Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. PackagesGlobalHeaderPolicy6
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.PackagesGlobalHeaderPolicy6

Explore with Pulumi AI

fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

Configure IPv6 policies.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";

const labelname = new fortimanager.PackagesGlobalHeaderPolicy6("labelname", {
    action: "accept",
    comments: "terraform-comment",
    dstaddr: "gall",
    dstintf: "any",
    pkg: "default",
    schedule: "galways",
    service: "gALL",
    srcaddr: "gall",
    srcintf: "any",
    status: "disable",
});
Copy
import pulumi
import pulumi_fortimanager as fortimanager

labelname = fortimanager.PackagesGlobalHeaderPolicy6("labelname",
    action="accept",
    comments="terraform-comment",
    dstaddr="gall",
    dstintf="any",
    pkg="default",
    schedule="galways",
    service="gALL",
    srcaddr="gall",
    srcintf="any",
    status="disable")
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := fortimanager.NewPackagesGlobalHeaderPolicy6(ctx, "labelname", &fortimanager.PackagesGlobalHeaderPolicy6Args{
			Action:   pulumi.String("accept"),
			Comments: pulumi.String("terraform-comment"),
			Dstaddr:  pulumi.String("gall"),
			Dstintf:  pulumi.String("any"),
			Pkg:      pulumi.String("default"),
			Schedule: pulumi.String("galways"),
			Service:  pulumi.String("gALL"),
			Srcaddr:  pulumi.String("gall"),
			Srcintf:  pulumi.String("any"),
			Status:   pulumi.String("disable"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;

return await Deployment.RunAsync(() => 
{
    var labelname = new Fortimanager.PackagesGlobalHeaderPolicy6("labelname", new()
    {
        Action = "accept",
        Comments = "terraform-comment",
        Dstaddr = "gall",
        Dstintf = "any",
        Pkg = "default",
        Schedule = "galways",
        Service = "gALL",
        Srcaddr = "gall",
        Srcintf = "any",
        Status = "disable",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.PackagesGlobalHeaderPolicy6;
import com.pulumi.fortimanager.PackagesGlobalHeaderPolicy6Args;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var labelname = new PackagesGlobalHeaderPolicy6("labelname", PackagesGlobalHeaderPolicy6Args.builder()
            .action("accept")
            .comments("terraform-comment")
            .dstaddr("gall")
            .dstintf("any")
            .pkg("default")
            .schedule("galways")
            .service("gALL")
            .srcaddr("gall")
            .srcintf("any")
            .status("disable")
            .build());

    }
}
Copy
resources:
  labelname:
    type: fortimanager:PackagesGlobalHeaderPolicy6
    properties:
      action: accept
      comments: terraform-comment
      dstaddr: gall
      dstintf: any
      pkg: default
      schedule: galways
      service: gALL
      srcaddr: gall
      srcintf: any
      status: disable
Copy

Create PackagesGlobalHeaderPolicy6 Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PackagesGlobalHeaderPolicy6(name: string, args: PackagesGlobalHeaderPolicy6Args, opts?: CustomResourceOptions);
@overload
def PackagesGlobalHeaderPolicy6(resource_name: str,
                                args: PackagesGlobalHeaderPolicy6Args,
                                opts: Optional[ResourceOptions] = None)

@overload
def PackagesGlobalHeaderPolicy6(resource_name: str,
                                opts: Optional[ResourceOptions] = None,
                                pkg: Optional[str] = None,
                                _policy_block: Optional[float] = None,
                                action: Optional[str] = None,
                                anti_replay: Optional[str] = None,
                                app_category: Optional[str] = None,
                                app_group: Optional[str] = None,
                                application_charts: Optional[Sequence[str]] = None,
                                application_list: Optional[str] = None,
                                applications: Optional[Sequence[float]] = None,
                                auto_asic_offload: Optional[str] = None,
                                av_profile: Optional[str] = None,
                                casi_profile: Optional[str] = None,
                                cgn_log_server_grp: Optional[str] = None,
                                cifs_profile: Optional[str] = None,
                                comments: Optional[str] = None,
                                custom_log_fields: Optional[str] = None,
                                decrypted_traffic_mirror: Optional[str] = None,
                                deep_inspection_options: Optional[str] = None,
                                device_detection_portal: Optional[str] = None,
                                devices: Optional[str] = None,
                                diffserv_forward: Optional[str] = None,
                                diffserv_reverse: Optional[str] = None,
                                diffservcode_forward: Optional[str] = None,
                                diffservcode_rev: Optional[str] = None,
                                dlp_sensor: Optional[str] = None,
                                dnsfilter_profile: Optional[str] = None,
                                dscp_match: Optional[str] = None,
                                dscp_negate: Optional[str] = None,
                                dscp_value: Optional[str] = None,
                                dsri: Optional[str] = None,
                                dstaddr: Optional[str] = None,
                                dstaddr_negate: Optional[str] = None,
                                dstintf: Optional[str] = None,
                                dynamic_profile: Optional[str] = None,
                                dynamic_profile_accesses: Optional[Sequence[str]] = None,
                                dynamic_profile_group: Optional[str] = None,
                                email_collection_portal: Optional[str] = None,
                                emailfilter_profile: Optional[str] = None,
                                file_filter_profile: Optional[str] = None,
                                firewall_session_dirty: Optional[str] = None,
                                fixedport: Optional[str] = None,
                                fsae: Optional[str] = None,
                                fsso_groups: Optional[str] = None,
                                global_label: Optional[str] = None,
                                groups: Optional[str] = None,
                                http_policy_redirect: Optional[str] = None,
                                icap_profile: Optional[str] = None,
                                identity_based: Optional[str] = None,
                                identity_from: Optional[str] = None,
                                inbound: Optional[str] = None,
                                inspection_mode: Optional[str] = None,
                                ippool: Optional[str] = None,
                                ips_sensor: Optional[str] = None,
                                label: Optional[str] = None,
                                logtraffic: Optional[str] = None,
                                logtraffic_start: Optional[str] = None,
                                mms_profile: Optional[str] = None,
                                name: Optional[str] = None,
                                nat: Optional[str] = None,
                                natinbound: Optional[str] = None,
                                natoutbound: Optional[str] = None,
                                np_accelation: Optional[str] = None,
                                np_acceleration: Optional[str] = None,
                                outbound: Optional[str] = None,
                                packages_global_header_policy6_id: Optional[str] = None,
                                per_ip_shaper: Optional[str] = None,
                                pkg_folder_path: Optional[str] = None,
                                policy_offload: Optional[str] = None,
                                policyid: Optional[float] = None,
