icapProfile String
Name of an existing ICAP profile.
internetService String
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetService6 String
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
internetService6CustomGroups List<String>
Custom IPv6 Internet Service group name.
internetService6Customs List<String>
Custom IPv6 Internet Service name.
internetService6Groups List<String>
Internet Service group name.
internetService6Names List<String>
IPv6 Internet Service name.
internetService6Negate String
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
internetService6Src String
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetService6SrcCustomGroups List<String>
Custom Internet Service6 source group name.
internetService6SrcCustoms List<String>
Custom IPv6 Internet Service source name.
internetService6SrcGroups List<String>
Internet Service6 source group name.
internetService6SrcNames List<String>
IPv6 Internet Service source name.
internetService6SrcNegate String
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
internetServiceCustom String
Custom Internet Service name.
internetServiceCustomGroup String
Custom Internet Service group name.
internetServiceGroup String
Internet Service group name.
internetServiceId String
Internet Service ID.
internetServiceName String
Internet Service name.
internetServiceNegate String
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc String
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom String
Custom Internet Service source name.
internetServiceSrcCustomGroup String
Custom Internet Service source group name.
internetServiceSrcGroup String
Internet Service source group name.
internetServiceSrcId String
Internet Service source ID.
internetServiceSrcName String
Internet Service source name.
internetServiceSrcNegate String
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
ipsVoipFilter String
Name of an existing VoIP (ips) profile.
learningMode String
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat46 String
Enable/disable NAT46. Valid values: disable, enable.
nat64 String
Enable/disable NAT64. Valid values: disable, enable.
packagesFirewallSecuritypolicyId String
an identifier for the resource with format {{policyid}}.
pkgFolderPath String
Pkg Folder Path.
policyid Double
Policy ID.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule String
Schedule name.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sctpFilterProfile String
Name of an existing SCTP filter profile.
sendDenyPacket String
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr String
Source IPv4 address name and address group names.
srcaddr4 String
Source IPv4 address name and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddr6Negate String
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcaddrNegate String
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sslSshProfile String
Name of an existing SSL SSH profile.
status String
Enable or disable this policy. Valid values: disable, enable.
urlCategory String
URL category ID list.
users String
Names of individual users that can authenticate with this policy.
utmStatus String
Enable security profiles. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
videofilterProfile String
Name of an existing VideoFilter profile.
virtualPatchProfile String
Name of an existing virtual-patch profile.
voipProfile String
Name of an existing VoIP profile.
webfilterProfile String
Name of an existing Web filter profile.
pkg This property is required. string
Package.
_policyBlock number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action string
Policy action (accept/deny). Valid values: deny, accept.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory string
Application category ID list.
appGroup string
Application group names.
applicationList string
Name of an existing Application list.
applications number[]
Application ID list.
avProfile string
Name of an existing Antivirus profile.
casbProfile string
Name of an existing CASB profile.
cifsProfile string
Name of an existing CIFS profile.
comments string
Comment.
diameterFilterProfile string
Name of an existing Diameter filter profile.
dlpProfile string
Name of an existing DLP profile.
dlpSensor string
Name of an existing DLP sensor.
dnsfilterProfile string
Name of an existing DNS filter profile.
dstaddr string
Destination IPv4 address name and address group names.
dstaddr4 string
Destination IPv4 address name and address group names.
dstaddr6 string
Destination IPv6 address name and address group names.
dstaddr6Negate string
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstaddrNegate string
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf string
Outgoing (egress) interface.
emailfilterProfile string
Name of an existing email filter profile.
enforceDefaultAppPort string
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
fileFilterProfile string
Name of an existing file-filter profile.
fssoGroups string
Names of FSSO groups.
globalLabel string
Label for the policy that appears when the GUI is in Global View mode.
groups string
Names of user groups that can authenticate with this policy.
icapProfile string
Name of an existing ICAP profile.
internetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetService6 string
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
internetService6CustomGroups string[]
Custom IPv6 Internet Service group name.
internetService6Customs string[]
Custom IPv6 Internet Service name.
internetService6Groups string[]
Internet Service group name.
internetService6Names string[]
IPv6 Internet Service name.
internetService6Negate string
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
internetService6Src string
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetService6SrcCustomGroups string[]
Custom Internet Service6 source group name.
internetService6SrcCustoms string[]
Custom IPv6 Internet Service source name.
internetService6SrcGroups string[]
Internet Service6 source group name.
internetService6SrcNames string[]
IPv6 Internet Service source name.
internetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
internetServiceCustom string
Custom Internet Service name.
internetServiceCustomGroup string
Custom Internet Service group name.
internetServiceGroup string
Internet Service group name.
internetServiceId string
Internet Service ID.
internetServiceName string
Internet Service name.
internetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom string
Custom Internet Service source name.
internetServiceSrcCustomGroup string
Custom Internet Service source group name.
internetServiceSrcGroup string
Internet Service source group name.
internetServiceSrcId string
Internet Service source ID.
internetServiceSrcName string
Internet Service source name.
internetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ipsSensor string
Name of an existing IPS sensor.
ipsVoipFilter string
Name of an existing VoIP (ips) profile.
learningMode string
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
mmsProfile string
Name of an existing MMS profile.
name string
Policy name.
nat46 string
Enable/disable NAT46. Valid values: disable, enable.
nat64 string
Enable/disable NAT64. Valid values: disable, enable.
packagesFirewallSecuritypolicyId string
an identifier for the resource with format {{policyid}}.
pkgFolderPath string
Pkg Folder Path.
policyid number
Policy ID.
profileGroup string
Name of profile group.
profileProtocolOptions string
Name of an existing Protocol options profile.
profileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule string
Schedule name.
scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sctpFilterProfile string
Name of an existing SCTP filter profile.
sendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service string
Service and service group names.
serviceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr string
Source IPv4 address name and address group names.
srcaddr4 string
Source IPv4 address name and address group names.
srcaddr6 string
Source IPv6 address name and address group names.
srcaddr6Negate string
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcaddrNegate string
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcintf string
Incoming (ingress) interface.
sshFilterProfile string
Name of an existing SSH filter profile.
sslSshProfile string
Name of an existing SSL SSH profile.
status string
Enable or disable this policy. Valid values: disable, enable.
urlCategory string
URL category ID list.
users string
Names of individual users that can authenticate with this policy.
utmStatus string
Enable security profiles. Valid values: disable, enable.
uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
videofilterProfile string
Name of an existing VideoFilter profile.
virtualPatchProfile string
Name of an existing virtual-patch profile.
voipProfile string
Name of an existing VoIP profile.
webfilterProfile string
Name of an existing Web filter profile.
pkg This property is required. str
Package.
_policy_block float
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action str
Policy action (accept/deny). Valid values: deny, accept.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
app_category str
Application category ID list.
app_group str
Application group names.
application_list str
Name of an existing Application list.
applications Sequence[float]
Application ID list.
av_profile str
Name of an existing Antivirus profile.
casb_profile str
Name of an existing CASB profile.
cifs_profile str
Name of an existing CIFS profile.
comments str
Comment.
diameter_filter_profile str
Name of an existing Diameter filter profile.
dlp_profile str
Name of an existing DLP profile.
dlp_sensor str
Name of an existing DLP sensor.
dnsfilter_profile str
Name of an existing DNS filter profile.
dstaddr str
Destination IPv4 address name and address group names.
dstaddr4 str
Destination IPv4 address name and address group names.
dstaddr6 str
Destination IPv6 address name and address group names.
dstaddr6_negate str
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstaddr_negate str
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf str
Outgoing (egress) interface.
emailfilter_profile str
Name of an existing email filter profile.
enforce_default_app_port str
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
file_filter_profile str
Name of an existing file-filter profile.
fsso_groups str
Names of FSSO groups.
global_label str
Label for the policy that appears when the GUI is in Global View mode.
groups str
Names of user groups that can authenticate with this policy.
icap_profile str
Name of an existing ICAP profile.
internet_service str
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internet_service6 str
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
internet_service6_custom_groups Sequence[str]
Custom IPv6 Internet Service group name.
internet_service6_customs Sequence[str]
Custom IPv6 Internet Service name.
internet_service6_groups Sequence[str]
Internet Service group name.
internet_service6_names Sequence[str]
IPv6 Internet Service name.
internet_service6_negate str
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
internet_service6_src str
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internet_service6_src_custom_groups Sequence[str]
Custom Internet Service6 source group name.
internet_service6_src_customs Sequence[str]
Custom IPv6 Internet Service source name.
internet_service6_src_groups Sequence[str]
Internet Service6 source group name.
internet_service6_src_names Sequence[str]
IPv6 Internet Service source name.
internet_service6_src_negate str
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
internet_service_custom str
Custom Internet Service name.
internet_service_custom_group str
Custom Internet Service group name.
internet_service_group str
Internet Service group name.
internet_service_id str
Internet Service ID.
internet_service_name str
Internet Service name.
internet_service_negate str
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internet_service_src str
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internet_service_src_custom str
Custom Internet Service source name.
internet_service_src_custom_group str
Custom Internet Service source group name.
internet_service_src_group str
Internet Service source group name.
internet_service_src_id str
Internet Service source ID.
internet_service_src_name str
Internet Service source name.
internet_service_src_negate str
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ips_sensor str
Name of an existing IPS sensor.
ips_voip_filter str
Name of an existing VoIP (ips) profile.
learning_mode str
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
logtraffic str
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtraffic_start str
Record logs when a session starts. Valid values: disable, enable.
mms_profile str
Name of an existing MMS profile.
name str
Policy name.
nat46 str
Enable/disable NAT46. Valid values: disable, enable.
nat64 str
Enable/disable NAT64. Valid values: disable, enable.
packages_firewall_securitypolicy_id str
an identifier for the resource with format {{policyid}}.
pkg_folder_path str
Pkg Folder Path.
policyid float
Policy ID.
profile_group str
Name of profile group.
profile_protocol_options str
Name of an existing Protocol options profile.
profile_type str
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule str
Schedule name.
scopetype str
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sctp_filter_profile str
Name of an existing SCTP filter profile.
send_deny_packet str
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service str
Service and service group names.
service_negate str
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr str
Source IPv4 address name and address group names.
srcaddr4 str
Source IPv4 address name and address group names.
srcaddr6 str
Source IPv6 address name and address group names.
srcaddr6_negate str
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcaddr_negate str
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcintf str
Incoming (ingress) interface.
ssh_filter_profile str
Name of an existing SSH filter profile.
ssl_ssh_profile str
Name of an existing SSL SSH profile.
status str
Enable or disable this policy. Valid values: disable, enable.
url_category str
URL category ID list.
users str
Names of individual users that can authenticate with this policy.
utm_status str
Enable security profiles. Valid values: disable, enable.
uuid str
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
videofilter_profile str
Name of an existing VideoFilter profile.
virtual_patch_profile str
Name of an existing virtual-patch profile.
voip_profile str
Name of an existing VoIP profile.
webfilter_profile str
Name of an existing Web filter profile.
pkg This property is required. String
Package.