                                poolname: Optional[str] = None,
                                profile_group: Optional[str] = None,
                                profile_protocol_options: Optional[str] = None,
                                profile_type: Optional[str] = None,
                                replacemsg_group: Optional[str] = None,
                                replacemsg_override_group: Optional[str] = None,
                                rsso: Optional[str] = None,
                                schedule: Optional[str] = None,
                                send_deny_packet: Optional[str] = None,
                                service: Optional[str] = None,
                                service_negate: Optional[str] = None,
                                session_ttl: Optional[str] = None,
                                spamfilter_profile: Optional[str] = None,
                                srcaddr: Optional[str] = None,
                                srcaddr_negate: Optional[str] = None,
                                srcintf: Optional[str] = None,
                                ssh_filter_profile: Optional[str] = None,
                                ssh_policy_redirect: Optional[str] = None,
                                ssl_mirror: Optional[str] = None,
                                ssl_mirror_intf: Optional[str] = None,
                                ssl_ssh_profile: Optional[str] = None,
                                sslvpn_auth: Optional[str] = None,
                                sslvpn_ccert: Optional[str] = None,
                                sslvpn_cipher: Optional[str] = None,
                                status: Optional[str] = None,
                                tags: Optional[str] = None,
                                tcp_mss_receiver: Optional[float] = None,
                                tcp_mss_sender: Optional[float] = None,
                                tcp_session_without_syn: Optional[str] = None,
                                timeout_send_rst: Optional[str] = None,
                                tos: Optional[str] = None,
                                tos_mask: Optional[str] = None,
                                tos_negate: Optional[str] = None,
                                traffic_shaper: Optional[str] = None,
                                traffic_shaper_reverse: Optional[str] = None,
                                url_category: Optional[str] = None,
                                users: Optional[str] = None,
                                utm_inspection_mode: Optional[str] = None,
                                utm_status: Optional[str] = None,
                                uuid: Optional[str] = None,
                                vlan_cos_fwd: Optional[float] = None,
                                vlan_cos_rev: Optional[float] = None,
                                vlan_filter: Optional[str] = None,
                                voip_profile: Optional[str] = None,
                                vpntunnel: Optional[str] = None,
                                waf_profile: Optional[str] = None,
                                webcache: Optional[str] = None,
                                webcache_https: Optional[str] = None,
                                webfilter_profile: Optional[str] = None,
                                webproxy_forward_server: Optional[str] = None,
                                webproxy_profile: Optional[str] = None)
func NewPackagesGlobalHeaderPolicy6(ctx *Context, name string, args PackagesGlobalHeaderPolicy6Args, opts ...ResourceOption) (*PackagesGlobalHeaderPolicy6, error)
public PackagesGlobalHeaderPolicy6(string name, PackagesGlobalHeaderPolicy6Args args, CustomResourceOptions? opts = null)
public PackagesGlobalHeaderPolicy6(String name, PackagesGlobalHeaderPolicy6Args args)
public PackagesGlobalHeaderPolicy6(String name, PackagesGlobalHeaderPolicy6Args args, CustomResourceOptions options)

type: fortimanager:PackagesGlobalHeaderPolicy6
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. PackagesGlobalHeaderPolicy6Args
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. PackagesGlobalHeaderPolicy6Args
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. PackagesGlobalHeaderPolicy6Args
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. PackagesGlobalHeaderPolicy6Args
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. PackagesGlobalHeaderPolicy6Args
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var packagesGlobalHeaderPolicy6Resource = new Fortimanager.PackagesGlobalHeaderPolicy6("packagesGlobalHeaderPolicy6Resource", new()
{
    Pkg = "string",
    _policyBlock = 0,
    Action = "string",
    AntiReplay = "string",
    AppCategory = "string",
    AppGroup = "string",
    ApplicationCharts = new[]
    {
        "string",
    },
    ApplicationList = "string",
    Applications = new[]
    {
        0,
    },
    AutoAsicOffload = "string",
    AvProfile = "string",
    CasiProfile = "string",
    CgnLogServerGrp = "string",
    CifsProfile = "string",
    Comments = "string",
    CustomLogFields = "string",
    DecryptedTrafficMirror = "string",
    DeepInspectionOptions = "string",
    DeviceDetectionPortal = "string",
    Devices = "string",
    DiffservForward = "string",
    DiffservReverse = "string",
    DiffservcodeForward = "string",
    DiffservcodeRev = "string",
    DlpSensor = "string",
    DnsfilterProfile = "string",
    DscpMatch = "string",
    DscpNegate = "string",
    DscpValue = "string",
    Dsri = "string",
    Dstaddr = "string",
    DstaddrNegate = "string",
    Dstintf = "string",
    DynamicProfile = "string",
    DynamicProfileAccesses = new[]
    {
        "string",
    },
    DynamicProfileGroup = "string",
    EmailCollectionPortal = "string",
    EmailfilterProfile = "string",
    FileFilterProfile = "string",
    FirewallSessionDirty = "string",
    Fixedport = "string",
    Fsae = "string",
    FssoGroups = "string",
    GlobalLabel = "string",
    Groups = "string",
    HttpPolicyRedirect = "string",
    IcapProfile = "string",
    IdentityBased = "string",
    IdentityFrom = "string",
    Inbound = "string",
    InspectionMode = "string",
    Ippool = "string",
    IpsSensor = "string",
    Label = "string",
    Logtraffic = "string",
    LogtrafficStart = "string",
    MmsProfile = "string",
    Name = "string",
    Nat = "string",
    Natinbound = "string",
    Natoutbound = "string",
    NpAccelation = "string",
    NpAcceleration = "string",
    Outbound = "string",
    PackagesGlobalHeaderPolicy6Id = "string",
    PerIpShaper = "string",
    PkgFolderPath = "string",
    PolicyOffload = "string",
    Policyid = 0,
    Poolname = "string",
    ProfileGroup = "string",
    ProfileProtocolOptions = "string",
    ProfileType = "string",
    ReplacemsgGroup = "string",
    ReplacemsgOverrideGroup = "string",
    Rsso = "string",
    Schedule = "string",
    SendDenyPacket = "string",
    Service = "string",
    ServiceNegate = "string",
    SessionTtl = "string",
    SpamfilterProfile = "string",
    Srcaddr = "string",
    SrcaddrNegate = "string",
    Srcintf = "string",
    SshFilterProfile = "string",
    SshPolicyRedirect = "string",
    SslMirror = "string",
    SslMirrorIntf = "string",
    SslSshProfile = "string",
    SslvpnAuth = "string",
    SslvpnCcert = "string",
    SslvpnCipher = "string",
    Status = "string",
    Tags = "string",
    TcpMssReceiver = 0,
    TcpMssSender = 0,
    TcpSessionWithoutSyn = "string",
    TimeoutSendRst = "string",
    Tos = "string",
    TosMask = "string",
    TosNegate = "string",
    TrafficShaper = "string",
    TrafficShaperReverse = "string",
    UrlCategory = "string",
    Users = "string",
    UtmInspectionMode = "string",
    UtmStatus = "string",
    Uuid = "string",
    VlanCosFwd = 0,
    VlanCosRev = 0,
    VlanFilter = "string",
    VoipProfile = "string",
    Vpntunnel = "string",
    WafProfile = "string",
    Webcache = "string",
    WebcacheHttps = "string",
    WebfilterProfile = "string",
    WebproxyForwardServer = "string",
    WebproxyProfile = "string",
});
Copy
example, err := fortimanager.NewPackagesGlobalHeaderPolicy6(ctx, "packagesGlobalHeaderPolicy6Resource", &fortimanager.PackagesGlobalHeaderPolicy6Args{