_policyBlock Number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (accept/deny). Valid values: deny, accept.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory String
Application category ID list.
appGroup String
Application group names.
applicationList String
Name of an existing Application list.
applications List<Number>
Application ID list.
avProfile String
Name of an existing Antivirus profile.
casbProfile String
Name of an existing CASB profile.
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
diameterFilterProfile String
Name of an existing Diameter filter profile.
dlpProfile String
Name of an existing DLP profile.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dstaddr String
Destination IPv4 address name and address group names.
dstaddr4 String
Destination IPv4 address name and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddr6Negate String
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstaddrNegate String
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
emailfilterProfile String
Name of an existing email filter profile.
enforceDefaultAppPort String
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
fileFilterProfile String
Name of an existing file-filter profile.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
icapProfile String
Name of an existing ICAP profile.
internetService String
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetService6 String
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
internetService6CustomGroups List<String>
Custom IPv6 Internet Service group name.
internetService6Customs List<String>
Custom IPv6 Internet Service name.
internetService6Groups List<String>
Internet Service group name.
internetService6Names List<String>
IPv6 Internet Service name.
internetService6Negate String
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
internetService6Src String
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetService6SrcCustomGroups List<String>
Custom Internet Service6 source group name.
internetService6SrcCustoms List<String>
Custom IPv6 Internet Service source name.
internetService6SrcGroups List<String>
Internet Service6 source group name.
internetService6SrcNames List<String>
IPv6 Internet Service source name.
internetService6SrcNegate String
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
internetServiceCustom String
Custom Internet Service name.
internetServiceCustomGroup String
Custom Internet Service group name.
internetServiceGroup String
Internet Service group name.
internetServiceId String
Internet Service ID.
internetServiceName String
Internet Service name.
internetServiceNegate String
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc String
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom String
Custom Internet Service source name.
internetServiceSrcCustomGroup String
Custom Internet Service source group name.
internetServiceSrcGroup String
Internet Service source group name.
internetServiceSrcId String
Internet Service source ID.
internetServiceSrcName String
Internet Service source name.
internetServiceSrcNegate String
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
ipsVoipFilter String
Name of an existing VoIP (ips) profile.
learningMode String
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat46 String
Enable/disable NAT46. Valid values: disable, enable.
nat64 String
Enable/disable NAT64. Valid values: disable, enable.
packagesFirewallSecuritypolicyId String
an identifier for the resource with format {{policyid}}.
pkgFolderPath String
Pkg Folder Path.
policyid Number
Policy ID.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule String
Schedule name.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sctpFilterProfile String
Name of an existing SCTP filter profile.
sendDenyPacket String
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr String
Source IPv4 address name and address group names.
srcaddr4 String
Source IPv4 address name and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddr6Negate String
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcaddrNegate String
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sslSshProfile String
Name of an existing SSL SSH profile.
status String
Enable or disable this policy. Valid values: disable, enable.
urlCategory String
URL category ID list.
users String
Names of individual users that can authenticate with this policy.
utmStatus String
Enable security profiles. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
videofilterProfile String
Name of an existing VideoFilter profile.
virtualPatchProfile String
Name of an existing virtual-patch profile.
voipProfile String
Name of an existing VoIP profile.
webfilterProfile String
Name of an existing Web filter profile.

Outputs

All input properties are implicitly available as output properties. Additionally, the PackagesFirewallSecuritypolicy resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing PackagesFirewallSecuritypolicy Resource

Get an existing PackagesFirewallSecuritypolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PackagesFirewallSecuritypolicyState, opts?: CustomResourceOptions): PackagesFirewallSecuritypolicy
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        _policy_block: Optional[float] = None,
        action: Optional[str] = None,
        adom: Optional[str] = None,
        app_category: Optional[str] = None,
        app_group: Optional[str] = None,
        application_list: Optional[str] = None,
        applications: Optional[Sequence[float]] = None,
        av_profile: Optional[str] = None,
        casb_profile: Optional[str] = None,
        cifs_profile: Optional[str] = None,
        comments: Optional[str] = None,
        diameter_filter_profile: Optional[str] = None,
        dlp_profile: Optional[str] = None,
        dlp_sensor: Optional[str] = None,
        dnsfilter_profile: Optional[str] = None,
        dstaddr: Optional[str] = None,
        dstaddr4: Optional[str] = None,
        dstaddr6: Optional[str] = None,
        dstaddr6_negate: Optional[str] = None,
        dstaddr_negate: Optional[str] = None,
        dstintf: Optional[str] = None,
        emailfilter_profile: Optional[str] = None,
        enforce_default_app_port: Optional[str] = None,
        file_filter_profile: Optional[str] = None,
        fsso_groups: Optional[str] = None,
        global_label: Optional[str] = None,
        groups: Optional[str] = None,
        icap_profile: Optional[str] = None,
        internet_service: Optional[str] = None,
        internet_service6: Optional[str] = None,
        internet_service6_custom_groups: Optional[Sequence[str]] = None,
        internet_service6_customs: Optional[Sequence[str]] = None,
        internet_service6_groups: Optional[Sequence[str]] = None,
        internet_service6_names: Optional[Sequence[str]] = None,
        internet_service6_negate: Optional[str] = None,
        internet_service6_src: Optional[str] = None,
        internet_service6_src_custom_groups: Optional[Sequence[str]] = None,
        internet_service6_src_customs: Optional[Sequence[str]] = None,
        internet_service6_src_groups: Optional[Sequence[str]] = None,
        internet_service6_src_names: Optional[Sequence[str]] = None,
        internet_service6_src_negate: Optional[str] = None,
        internet_service_custom: Optional[str] = None,
        internet_service_custom_group: Optional[str] = None,
        internet_service_group: Optional[str] = None,
        internet_service_id: Optional[str] = None,
        internet_service_name: Optional[str] = None,
        internet_service_negate: Optional[str] = None,
        internet_service_src: Optional[str] = None,
        internet_service_src_custom: Optional[str] = None,
        internet_service_src_custom_group: Optional[str] = None,
        internet_service_src_group: Optional[str] = None,
        internet_service_src_id: Optional[str] = None,
        internet_service_src_name: Optional[str] = None,
        internet_service_src_negate: Optional[str] = None,
        ips_sensor: Optional[str] = None,
        ips_voip_filter: Optional[str] = None,
        learning_mode: Optional[str] = None,
        logtraffic: Optional[str] = None,
        logtraffic_start: Optional[str] = None,
        mms_profile: Optional[str] = None,
        name: Optional[str] = None,
        nat46: Optional[str] = None,
        nat64: Optional[str] = None,
        packages_firewall_securitypolicy_id: Optional[str] = None,
        pkg: Optional[str] = None,
        pkg_folder_path: Optional[str] = None,
        policyid: Optional[float] = None,
        profile_group: Optional[str] = None,
        profile_protocol_options: Optional[str] = None,
        profile_type: Optional[str] = None,
        schedule: Optional[str] = None,
        scopetype: Optional[str] = None,
        sctp_filter_profile: Optional[str] = None,
        send_deny_packet: Optional[str] = None,
        service: Optional[str] = None,
        service_negate: Optional[str] = None,
        srcaddr: Optional[str] = None,
        srcaddr4: Optional[str] = None,
        srcaddr6: Optional[str] = None,
        srcaddr6_negate: Optional[str] = None,
        srcaddr_negate: Optional[str] = None,
        srcintf: Optional[str] = None,
        ssh_filter_profile: Optional[str] = None,
        ssl_ssh_profile: Optional[str] = None,
        status: Optional[str] = None,
        url_category: Optional[str] = None,
        users: Optional[str] = None,
        utm_status: Optional[str] = None,
        uuid: Optional[str] = None,
        videofilter_profile: Optional[str] = None,
        virtual_patch_profile: Optional[str] = None,
        voip_profile: Optional[str] = None,
        webfilter_profile: Optional[str] = None) -> PackagesFirewallSecuritypolicy
func GetPackagesFirewallSecuritypolicy(ctx *Context, name string, id IDInput, state *PackagesFirewallSecuritypolicyState, opts ...ResourceOption) (*PackagesFirewallSecuritypolicy, error)
public static PackagesFirewallSecuritypolicy Get(string name, Input<string> id, PackagesFirewallSecuritypolicyState? state, CustomResourceOptions? opts = null)
public static PackagesFirewallSecuritypolicy get(String name, Output<String> id, PackagesFirewallSecuritypolicyState state, CustomResourceOptions options)
resources:  _:    type: fortimanager:PackagesFirewallSecuritypolicy    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Action string
Policy action (accept/deny). Valid values: deny, accept.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AppCategory string
Application category ID list.
AppGroup string
Application group names.
ApplicationList string
Name of an existing Application list.
Applications List<double>
Application ID list.
AvProfile string
Name of an existing Antivirus profile.
CasbProfile string
Name of an existing CASB profile.
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
DiameterFilterProfile string
Name of an existing Diameter filter profile.
DlpProfile string
Name of an existing DLP profile.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
Dstaddr string
Destination IPv4 address name and address group names.
Dstaddr4 string
Destination IPv4 address name and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
Dstaddr6Negate string
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
DstaddrNegate string
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
EmailfilterProfile string
Name of an existing email filter profile.
EnforceDefaultAppPort string
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
FileFilterProfile string
Name of an existing file-filter profile.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
IcapProfile string
Name of an existing ICAP profile.
InternetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
InternetService6 string
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
InternetService6CustomGroups List<string>
Custom IPv6 Internet Service group name.
InternetService6Customs List<string>
Custom IPv6 Internet Service name.
InternetService6Groups List<string>
Internet Service group name.
InternetService6Names List<string>
IPv6 Internet Service name.
InternetService6Negate string
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
InternetService6Src string
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetService6SrcCustomGroups List<string>
Custom Internet Service6 source group name.
InternetService6SrcCustoms List<string>
Custom IPv6 Internet Service source name.
InternetService6SrcGroups List<string>
Internet Service6 source group name.
InternetService6SrcNames List<string>
IPv6 Internet Service source name.
InternetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceCustom string
Custom Internet Service name.
InternetServiceCustomGroup string
Custom Internet Service group name.
InternetServiceGroup string
Internet Service group name.
InternetServiceId string
Internet Service ID.