Pkg: pulumi.String("string"),
_policyBlock: pulumi.Float64(0),
Action: pulumi.String("string"),
AntiReplay: pulumi.String("string"),
AppCategory: pulumi.String("string"),
AppGroup: pulumi.String("string"),
ApplicationCharts: pulumi.StringArray{
pulumi.String("string"),
},
ApplicationList: pulumi.String("string"),
Applications: pulumi.Float64Array{
pulumi.Float64(0),
},
AutoAsicOffload: pulumi.String("string"),
AvProfile: pulumi.String("string"),
CasiProfile: pulumi.String("string"),
CgnLogServerGrp: pulumi.String("string"),
CifsProfile: pulumi.String("string"),
Comments: pulumi.String("string"),
CustomLogFields: pulumi.String("string"),
DecryptedTrafficMirror: pulumi.String("string"),
DeepInspectionOptions: pulumi.String("string"),
DeviceDetectionPortal: pulumi.String("string"),
Devices: pulumi.String("string"),
DiffservForward: pulumi.String("string"),
DiffservReverse: pulumi.String("string"),
DiffservcodeForward: pulumi.String("string"),
DiffservcodeRev: pulumi.String("string"),
DlpSensor: pulumi.String("string"),
DnsfilterProfile: pulumi.String("string"),
DscpMatch: pulumi.String("string"),
DscpNegate: pulumi.String("string"),
DscpValue: pulumi.String("string"),
Dsri: pulumi.String("string"),
Dstaddr: pulumi.String("string"),
DstaddrNegate: pulumi.String("string"),
Dstintf: pulumi.String("string"),
DynamicProfile: pulumi.String("string"),
DynamicProfileAccesses: pulumi.StringArray{
pulumi.String("string"),
},
DynamicProfileGroup: pulumi.String("string"),
EmailCollectionPortal: pulumi.String("string"),
EmailfilterProfile: pulumi.String("string"),
FileFilterProfile: pulumi.String("string"),
FirewallSessionDirty: pulumi.String("string"),
Fixedport: pulumi.String("string"),
Fsae: pulumi.String("string"),
FssoGroups: pulumi.String("string"),
GlobalLabel: pulumi.String("string"),
Groups: pulumi.String("string"),
HttpPolicyRedirect: pulumi.String("string"),
IcapProfile: pulumi.String("string"),
IdentityBased: pulumi.String("string"),
IdentityFrom: pulumi.String("string"),
Inbound: pulumi.String("string"),
InspectionMode: pulumi.String("string"),
Ippool: pulumi.String("string"),
IpsSensor: pulumi.String("string"),
Label: pulumi.String("string"),
Logtraffic: pulumi.String("string"),
LogtrafficStart: pulumi.String("string"),
MmsProfile: pulumi.String("string"),
Name: pulumi.String("string"),
Nat: pulumi.String("string"),
Natinbound: pulumi.String("string"),
Natoutbound: pulumi.String("string"),
NpAccelation: pulumi.String("string"),
NpAcceleration: pulumi.String("string"),
Outbound: pulumi.String("string"),
PackagesGlobalHeaderPolicy6Id: pulumi.String("string"),
PerIpShaper: pulumi.String("string"),
PkgFolderPath: pulumi.String("string"),
PolicyOffload: pulumi.String("string"),
Policyid: pulumi.Float64(0),
Poolname: pulumi.String("string"),
ProfileGroup: pulumi.String("string"),
ProfileProtocolOptions: pulumi.String("string"),
ProfileType: pulumi.String("string"),
ReplacemsgGroup: pulumi.String("string"),
ReplacemsgOverrideGroup: pulumi.String("string"),
Rsso: pulumi.String("string"),
Schedule: pulumi.String("string"),
SendDenyPacket: pulumi.String("string"),
Service: pulumi.String("string"),
ServiceNegate: pulumi.String("string"),
SessionTtl: pulumi.String("string"),
SpamfilterProfile: pulumi.String("string"),
Srcaddr: pulumi.String("string"),
SrcaddrNegate: pulumi.String("string"),
Srcintf: pulumi.String("string"),
SshFilterProfile: pulumi.String("string"),
SshPolicyRedirect: pulumi.String("string"),
SslMirror: pulumi.String("string"),
SslMirrorIntf: pulumi.String("string"),
SslSshProfile: pulumi.String("string"),
SslvpnAuth: pulumi.String("string"),
SslvpnCcert: pulumi.String("string"),
SslvpnCipher: pulumi.String("string"),
Status: pulumi.String("string"),
Tags: pulumi.String("string"),
TcpMssReceiver: pulumi.Float64(0),
TcpMssSender: pulumi.Float64(0),
TcpSessionWithoutSyn: pulumi.String("string"),
TimeoutSendRst: pulumi.String("string"),
Tos: pulumi.String("string"),
TosMask: pulumi.String("string"),
TosNegate: pulumi.String("string"),
TrafficShaper: pulumi.String("string"),
TrafficShaperReverse: pulumi.String("string"),
UrlCategory: pulumi.String("string"),
Users: pulumi.String("string"),
UtmInspectionMode: pulumi.String("string"),
UtmStatus: pulumi.String("string"),
Uuid: pulumi.String("string"),
VlanCosFwd: pulumi.Float64(0),
VlanCosRev: pulumi.Float64(0),
VlanFilter: pulumi.String("string"),
VoipProfile: pulumi.String("string"),
Vpntunnel: pulumi.String("string"),
WafProfile: pulumi.String("string"),
Webcache: pulumi.String("string"),
WebcacheHttps: pulumi.String("string"),
WebfilterProfile: pulumi.String("string"),
WebproxyForwardServer: pulumi.String("string"),
WebproxyProfile: pulumi.String("string"),
})
Copy
var packagesGlobalHeaderPolicy6Resource = new PackagesGlobalHeaderPolicy6("packagesGlobalHeaderPolicy6Resource", PackagesGlobalHeaderPolicy6Args.builder()
    .pkg("string")
    ._policyBlock(0)
    .action("string")
    .antiReplay("string")
    .appCategory("string")
    .appGroup("string")
    .applicationCharts("string")
    .applicationList("string")
    .applications(0)
    .autoAsicOffload("string")
    .avProfile("string")
    .casiProfile("string")
    .cgnLogServerGrp("string")
    .cifsProfile("string")
    .comments("string")
    .customLogFields("string")
    .decryptedTrafficMirror("string")
    .deepInspectionOptions("string")
    .deviceDetectionPortal("string")
    .devices("string")
    .diffservForward("string")
    .diffservReverse("string")
    .diffservcodeForward("string")
    .diffservcodeRev("string")
    .dlpSensor("string")
    .dnsfilterProfile("string")
    .dscpMatch("string")
    .dscpNegate("string")
    .dscpValue("string")
    .dsri("string")
    .dstaddr("string")
    .dstaddrNegate("string")
    .dstintf("string")
    .dynamicProfile("string")
    .dynamicProfileAccesses("string")
    .dynamicProfileGroup("string")
    .emailCollectionPortal("string")
    .emailfilterProfile("string")
    .fileFilterProfile("string")
    .firewallSessionDirty("string")
    .fixedport("string")
    .fsae("string")
    .fssoGroups("string")
    .globalLabel("string")
    .groups("string")
    .httpPolicyRedirect("string")
    .icapProfile("string")
    .identityBased("string")
    .identityFrom("string")
    .inbound("string")
    .inspectionMode("string")
    .ippool("string")
    .ipsSensor("string")
    .label("string")
    .logtraffic("string")
    .logtrafficStart("string")
    .mmsProfile("string")
    .name("string")
    .nat("string")
    .natinbound("string")
    .natoutbound("string")
    .npAccelation("string")
    .npAcceleration("string")
    .outbound("string")
    .packagesGlobalHeaderPolicy6Id("string")
    .perIpShaper("string")
    .pkgFolderPath("string")
    .policyOffload("string")
    .policyid(0)
    .poolname("string")
    .profileGroup("string")
    .profileProtocolOptions("string")
    .profileType("string")
    .replacemsgGroup("string")
    .replacemsgOverrideGroup("string")
    .rsso("string")
    .schedule("string")
    .sendDenyPacket("string")
    .service("string")
    .serviceNegate("string")
    .sessionTtl("string")
    .spamfilterProfile("string")
    .srcaddr("string")
    .srcaddrNegate("string")
    .srcintf("string")
    .sshFilterProfile("string")
    .sshPolicyRedirect("string")
    .sslMirror("string")
    .sslMirrorIntf("string")
    .sslSshProfile("string")
    .sslvpnAuth("string")
    .sslvpnCcert("string")
    .sslvpnCipher("string")
    .status("string")
    .tags("string")
    .tcpMssReceiver(0)
    .tcpMssSender(0)
    .tcpSessionWithoutSyn("string")
    .timeoutSendRst("string")
    .tos("string")
    .tosMask("string")
    .tosNegate("string")
    .trafficShaper("string")
    .trafficShaperReverse("string")
    .urlCategory("string")
    .users("string")
    .utmInspectionMode("string")
    .utmStatus("string")
    .uuid("string")
    .vlanCosFwd(0)
    .vlanCosRev(0)
    .vlanFilter("string")
    .voipProfile("string")
    .vpntunnel("string")
    .wafProfile("string")
    .webcache("string")
    .webcacheHttps("string")
    .webfilterProfile("string")
    .webproxyForwardServer("string")
    .webproxyProfile("string")
    .build());
Copy