InternetServiceName string
Internet Service name.
InternetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetServiceSrcCustom string
Custom Internet Service source name.
InternetServiceSrcCustomGroup string
Custom Internet Service source group name.
InternetServiceSrcGroup string
Internet Service source group name.
InternetServiceSrcId string
Internet Service source ID.
InternetServiceSrcName string
Internet Service source name.
InternetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
IpsVoipFilter string
Name of an existing VoIP (ips) profile.
LearningMode string
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat46 string
Enable/disable NAT46. Valid values: disable, enable.
Nat64 string
Enable/disable NAT64. Valid values: disable, enable.
PackagesFirewallSecuritypolicyId string
an identifier for the resource with format {{policyid}}.
Pkg string
Package.
PkgFolderPath string
Pkg Folder Path.
Policyid double
Policy ID.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
Schedule string
Schedule name.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SctpFilterProfile string
Name of an existing SCTP filter profile.
SendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
Srcaddr string
Source IPv4 address name and address group names.
Srcaddr4 string
Source IPv4 address name and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
Srcaddr6Negate string
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
SrcaddrNegate string
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SslSshProfile string
Name of an existing SSL SSH profile.
Status string
Enable or disable this policy. Valid values: disable, enable.
UrlCategory string
URL category ID list.
Users string
Names of individual users that can authenticate with this policy.
UtmStatus string
Enable security profiles. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VideofilterProfile string
Name of an existing VideoFilter profile.
VirtualPatchProfile string
Name of an existing virtual-patch profile.
VoipProfile string
Name of an existing VoIP profile.
WebfilterProfile string
Name of an existing Web filter profile.
_policyBlock double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
Action string
Policy action (accept/deny). Valid values: deny, accept.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AppCategory string
Application category ID list.
AppGroup string
Application group names.
ApplicationList string
Name of an existing Application list.
Applications []float64
Application ID list.
AvProfile string
Name of an existing Antivirus profile.
CasbProfile string
Name of an existing CASB profile.
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
DiameterFilterProfile string
Name of an existing Diameter filter profile.
DlpProfile string
Name of an existing DLP profile.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
Dstaddr string
Destination IPv4 address name and address group names.
Dstaddr4 string
Destination IPv4 address name and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
Dstaddr6Negate string
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
DstaddrNegate string
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
EmailfilterProfile string
Name of an existing email filter profile.
EnforceDefaultAppPort string
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
FileFilterProfile string
Name of an existing file-filter profile.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
IcapProfile string
Name of an existing ICAP profile.
InternetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
InternetService6 string
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
InternetService6CustomGroups []string
Custom IPv6 Internet Service group name.
InternetService6Customs []string
Custom IPv6 Internet Service name.
InternetService6Groups []string
Internet Service group name.
InternetService6Names []string
IPv6 Internet Service name.
InternetService6Negate string
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
InternetService6Src string
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetService6SrcCustomGroups []string
Custom Internet Service6 source group name.
InternetService6SrcCustoms []string
Custom IPv6 Internet Service source name.
InternetService6SrcGroups []string
Internet Service6 source group name.
InternetService6SrcNames []string
IPv6 Internet Service source name.
InternetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceCustom string
Custom Internet Service name.
InternetServiceCustomGroup string
Custom Internet Service group name.
InternetServiceGroup string
Internet Service group name.
InternetServiceId string
Internet Service ID.
InternetServiceName string
Internet Service name.
InternetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetServiceSrcCustom string
Custom Internet Service source name.
InternetServiceSrcCustomGroup string
Custom Internet Service source group name.
InternetServiceSrcGroup string
Internet Service source group name.
InternetServiceSrcId string
Internet Service source ID.
InternetServiceSrcName string
Internet Service source name.
InternetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
IpsVoipFilter string
Name of an existing VoIP (ips) profile.
LearningMode string
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat46 string
Enable/disable NAT46. Valid values: disable, enable.
Nat64 string
Enable/disable NAT64. Valid values: disable, enable.
PackagesFirewallSecuritypolicyId string
an identifier for the resource with format {{policyid}}.
Pkg string
Package.
PkgFolderPath string
Pkg Folder Path.
Policyid float64
Policy ID.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
Schedule string
Schedule name.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SctpFilterProfile string
Name of an existing SCTP filter profile.
SendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
Srcaddr string
Source IPv4 address name and address group names.
Srcaddr4 string
Source IPv4 address name and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
Srcaddr6Negate string
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
SrcaddrNegate string
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SslSshProfile string
Name of an existing SSL SSH profile.
Status string
Enable or disable this policy. Valid values: disable, enable.
UrlCategory string
URL category ID list.
Users string
Names of individual users that can authenticate with this policy.
UtmStatus string
Enable security profiles. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VideofilterProfile string
Name of an existing VideoFilter profile.
VirtualPatchProfile string
Name of an existing virtual-patch profile.
VoipProfile string
Name of an existing VoIP profile.
WebfilterProfile string
Name of an existing Web filter profile.
_policyBlock float64
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
_policyBlock Double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (accept/deny). Valid values: deny, accept.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory String
Application category ID list.
appGroup String
Application group names.
applicationList String
Name of an existing Application list.
applications List<Double>
Application ID list.
avProfile String
Name of an existing Antivirus profile.
casbProfile String
Name of an existing CASB profile.
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
diameterFilterProfile String
Name of an existing Diameter filter profile.
dlpProfile String
Name of an existing DLP profile.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dstaddr String
Destination IPv4 address name and address group names.
dstaddr4 String
Destination IPv4 address name and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddr6Negate String
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstaddrNegate String
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
emailfilterProfile String
Name of an existing email filter profile.
enforceDefaultAppPort String
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
fileFilterProfile String
Name of an existing file-filter profile.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
icapProfile String
Name of an existing ICAP profile.
internetService String
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetService6 String
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
internetService6CustomGroups List<String>
Custom IPv6 Internet Service group name.
internetService6Customs List<String>
Custom IPv6 Internet Service name.
internetService6Groups List<String>
Internet Service group name.
internetService6Names List<String>
IPv6 Internet Service name.
internetService6Negate String
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
internetService6Src String
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetService6SrcCustomGroups List<String>
Custom Internet Service6 source group name.
internetService6SrcCustoms List<String>
Custom IPv6 Internet Service source name.
internetService6SrcGroups List<String>
Internet Service6 source group name.
internetService6SrcNames List<String>
IPv6 Internet Service source name.
internetService6SrcNegate String
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
internetServiceCustom String
Custom Internet Service name.
internetServiceCustomGroup String
Custom Internet Service group name.
internetServiceGroup String
Internet Service group name.
internetServiceId String
Internet Service ID.
internetServiceName String
Internet Service name.
internetServiceNegate String
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc String
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom String
Custom Internet Service source name.
internetServiceSrcCustomGroup String
Custom Internet Service source group name.
internetServiceSrcGroup String
Internet Service source group name.
internetServiceSrcId String
Internet Service source ID.
internetServiceSrcName String
Internet Service source name.
internetServiceSrcNegate String
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
ipsVoipFilter String
Name of an existing VoIP (ips) profile.
learningMode String
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat46 String
Enable/disable NAT46. Valid values: disable, enable.
nat64 String
Enable/disable NAT64. Valid values: disable, enable.
packagesFirewallSecuritypolicyId String
an identifier for the resource with format {{policyid}}.
pkg String
Package.
pkgFolderPath String
Pkg Folder Path.
policyid Double
Policy ID.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule String
Schedule name.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sctpFilterProfile String
Name of an existing SCTP filter profile.
sendDenyPacket String
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr String
Source IPv4 address name and address group names.
srcaddr4 String
Source IPv4 address name and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddr6Negate String
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcaddrNegate String
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sslSshProfile String
Name of an existing SSL SSH profile.
status String
Enable or disable this policy. Valid values: disable, enable.
urlCategory String
URL category ID list.
users String
Names of individual users that can authenticate with this policy.
utmStatus String
Enable security profiles. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
videofilterProfile String
Name of an existing VideoFilter profile.
virtualPatchProfile String
Name of an existing virtual-patch profile.
voipProfile String
Name of an existing VoIP profile.
webfilterProfile String
Name of an existing Web filter profile.
_policyBlock number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action string
Policy action (accept/deny). Valid values: deny, accept.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory string
Application category ID list.
appGroup string
Application group names.
applicationList string
Name of an existing Application list.
applications number[]
Application ID list.
avProfile string
Name of an existing Antivirus profile.
casbProfile string
Name of an existing CASB profile.
cifsProfile string
Name of an existing CIFS profile.
comments string
Comment.
diameterFilterProfile string
Name of an existing Diameter filter profile.
dlpProfile string
Name of an existing DLP profile.
dlpSensor string
Name of an existing DLP sensor.
dnsfilterProfile string
Name of an existing DNS filter profile.
dstaddr string
Destination IPv4 address name and address group names.
dstaddr4 string
Destination IPv4 address name and address group names.
dstaddr6 string
Destination IPv6 address name and address group names.
dstaddr6Negate string
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstaddrNegate string
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf string
Outgoing (egress) interface.
emailfilterProfile string
Name of an existing email filter profile.
enforceDefaultAppPort string
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
fileFilterProfile string
Name of an existing file-filter profile.
fssoGroups string
Names of FSSO groups.
globalLabel string
Label for the policy that appears when the GUI is in Global View mode.
groups string
Names of user groups that can authenticate with this policy.
icapProfile string
Name of an existing ICAP profile.
internetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetService6 string
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
internetService6CustomGroups string[]
Custom IPv6 Internet Service group name.
internetService6Customs string[]
Custom IPv6 Internet Service name.
internetService6Groups string[]
Internet Service group name.
internetService6Names string[]
IPv6 Internet Service name.
internetService6Negate string
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
internetService6Src string
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetService6SrcCustomGroups string[]
Custom Internet Service6 source group name.
internetService6SrcCustoms string[]
Custom IPv6 Internet Service source name.
internetService6SrcGroups string[]
Internet Service6 source group name.
internetService6SrcNames string[]
IPv6 Internet Service source name.
internetService6SrcNegate string
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
internetServiceCustom string
Custom Internet Service name.
internetServiceCustomGroup string
Custom Internet Service group name.
internetServiceGroup string
Internet Service group name.
internetServiceId string
Internet Service ID.
internetServiceName string
Internet Service name.
internetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom string
Custom Internet Service source name.
internetServiceSrcCustomGroup string
Custom Internet Service source group name.
internetServiceSrcGroup string
Internet Service source group name.
internetServiceSrcId string
Internet Service source ID.
internetServiceSrcName string
Internet Service source name.
internetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ipsSensor string
Name of an existing IPS sensor.
ipsVoipFilter string
Name of an existing VoIP (ips) profile.
learningMode string
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
mmsProfile string
Name of an existing MMS profile.
name string
Policy name.
nat46 string
Enable/disable NAT46. Valid values: disable, enable.
nat64 string
Enable/disable NAT64. Valid values: disable, enable.
packagesFirewallSecuritypolicyId string
an identifier for the resource with format {{policyid}}.
pkg string
Package.
pkgFolderPath string
Pkg Folder Path.
policyid number
Policy ID.
profileGroup string
Name of profile group.
profileProtocolOptions string
Name of an existing Protocol options profile.
profileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule string
Schedule name.
scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sctpFilterProfile string
Name of an existing SCTP filter profile.
sendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service string
Service and service group names.
serviceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr string
Source IPv4 address name and address group names.
srcaddr4 string
Source IPv4 address name and address group names.
srcaddr6 string
Source IPv6 address name and address group names.
srcaddr6Negate string
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcaddrNegate string
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcintf string
Incoming (ingress) interface.
sshFilterProfile string
Name of an existing SSH filter profile.
sslSshProfile string
Name of an existing SSL SSH profile.
status string
Enable or disable this policy. Valid values: disable, enable.
urlCategory string
URL category ID list.
users string
Names of individual users that can authenticate with this policy.
utmStatus string
Enable security profiles. Valid values: disable, enable.
uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
videofilterProfile string
Name of an existing VideoFilter profile.
virtualPatchProfile string
Name of an existing virtual-patch profile.
voipProfile string
Name of an existing VoIP profile.
webfilterProfile string
Name of an existing Web filter profile.
_policy_block float
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action str
Policy action (accept/deny). Valid values: deny, accept.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
app_category str
Application category ID list.
app_group str
Application group names.
application_list str
Name of an existing Application list.
applications Sequence[float]
Application ID list.
av_profile str
Name of an existing Antivirus profile.
casb_profile str
Name of an existing CASB profile.
cifs_profile str
Name of an existing CIFS profile.
comments str
Comment.
diameter_filter_profile str
Name of an existing Diameter filter profile.
dlp_profile str
Name of an existing DLP profile.
dlp_sensor str
Name of an existing DLP sensor.
dnsfilter_profile str
Name of an existing DNS filter profile.
dstaddr str
Destination IPv4 address name and address group names.
dstaddr4 str
Destination IPv4 address name and address group names.
dstaddr6 str
Destination IPv6 address name and address group names.
dstaddr6_negate str
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstaddr_negate str
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf str
Outgoing (egress) interface.
emailfilter_profile str
Name of an existing email filter profile.
enforce_default_app_port str
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
file_filter_profile str
Name of an existing file-filter profile.
fsso_groups str
Names of FSSO groups.
global_label str
Label for the policy that appears when the GUI is in Global View mode.
groups str
Names of user groups that can authenticate with this policy.
icap_profile str
Name of an existing ICAP profile.
internet_service str
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internet_service6 str
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
internet_service6_custom_groups Sequence[str]
Custom IPv6 Internet Service group name.
internet_service6_customs Sequence[str]
Custom IPv6 Internet Service name.
internet_service6_groups Sequence[str]
Internet Service group name.
internet_service6_names Sequence[str]
IPv6 Internet Service name.
internet_service6_negate str
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
internet_service6_src str
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internet_service6_src_custom_groups Sequence[str]
Custom Internet Service6 source group name.
internet_service6_src_customs Sequence[str]
Custom IPv6 Internet Service source name.
internet_service6_src_groups Sequence[str]
Internet Service6 source group name.
internet_service6_src_names Sequence[str]
IPv6 Internet Service source name.
internet_service6_src_negate str
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
internet_service_custom str
Custom Internet Service name.
internet_service_custom_group str
Custom Internet Service group name.
internet_service_group str
Internet Service group name.
internet_service_id str
Internet Service ID.
internet_service_name str
Internet Service name.
internet_service_negate str
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internet_service_src str
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internet_service_src_custom str
Custom Internet Service source name.
internet_service_src_custom_group str
Custom Internet Service source group name.
internet_service_src_group str
Internet Service source group name.
internet_service_src_id str
Internet Service source ID.
internet_service_src_name str
Internet Service source name.
internet_service_src_negate str
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ips_sensor str
Name of an existing IPS sensor.
ips_voip_filter str
Name of an existing VoIP (ips) profile.
learning_mode str
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
logtraffic str
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtraffic_start str
Record logs when a session starts. Valid values: disable, enable.
mms_profile str
Name of an existing MMS profile.
name str
Policy name.
nat46 str
Enable/disable NAT46. Valid values: disable, enable.
nat64 str
Enable/disable NAT64. Valid values: disable, enable.
packages_firewall_securitypolicy_id str
an identifier for the resource with format {{policyid}}.
pkg str
Package.
pkg_folder_path str
Pkg Folder Path.
policyid float
Policy ID.
profile_group str
Name of profile group.
profile_protocol_options str
Name of an existing Protocol options profile.
profile_type str
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule str
Schedule name.
scopetype str
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sctp_filter_profile str
Name of an existing SCTP filter profile.
send_deny_packet str
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service str
Service and service group names.
service_negate str
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr str
Source IPv4 address name and address group names.
srcaddr4 str
Source IPv4 address name and address group names.
srcaddr6 str
Source IPv6 address name and address group names.
srcaddr6_negate str
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcaddr_negate str
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcintf str
Incoming (ingress) interface.
ssh_filter_profile str
Name of an existing SSH filter profile.
ssl_ssh_profile str
Name of an existing SSL SSH profile.
status str
Enable or disable this policy. Valid values: disable, enable.
url_category str
URL category ID list.
users str
Names of individual users that can authenticate with this policy.
utm_status str
Enable security profiles. Valid values: disable, enable.
uuid str
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
videofilter_profile str
Name of an existing VideoFilter profile.
virtual_patch_profile str
Name of an existing virtual-patch profile.
voip_profile str
Name of an existing VoIP profile.
webfilter_profile str
Name of an existing Web filter profile.