packages_global_header_policy6_resource = fortimanager.PackagesGlobalHeaderPolicy6("packagesGlobalHeaderPolicy6Resource",
    pkg="string",
    _policy_block=0,
    action="string",
    anti_replay="string",
    app_category="string",
    app_group="string",
    application_charts=["string"],
    application_list="string",
    applications=[0],
    auto_asic_offload="string",
    av_profile="string",
    casi_profile="string",
    cgn_log_server_grp="string",
    cifs_profile="string",
    comments="string",
    custom_log_fields="string",
    decrypted_traffic_mirror="string",
    deep_inspection_options="string",
    device_detection_portal="string",
    devices="string",
    diffserv_forward="string",
    diffserv_reverse="string",
    diffservcode_forward="string",
    diffservcode_rev="string",
    dlp_sensor="string",
    dnsfilter_profile="string",
    dscp_match="string",
    dscp_negate="string",
    dscp_value="string",
    dsri="string",
    dstaddr="string",
    dstaddr_negate="string",
    dstintf="string",
    dynamic_profile="string",
    dynamic_profile_accesses=["string"],
    dynamic_profile_group="string",
    email_collection_portal="string",
    emailfilter_profile="string",
    file_filter_profile="string",
    firewall_session_dirty="string",
    fixedport="string",
    fsae="string",
    fsso_groups="string",
    global_label="string",
    groups="string",
    http_policy_redirect="string",
    icap_profile="string",
    identity_based="string",
    identity_from="string",
    inbound="string",
    inspection_mode="string",
    ippool="string",
    ips_sensor="string",
    label="string",
    logtraffic="string",
    logtraffic_start="string",
    mms_profile="string",
    name="string",
    nat="string",
    natinbound="string",
    natoutbound="string",
    np_accelation="string",
    np_acceleration="string",
    outbound="string",
    packages_global_header_policy6_id="string",
    per_ip_shaper="string",
    pkg_folder_path="string",
    policy_offload="string",
    policyid=0,
    poolname="string",
    profile_group="string",
    profile_protocol_options="string",
    profile_type="string",
    replacemsg_group="string",
    replacemsg_override_group="string",
    rsso="string",
    schedule="string",
    send_deny_packet="string",
    service="string",
    service_negate="string",
    session_ttl="string",
    spamfilter_profile="string",
    srcaddr="string",
    srcaddr_negate="string",
    srcintf="string",
    ssh_filter_profile="string",
    ssh_policy_redirect="string",
    ssl_mirror="string",
    ssl_mirror_intf="string",
    ssl_ssh_profile="string",
    sslvpn_auth="string",
    sslvpn_ccert="string",
    sslvpn_cipher="string",
    status="string",
    tags="string",
    tcp_mss_receiver=0,
    tcp_mss_sender=0,
    tcp_session_without_syn="string",
    timeout_send_rst="string",
    tos="string",
    tos_mask="string",
    tos_negate="string",
    traffic_shaper="string",
    traffic_shaper_reverse="string",
    url_category="string",
    users="string",
    utm_inspection_mode="string",
    utm_status="string",
    uuid="string",
    vlan_cos_fwd=0,
    vlan_cos_rev=0,
    vlan_filter="string",
    voip_profile="string",
    vpntunnel="string",
    waf_profile="string",
    webcache="string",
    webcache_https="string",
    webfilter_profile="string",
    webproxy_forward_server="string",
    webproxy_profile="string")
Copy
const packagesGlobalHeaderPolicy6Resource = new fortimanager.PackagesGlobalHeaderPolicy6("packagesGlobalHeaderPolicy6Resource", {
    pkg: "string",
    _policyBlock: 0,
    action: "string",
    antiReplay: "string",
    appCategory: "string",
    appGroup: "string",
    applicationCharts: ["string"],
    applicationList: "string",
    applications: [0],
    autoAsicOffload: "string",
    avProfile: "string",
    casiProfile: "string",
    cgnLogServerGrp: "string",
    cifsProfile: "string",
    comments: "string",
    customLogFields: "string",
    decryptedTrafficMirror: "string",
    deepInspectionOptions: "string",
    deviceDetectionPortal: "string",
    devices: "string",
    diffservForward: "string",
    diffservReverse: "string",
    diffservcodeForward: "string",
    diffservcodeRev: "string",
    dlpSensor: "string",
    dnsfilterProfile: "string",
    dscpMatch: "string",
    dscpNegate: "string",
    dscpValue: "string",
    dsri: "string",
    dstaddr: "string",
    dstaddrNegate: "string",
    dstintf: "string",
    dynamicProfile: "string",
    dynamicProfileAccesses: ["string"],
    dynamicProfileGroup: "string",
    emailCollectionPortal: "string",
    emailfilterProfile: "string",
    fileFilterProfile: "string",
    firewallSessionDirty: "string",
    fixedport: "string",
    fsae: "string",
    fssoGroups: "string",
    globalLabel: "string",
    groups: "string",
    httpPolicyRedirect: "string",
    icapProfile: "string",
    identityBased: "string",
    identityFrom: "string",
    inbound: "string",
    inspectionMode: "string",
    ippool: "string",
    ipsSensor: "string",
    label: "string",
    logtraffic: "string",
    logtrafficStart: "string",
    mmsProfile: "string",
    name: "string",
    nat: "string",
    natinbound: "string",
    natoutbound: "string",
    npAccelation: "string",
    npAcceleration: "string",
    outbound: "string",
    packagesGlobalHeaderPolicy6Id: "string",
    perIpShaper: "string",
    pkgFolderPath: "string",
    policyOffload: "string",
    policyid: 0,
    poolname: "string",
    profileGroup: "string",
    profileProtocolOptions: "string",
    profileType: "string",
    replacemsgGroup: "string",
    replacemsgOverrideGroup: "string",
    rsso: "string",
    schedule: "string",
    sendDenyPacket: "string",
    service: "string",
    serviceNegate: "string",
    sessionTtl: "string",
    spamfilterProfile: "string",
    srcaddr: "string",
    srcaddrNegate: "string",
    srcintf: "string",
    sshFilterProfile: "string",
    sshPolicyRedirect: "string",
    sslMirror: "string",
    sslMirrorIntf: "string",
    sslSshProfile: "string",
    sslvpnAuth: "string",
    sslvpnCcert: "string",
    sslvpnCipher: "string",
    status: "string",
    tags: "string",
    tcpMssReceiver: 0,
    tcpMssSender: 0,
    tcpSessionWithoutSyn: "string",
    timeoutSendRst: "string",
    tos: "string",
    tosMask: "string",
    tosNegate: "string",
    trafficShaper: "string",
    trafficShaperReverse: "string",
    urlCategory: "string",
    users: "string",
    utmInspectionMode: "string",
    utmStatus: "string",
    uuid: "string",
    vlanCosFwd: 0,
    vlanCosRev: 0,
    vlanFilter: "string",
    voipProfile: "string",
    vpntunnel: "string",
    wafProfile: "string",
    webcache: "string",
    webcacheHttps: "string",
    webfilterProfile: "string",
    webproxyForwardServer: "string",
    webproxyProfile: "string",
});
Copy
type: fortimanager:PackagesGlobalHeaderPolicy6
properties:
    _policyBlock: 0
    action: string
    antiReplay: string
    appCategory: string
    appGroup: string
    applicationCharts:
        - string
    applicationList: string
    applications:
        - 0
    autoAsicOffload: string
    avProfile: string
    casiProfile: string
    cgnLogServerGrp: string
    cifsProfile: string
    comments: string
    customLogFields: string
    decryptedTrafficMirror: string
    deepInspectionOptions: string
    deviceDetectionPortal: string
    devices: string
    diffservForward: string
    diffservReverse: string
    diffservcodeForward: string
    diffservcodeRev: string
    dlpSensor: string
    dnsfilterProfile: string
    dscpMatch: string
    dscpNegate: string
    dscpValue: string
    dsri: string
    dstaddr: string
    dstaddrNegate: string
    dstintf: string
    dynamicProfile: string
    dynamicProfileAccesses:
        - string
    dynamicProfileGroup: string
    emailCollectionPortal: string
    emailfilterProfile: string
    fileFilterProfile: string
    firewallSessionDirty: string
    fixedport: string
    fsae: string
    fssoGroups: string
    globalLabel: string
    groups: string
    httpPolicyRedirect: string
    icapProfile: string
    identityBased: string
    identityFrom: string
    inbound: string
    inspectionMode: string
    ippool: string
    ipsSensor: string
    label: string
    logtraffic: string
    logtrafficStart: string
    mmsProfile: string
    name: string
    nat: string
    natinbound: string
    natoutbound: string
    npAccelation: string
    npAcceleration: string
    outbound: string
    packagesGlobalHeaderPolicy6Id: string
    perIpShaper: string
    pkg: string
    pkgFolderPath: string
    policyOffload: string
    policyid: 0
    poolname: string
    profileGroup: string
    profileProtocolOptions: string
    profileType: string
    replacemsgGroup: string
    replacemsgOverrideGroup: string
    rsso: string
    schedule: string
    sendDenyPacket: string
    service: string
    serviceNegate: string
    sessionTtl: string
    spamfilterProfile: string
    srcaddr: string
    srcaddrNegate: string
    srcintf: string
    sshFilterProfile: string
    sshPolicyRedirect: string
    sslMirror: string
    sslMirrorIntf: string
    sslSshProfile: string
    sslvpnAuth: string
    sslvpnCcert: string
    sslvpnCipher: string
    status: string
    tags: string
    tcpMssReceiver: 0
    tcpMssSender: 0
    tcpSessionWithoutSyn: string
    timeoutSendRst: string
    tos: string
    tosMask: string
    tosNegate: string
    trafficShaper: string
    trafficShaperReverse: string
    urlCategory: string
    users: string
    utmInspectionMode: string
    utmStatus: string
    uuid: string
    vlanCosFwd: 0
    vlanCosRev: 0
    vlanFilter: string
    voipProfile: string
    vpntunnel: string
    wafProfile: string
    webcache: string
    webcacheHttps: string
    webfilterProfile: string
    webproxyForwardServer: string
    webproxyProfile: string
Copy

PackagesGlobalHeaderPolicy6 Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PackagesGlobalHeaderPolicy6 resource accepts the following input properties:

Pkg This property is required. string
Package.
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
AntiReplay string
Enable/disable anti-replay check. Valid values: disable, enable.
AppCategory string
Application category ID list.
AppGroup string
Application group names.
ApplicationCharts List<string>
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
ApplicationList string
Name of an existing Application list.
Applications List<double>
Application ID list.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
AvProfile string
Name of an existing Antivirus profile.
CasiProfile string
Casi-Profile.
CgnLogServerGrp string
NP log server group name
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
CustomLogFields string
Log field index numbers to append custom log fields to log messages for this policy.
DecryptedTrafficMirror string
Decrypted-Traffic-Mirror.
DeepInspectionOptions string
Deep-Inspection-Options.
DeviceDetectionPortal string
Device-Detection-Portal. Valid values: disable, enable.
Devices string
Devices.
DiffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
DiffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
DiffservcodeForward string
Change packet's DiffServ to this value.
DiffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
DscpMatch string
Dscp-Match. Valid values: disable, enable.
DscpNegate string
Dscp-Negate. Valid values: disable, enable.
DscpValue string
Dscp-Value.
Dsri string
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
Dstaddr string
Destination address and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
DynamicProfile string
Dynamic-Profile. Valid values: disable, enable.
DynamicProfileAccesses List<string>
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
DynamicProfileGroup string
Dynamic-Profile-Group.
EmailCollectionPortal string
Email-Collection-Portal. Valid values: disable, enable.
EmailfilterProfile string
Name of an existing email filter profile.
FileFilterProfile string
File-Filter-Profile.
FirewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
Fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
Fsae string
Fsae. Valid values: disable, enable.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
HttpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
IcapProfile string
Name of an existing ICAP profile.
IdentityBased string
Identity-Based. Valid values: disable, enable.
IdentityFrom string
Identity-From. Valid values: auth, device.
Inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
InspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
Label string
Label for the policy that appears when the GUI is in Section View mode.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
Natinbound string
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
Natoutbound string
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
NpAccelation string
Np-Accelation. Valid values: disable, enable.
NpAcceleration string
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
Outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
PackagesGlobalHeaderPolicy6Id string
an identifier for the resource with format {{policyid}}.
PerIpShaper string
Per-IP traffic shaper.
PkgFolderPath string
Pkg Folder Path.
PolicyOffload string
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
Policyid double
Policy ID (0 - 4294967294).
Poolname string
IP Pool names.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
ReplacemsgGroup string
Replacemsg-Group.
ReplacemsgOverrideGroup string
Override the default replacement message group for this policy.
Rsso string
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
Schedule string
Schedule name.
SendDenyPacket string
Enable/disable return of deny-packet. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
SessionTtl string
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
SpamfilterProfile string
Spamfilter-Profile.
Srcaddr string
Source address and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
SslMirror string
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
SslMirrorIntf string
SSL mirror interface name.
SslSshProfile string
Name of an existing SSL SSH profile.
SslvpnAuth string
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
SslvpnCcert string
Sslvpn-Ccert. Valid values: disable, enable.
SslvpnCipher string
Sslvpn-Cipher. Valid values: any, high, medium.
Status string
Enable or disable this policy. Valid values: disable, enable.
Tags string
Tags.
TcpMssReceiver double
Receiver TCP maximum segment size (MSS).
TcpMssSender double
Sender TCP maximum segment size (MSS).
TcpSessionWithoutSyn string
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
TimeoutSendRst string
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
Tos string
ToS (Type of Service) value used for comparison.
TosMask string
Non-zero bit positions are used for comparison while zero bit positions are ignored.
TosNegate string
Enable negated TOS match. Valid values: disable, enable.
TrafficShaper string
Reverse traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UrlCategory string
URL category ID list.
Users string
Names of individual users that can authenticate with this policy.
UtmInspectionMode string
Utm-Inspection-Mode. Valid values: proxy, flow.
UtmStatus string
Enable AV/web/ips protection profile. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VlanCosFwd double
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanCosRev double
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanFilter string
Set VLAN filters.
VoipProfile string
Name of an existing VoIP profile.
Vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
WafProfile string
Name of an existing Web application firewall profile.
Webcache string
Enable/disable web cache. Valid values: disable, enable.
WebcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
WebfilterProfile string
Name of an existing Web filter profile.
WebproxyForwardServer string
Web proxy forward server name.
WebproxyProfile string
Webproxy profile name.
_policyBlock double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
Pkg This property is required. string
Package.
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
AntiReplay string
Enable/disable anti-replay check. Valid values: disable, enable.
AppCategory string
Application category ID list.
AppGroup string
Application group names.
ApplicationCharts []string
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
ApplicationList string
Name of an existing Application list.
Applications []float64
Application ID list.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
AvProfile string
Name of an existing Antivirus profile.
CasiProfile string
Casi-Profile.
CgnLogServerGrp string
NP log server group name
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
CustomLogFields string
Log field index numbers to append custom log fields to log messages for this policy.
DecryptedTrafficMirror string
Decrypted-Traffic-Mirror.
DeepInspectionOptions string
Deep-Inspection-Options.
DeviceDetectionPortal string
Device-Detection-Portal. Valid values: disable, enable.
Devices string
Devices.
DiffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
DiffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
DiffservcodeForward string
Change packet's DiffServ to this value.
DiffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
DscpMatch string
Dscp-Match. Valid values: disable, enable.
DscpNegate string
Dscp-Negate. Valid values: disable, enable.
DscpValue string
Dscp-Value.
Dsri string
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
Dstaddr string
Destination address and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
DynamicProfile string
Dynamic-Profile. Valid values: disable, enable.
DynamicProfileAccesses []string
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
DynamicProfileGroup string
Dynamic-Profile-Group.
EmailCollectionPortal string
Email-Collection-Portal. Valid values: disable, enable.
EmailfilterProfile string
Name of an existing email filter profile.
FileFilterProfile string
File-Filter-Profile.
FirewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
Fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
Fsae string
Fsae. Valid values: disable, enable.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
HttpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
IcapProfile string
Name of an existing ICAP profile.
IdentityBased string
Identity-Based. Valid values: disable, enable.
IdentityFrom string
Identity-From. Valid values: auth, device.
Inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
InspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
Label string
Label for the policy that appears when the GUI is in Section View mode.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
Natinbound string
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
Natoutbound string
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
NpAccelation string
Np-Accelation. Valid values: disable, enable.
NpAcceleration string
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
Outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
PackagesGlobalHeaderPolicy6Id string
an identifier for the resource with format {{policyid}}.
PerIpShaper string
Per-IP traffic shaper.
PkgFolderPath string
Pkg Folder Path.
PolicyOffload string
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
Policyid float64
Policy ID (0 - 4294967294).
Poolname string
IP Pool names.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
ReplacemsgGroup string
Replacemsg-Group.
ReplacemsgOverrideGroup string
Override the default replacement message group for this policy.
Rsso string
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
Schedule string
Schedule name.
SendDenyPacket string
Enable/disable return of deny-packet. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
SessionTtl string
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
SpamfilterProfile string
Spamfilter-Profile.
Srcaddr string
Source address and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
SslMirror string
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
SslMirrorIntf string
SSL mirror interface name.
SslSshProfile string
Name of an existing SSL SSH profile.
SslvpnAuth string
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
SslvpnCcert string
Sslvpn-Ccert. Valid values: disable, enable.
SslvpnCipher string
Sslvpn-Cipher. Valid values: any, high, medium.
Status string
Enable or disable this policy. Valid values: disable, enable.
Tags string
Tags.
TcpMssReceiver float64
Receiver TCP maximum segment size (MSS).
TcpMssSender float64
Sender TCP maximum segment size (MSS).
TcpSessionWithoutSyn string
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
TimeoutSendRst string
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
Tos string
ToS (Type of Service) value used for comparison.
TosMask string
Non-zero bit positions are used for comparison while zero bit positions are ignored.
TosNegate string
Enable negated TOS match. Valid values: disable, enable.
TrafficShaper string
Reverse traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UrlCategory string
URL category ID list.
Users string
Names of individual users that can authenticate with this policy.
UtmInspectionMode string
Utm-Inspection-Mode. Valid values: proxy, flow.
UtmStatus string
Enable AV/web/ips protection profile. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VlanCosFwd float64
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanCosRev float64
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanFilter string
Set VLAN filters.
VoipProfile string
Name of an existing VoIP profile.
Vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
WafProfile string
Name of an existing Web application firewall profile.
Webcache string
Enable/disable web cache. Valid values: disable, enable.
WebcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
WebfilterProfile string
Name of an existing Web filter profile.
WebproxyForwardServer string
Web proxy forward server name.
WebproxyProfile string
Webproxy profile name.
_policyBlock float64
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
pkg This property is required. String
Package.
_policyBlock Double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
antiReplay String
Enable/disable anti-replay check. Valid values: disable, enable.
appCategory String
Application category ID list.
appGroup String
Application group names.
applicationCharts List<String>
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
applicationList String
Name of an existing Application list.
applications List<Double>
Application ID list.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile String
Name of an existing Antivirus profile.
casiProfile String
Casi-Profile.
cgnLogServerGrp String
NP log server group name
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
customLogFields String
Log field index numbers to append custom log fields to log messages for this policy.
decryptedTrafficMirror String
Decrypted-Traffic-Mirror.
deepInspectionOptions String
Deep-Inspection-Options.
deviceDetectionPortal String
Device-Detection-Portal. Valid values: disable, enable.
devices String
Devices.
diffservForward String
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse String
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward String
Change packet's DiffServ to this value.
diffservcodeRev String
Change packet's reverse (reply) DiffServ to this value.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dscpMatch String
Dscp-Match. Valid values: disable, enable.
dscpNegate String
Dscp-Negate. Valid values: disable, enable.
dscpValue String
Dscp-Value.
dsri String
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
dstaddr String
Destination address and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
dynamicProfile String
Dynamic-Profile. Valid values: disable, enable.
dynamicProfileAccesses List<String>
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
dynamicProfileGroup String
Dynamic-Profile-Group.
emailCollectionPortal String
Email-Collection-Portal. Valid values: disable, enable.
emailfilterProfile String
Name of an existing email filter profile.
fileFilterProfile String
File-Filter-Profile.
firewallSessionDirty String
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
fixedport String
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fsae String
Fsae. Valid values: disable, enable.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
httpPolicyRedirect String
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile String
Name of an existing ICAP profile.
identityBased String
Identity-Based. Valid values: disable, enable.
identityFrom String
Identity-From. Valid values: auth, device.
inbound String
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode String
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
label String
Label for the policy that appears when the GUI is in Section View mode.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
natinbound String
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
natoutbound String
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
npAccelation String
Np-Accelation. Valid values: disable, enable.
npAcceleration String
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
outbound String
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesGlobalHeaderPolicy6Id String
an identifier for the resource with format {{policyid}}.
perIpShaper String
Per-IP traffic shaper.
pkgFolderPath String
Pkg Folder Path.
policyOffload String
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
policyid Double
Policy ID (0 - 4294967294).
poolname String
IP Pool names.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
replacemsgGroup String
Replacemsg-Group.
replacemsgOverrideGroup String
Override the default replacement message group for this policy.
rsso String
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
schedule String
Schedule name.
sendDenyPacket String
Enable/disable return of deny-packet. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl String
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilterProfile String
Spamfilter-Profile.
srcaddr String
Source address and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sshPolicyRedirect String
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslMirror String
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
sslMirrorIntf String
SSL mirror interface name.
sslSshProfile String
Name of an existing SSL SSH profile.
sslvpnAuth String
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
sslvpnCcert String
Sslvpn-Ccert. Valid values: disable, enable.
sslvpnCipher String
Sslvpn-Cipher. Valid values: any, high, medium.
status String
Enable or disable this policy. Valid values: disable, enable.
tags String
Tags.
tcpMssReceiver Double
Receiver TCP maximum segment size (MSS).
tcpMssSender Double
Sender TCP maximum segment size (MSS).
tcpSessionWithoutSyn String
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
timeoutSendRst String
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
tos String
ToS (Type of Service) value used for comparison.
tosMask String
Non-zero bit positions are used for comparison while zero bit positions are ignored.
tosNegate String
Enable negated TOS match. Valid values: disable, enable.
trafficShaper String
Reverse traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
urlCategory String
URL category ID list.
users String
Names of individual users that can authenticate with this policy.
utmInspectionMode String
Utm-Inspection-Mode. Valid values: proxy, flow.
utmStatus String
Enable AV/web/ips protection profile. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlanCosFwd Double
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanCosRev Double
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanFilter String
Set VLAN filters.
voipProfile String
Name of an existing VoIP profile.
vpntunnel String
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile String
Name of an existing Web application firewall profile.
webcache String
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps String
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile String
Name of an existing Web filter profile.
webproxyForwardServer String
Web proxy forward server name.
webproxyProfile String
Webproxy profile name.
pkg This property is required. string
Package.
_policyBlock number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
antiReplay string
Enable/disable anti-replay check. Valid values: disable, enable.
appCategory string
Application category ID list.
appGroup string
Application group names.
applicationCharts string[]
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
applicationList string
Name of an existing Application list.
applications number[]
Application ID list.
autoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile string
Name of an existing Antivirus profile.
casiProfile string
Casi-Profile.
cgnLogServerGrp string
NP log server group name
cifsProfile string
Name of an existing CIFS profile.
comments string
Comment.
customLogFields string
Log field index numbers to append custom log fields to log messages for this policy.
decryptedTrafficMirror string
Decrypted-Traffic-Mirror.
deepInspectionOptions string
Deep-Inspection-Options.
deviceDetectionPortal string
Device-Detection-Portal. Valid values: disable, enable.
devices string
Devices.
diffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward string
Change packet's DiffServ to this value.
diffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
dlpSensor string
Name of an existing DLP sensor.
dnsfilterProfile string
Name of an existing DNS filter profile.
dscpMatch string
Dscp-Match. Valid values: disable, enable.
dscpNegate string
Dscp-Negate. Valid values: disable, enable.
dscpValue string
Dscp-Value.
dsri string
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
dstaddr string
Destination address and address group names.
dstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf string
Outgoing (egress) interface.
dynamicProfile string
Dynamic-Profile. Valid values: disable, enable.
dynamicProfileAccesses string[]
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
dynamicProfileGroup string
Dynamic-Profile-Group.
emailCollectionPortal string
Email-Collection-Portal. Valid values: disable, enable.
emailfilterProfile string
Name of an existing email filter profile.
fileFilterProfile string
File-Filter-Profile.
firewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fsae string
Fsae. Valid values: disable, enable.
fssoGroups string
Names of FSSO groups.
globalLabel string
Label for the policy that appears when the GUI is in Global View mode.
groups string
Names of user groups that can authenticate with this policy.
httpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile string
Name of an existing ICAP profile.
identityBased string
Identity-Based. Valid values: disable, enable.
identityFrom string
Identity-From. Valid values: auth, device.
inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor string
Name of an existing IPS sensor.
label string
Label for the policy that appears when the GUI is in Section View mode.
logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
logtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
mmsProfile string
Name of an existing MMS profile.
name string
Policy name.
nat string
Enable/disable source NAT. Valid values: disable, enable.
natinbound string
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
natoutbound string
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
npAccelation string
Np-Accelation. Valid values: disable, enable.
npAcceleration string
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesGlobalHeaderPolicy6Id string
an identifier for the resource with format {{policyid}}.
perIpShaper string
Per-IP traffic shaper.
pkgFolderPath string
Pkg Folder Path.
policyOffload string
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
policyid number
Policy ID (0 - 4294967294).
poolname string
IP Pool names.
profileGroup string
Name of profile group.
profileProtocolOptions string
Name of an existing Protocol options profile.
profileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
replacemsgGroup string
Replacemsg-Group.
replacemsgOverrideGroup string
Override the default replacement message group for this policy.
rsso string
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
schedule string
Schedule name.
sendDenyPacket string
Enable/disable return of deny-packet. Valid values: disable, enable.
service string
Service and service group names.
serviceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl string
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilterProfile string
Spamfilter-Profile.
srcaddr string
Source address and address group names.
srcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf string
Incoming (ingress) interface.
sshFilterProfile string
Name of an existing SSH filter profile.
sshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslMirror string
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
sslMirrorIntf string
SSL mirror interface name.
sslSshProfile string
Name of an existing SSL SSH profile.
sslvpnAuth string
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
sslvpnCcert string
Sslvpn-Ccert. Valid values: disable, enable.
sslvpnCipher string
Sslvpn-Cipher. Valid values: any, high, medium.
status string
Enable or disable this policy. Valid values: disable, enable.
tags string
Tags.
tcpMssReceiver number
Receiver TCP maximum segment size (MSS).
tcpMssSender number
Sender TCP maximum segment size (MSS).
tcpSessionWithoutSyn string
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
timeoutSendRst string
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
tos string
ToS (Type of Service) value used for comparison.
tosMask string
Non-zero bit positions are used for comparison while zero bit positions are ignored.
tosNegate string
Enable negated TOS match. Valid values: disable, enable.
trafficShaper string
Reverse traffic shaper.
trafficShaperReverse string
Reverse traffic shaper.
urlCategory string
URL category ID list.
users string
Names of individual users that can authenticate with this policy.
utmInspectionMode string
Utm-Inspection-Mode. Valid values: proxy, flow.
utmStatus string
Enable AV/web/ips protection profile. Valid values: disable, enable.
uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlanCosFwd number
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanCosRev number
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanFilter string
Set VLAN filters.
voipProfile string
Name of an existing VoIP profile.
vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile string
Name of an existing Web application firewall profile.
webcache string
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile string
Name of an existing Web filter profile.
webproxyForwardServer string
Web proxy forward server name.
webproxyProfile string
Webproxy profile name.
pkg This property is required. str
Package.
_policy_block float
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action str
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
anti_replay str
Enable/disable anti-replay check. Valid values: disable, enable.
app_category str
Application category ID list.
app_group str
Application group names.
application_charts Sequence[str]
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
application_list str
Name of an existing Application list.
applications Sequence[float]
Application ID list.
auto_asic_offload str
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
av_profile str
Name of an existing Antivirus profile.
casi_profile str
Casi-Profile.
cgn_log_server_grp str
NP log server group name
cifs_profile str
Name of an existing CIFS profile.
comments str
Comment.
custom_log_fields str
Log field index numbers to append custom log fields to log messages for this policy.
decrypted_traffic_mirror str
Decrypted-Traffic-Mirror.
deep_inspection_options str
Deep-Inspection-Options.
device_detection_portal str
Device-Detection-Portal. Valid values: disable, enable.
devices str
Devices.
diffserv_forward str
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffserv_reverse str
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcode_forward str
Change packet's DiffServ to this value.
diffservcode_rev str
Change packet's reverse (reply) DiffServ to this value.
dlp_sensor str
Name of an existing DLP sensor.
dnsfilter_profile str
Name of an existing DNS filter profile.
dscp_match str
Dscp-Match. Valid values: disable, enable.
dscp_negate str
Dscp-Negate. Valid values: disable, enable.
dscp_value str
Dscp-Value.
dsri str
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
dstaddr str
Destination address and address group names.
dstaddr_negate str
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf str
Outgoing (egress) interface.
dynamic_profile str
Dynamic-Profile. Valid values: disable, enable.
dynamic_profile_accesses Sequence[str]
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
dynamic_profile_group str
Dynamic-Profile-Group.
email_collection_portal str
Email-Collection-Portal. Valid values: disable, enable.
emailfilter_profile str
Name of an existing email filter profile.
file_filter_profile str
File-Filter-Profile.
firewall_session_dirty str
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
fixedport str
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fsae str
Fsae. Valid values: disable, enable.
fsso_groups str
Names of FSSO groups.
global_label str
Label for the policy that appears when the GUI is in Global View mode.
groups str
Names of user groups that can authenticate with this policy.
http_policy_redirect str
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icap_profile str
Name of an existing ICAP profile.
identity_based str
Identity-Based. Valid values: disable, enable.
identity_from str
Identity-From. Valid values: auth, device.
inbound str
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspection_mode str
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
ippool str
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ips_sensor str
Name of an existing IPS sensor.
label str
Label for the policy that appears when the GUI is in Section View mode.
logtraffic str
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
logtraffic_start str
Record logs when a session starts. Valid values: disable, enable.
mms_profile str
Name of an existing MMS profile.
name str
Policy name.
nat str
Enable/disable source NAT. Valid values: disable, enable.
natinbound str
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
natoutbound str
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
np_accelation str
Np-Accelation. Valid values: disable, enable.
np_acceleration str
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
outbound str
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packages_global_header_policy6_id str
an identifier for the resource with format {{policyid}}.
per_ip_shaper str
Per-IP traffic shaper.
pkg_folder_path str
Pkg Folder Path.
policy_offload str
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
policyid float
Policy ID (0 - 4294967294).
poolname str
IP Pool names.
profile_group str
Name of profile group.
profile_protocol_options str
Name of an existing Protocol options profile.
profile_type str
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
replacemsg_group str
Replacemsg-Group.
replacemsg_override_group str
Override the default replacement message group for this policy.
rsso str
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
schedule str
Schedule name.
send_deny_packet str
Enable/disable return of deny-packet. Valid values: disable, enable.
service str
Service and service group names.
service_negate str
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
session_ttl str
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilter_profile str
Spamfilter-Profile.
srcaddr str
Source address and address group names.
srcaddr_negate str
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf str
Incoming (ingress) interface.
ssh_filter_profile str
Name of an existing SSH filter profile.
ssh_policy_redirect str
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
ssl_mirror str
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
ssl_mirror_intf str
SSL mirror interface name.
ssl_ssh_profile str
Name of an existing SSL SSH profile.
sslvpn_auth str
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
sslvpn_ccert str
Sslvpn-Ccert. Valid values: disable, enable.
sslvpn_cipher str
Sslvpn-Cipher. Valid values: any, high, medium.
status str
Enable or disable this policy. Valid values: disable, enable.
tags str
Tags.
tcp_mss_receiver float
Receiver TCP maximum segment size (MSS).
tcp_mss_sender float
Sender TCP maximum segment size (MSS).
tcp_session_without_syn str
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
timeout_send_rst str
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
tos str
ToS (Type of Service) value used for comparison.
tos_mask str
Non-zero bit positions are used for comparison while zero bit positions are ignored.
tos_negate str
Enable negated TOS match. Valid values: disable, enable.
traffic_shaper str
Reverse traffic shaper.
traffic_shaper_reverse str
Reverse traffic shaper.
url_category str
URL category ID list.
users str
Names of individual users that can authenticate with this policy.
utm_inspection_mode str
Utm-Inspection-Mode. Valid values: proxy, flow.
utm_status str
Enable AV/web/ips protection profile. Valid values: disable, enable.
uuid str
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlan_cos_fwd float
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlan_cos_rev float
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlan_filter str
Set VLAN filters.
voip_profile str
Name of an existing VoIP profile.
vpntunnel str
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
waf_profile str
Name of an existing Web application firewall profile.
webcache str
Enable/disable web cache. Valid values: disable, enable.
webcache_https str
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilter_profile str
Name of an existing Web filter profile.
webproxy_forward_server str
Web proxy forward server name.
webproxy_profile str
Webproxy profile name.
pkg This property is required. String
Package.
_policyBlock Number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
antiReplay String
Enable/disable anti-replay check. Valid values: disable, enable.
appCategory String
Application category ID list.
appGroup String
Application group names.
applicationCharts List<String>
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
applicationList String
Name of an existing Application list.
applications List<Number>
Application ID list.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile String
Name of an existing Antivirus profile.
casiProfile String
Casi-Profile.
cgnLogServerGrp String
NP log server group name
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
customLogFields String
Log field index numbers to append custom log fields to log messages for this policy.
decryptedTrafficMirror String
Decrypted-Traffic-Mirror.
deepInspectionOptions String
Deep-Inspection-Options.
deviceDetectionPortal String
Device-Detection-Portal. Valid values: disable, enable.
devices String
Devices.
diffservForward String
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse String
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward String
Change packet's DiffServ to this value.
diffservcodeRev String
Change packet's reverse (reply) DiffServ to this value.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dscpMatch String
Dscp-Match. Valid values: disable, enable.
dscpNegate String
Dscp-Negate. Valid values: disable, enable.
dscpValue String
Dscp-Value.
dsri String
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
dstaddr String
Destination address and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
dynamicProfile String
Dynamic-Profile. Valid values: disable, enable.
dynamicProfileAccesses List<String>
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
dynamicProfileGroup String
Dynamic-Profile-Group.
emailCollectionPortal String
Email-Collection-Portal. Valid values: disable, enable.
emailfilterProfile String
Name of an existing email filter profile.
fileFilterProfile String
File-Filter-Profile.
firewallSessionDirty String
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
fixedport String
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fsae String
Fsae. Valid values: disable, enable.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
httpPolicyRedirect String
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile String
Name of an existing ICAP profile.
identityBased String
Identity-Based. Valid values: disable, enable.
identityFrom String
Identity-From. Valid values: auth, device.
inbound String
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode String
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
label String
Label for the policy that appears when the GUI is in Section View mode.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
natinbound String
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
natoutbound String
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
npAccelation String
Np-Accelation. Valid values: disable, enable.
npAcceleration String
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
outbound String
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesGlobalHeaderPolicy6Id String
an identifier for the resource with format {{policyid}}.
perIpShaper String
Per-IP traffic shaper.
pkgFolderPath String
Pkg Folder Path.
policyOffload String
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
policyid Number
Policy ID (0 - 4294967294).
poolname String
IP Pool names.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
replacemsgGroup String
Replacemsg-Group.
replacemsgOverrideGroup String
Override the default replacement message group for this policy.
rsso String
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
schedule String
Schedule name.
sendDenyPacket String
Enable/disable return of deny-packet. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl String
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilterProfile String
Spamfilter-Profile.
srcaddr String
Source address and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sshPolicyRedirect String
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslMirror String
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
sslMirrorIntf String
SSL mirror interface name.
sslSshProfile String
Name of an existing SSL SSH profile.
sslvpnAuth String
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
sslvpnCcert String
Sslvpn-Ccert. Valid values: disable, enable.
sslvpnCipher String
Sslvpn-Cipher. Valid values: any, high, medium.
status String
Enable or disable this policy. Valid values: disable, enable.
tags String
Tags.
tcpMssReceiver Number
Receiver TCP maximum segment size (MSS).
tcpMssSender Number
Sender TCP maximum segment size (MSS).
tcpSessionWithoutSyn String
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
timeoutSendRst String
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
tos String
ToS (Type of Service) value used for comparison.
tosMask String
Non-zero bit positions are used for comparison while zero bit positions are ignored.
tosNegate String
Enable negated TOS match. Valid values: disable, enable.
trafficShaper String
Reverse traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
urlCategory String
URL category ID list.
users String
Names of individual users that can authenticate with this policy.
utmInspectionMode String
Utm-Inspection-Mode. Valid values: proxy, flow.
utmStatus String
Enable AV/web/ips protection profile. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlanCosFwd Number
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanCosRev Number
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanFilter String
Set VLAN filters.
voipProfile String
Name of an existing VoIP profile.
vpntunnel String
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile String
Name of an existing Web application firewall profile.
webcache String
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps String
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile String
Name of an existing Web filter profile.
webproxyForwardServer String
Web proxy forward server name.
webproxyProfile String