_policyBlock Number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (accept/deny). Valid values: deny, accept.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory String
Application category ID list.
appGroup String
Application group names.
applicationList String
Name of an existing Application list.
applications List<Number>
Application ID list.
avProfile String
Name of an existing Antivirus profile.
casbProfile String
Name of an existing CASB profile.
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
diameterFilterProfile String
Name of an existing Diameter filter profile.
dlpProfile String
Name of an existing DLP profile.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dstaddr String
Destination IPv4 address name and address group names.
dstaddr4 String
Destination IPv4 address name and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddr6Negate String
When enabled dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstaddrNegate String
When enabled dstaddr/dstaddr6 specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
emailfilterProfile String
Name of an existing email filter profile.
enforceDefaultAppPort String
Enable/disable default application port enforcement for allowed applications. Valid values: disable, enable.
fileFilterProfile String
Name of an existing file-filter profile.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
icapProfile String
Name of an existing ICAP profile.
internetService String
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetService6 String
Enable/disable use of IPv6 Internet Services for this policy. If enabled, destination address, service and default application port enforcement are not used. Valid values: disable, enable.
internetService6CustomGroups List<String>
Custom IPv6 Internet Service group name.
internetService6Customs List<String>
Custom IPv6 Internet Service name.
internetService6Groups List<String>
Internet Service group name.
internetService6Names List<String>
IPv6 Internet Service name.
internetService6Negate String
When enabled internet-service6 specifies what the service must NOT be. Valid values: disable, enable.
internetService6Src String
Enable/disable use of IPv6 Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetService6SrcCustomGroups List<String>
Custom Internet Service6 source group name.
internetService6SrcCustoms List<String>
Custom IPv6 Internet Service source name.
internetService6SrcGroups List<String>
Internet Service6 source group name.
internetService6SrcNames List<String>
IPv6 Internet Service source name.
internetService6SrcNegate String
When enabled internet-service6-src specifies what the service must NOT be. Valid values: disable, enable.
internetServiceCustom String
Custom Internet Service name.
internetServiceCustomGroup String
Custom Internet Service group name.
internetServiceGroup String
Internet Service group name.
internetServiceId String
Internet Service ID.
internetServiceName String
Internet Service name.
internetServiceNegate String
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc String
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom String
Custom Internet Service source name.
internetServiceSrcCustomGroup String
Custom Internet Service source group name.
internetServiceSrcGroup String
Internet Service source group name.
internetServiceSrcId String
Internet Service source ID.
internetServiceSrcName String
Internet Service source name.
internetServiceSrcNegate String
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
ipsVoipFilter String
Name of an existing VoIP (ips) profile.
learningMode String
Enable to allow everything, but log all of the meaningful data for security information gathering. A learning report will be generated. Valid values: disable, enable.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat46 String
Enable/disable NAT46. Valid values: disable, enable.
nat64 String
Enable/disable NAT64. Valid values: disable, enable.
packagesFirewallSecuritypolicyId String
an identifier for the resource with format {{policyid}}.
pkg String
Package.
pkgFolderPath String
Pkg Folder Path.
policyid Number
Policy ID.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule String
Schedule name.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sctpFilterProfile String
Name of an existing SCTP filter profile.
sendDenyPacket String
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr String
Source IPv4 address name and address group names.
srcaddr4 String
Source IPv4 address name and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddr6Negate String
When enabled srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcaddrNegate String
When enabled srcaddr/srcaddr6 specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sslSshProfile String
Name of an existing SSL SSH profile.
status String
Enable or disable this policy. Valid values: disable, enable.
urlCategory String
URL category ID list.
users String
Names of individual users that can authenticate with this policy.
utmStatus String
Enable security profiles. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
videofilterProfile String
Name of an existing VideoFilter profile.
virtualPatchProfile String
Name of an existing virtual-patch profile.
voipProfile String
Name of an existing VoIP profile.
webfilterProfile String
Name of an existing Web filter profile.

Import

Packages FirewallSecurityPolicy can be imported using any of these accepted formats:

Set import_options = [“pkg_folder_path=YOUR_VALUE”, “pkg=YOUR_VALUE”] in the provider section.

$ export “FORTIMANAGER_IMPORT_TABLE”=“true”

$ pulumi import fortimanager:index/packagesFirewallSecuritypolicy:PackagesFirewallSecuritypolicy labelname {{policyid}}
Copy

$ unset “FORTIMANAGER_IMPORT_TABLE”

-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortimanager fortinetdev/terraform-provider-fortimanager
License
Notes
This Pulumi package is based on the fortimanager Terraform Provider.
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager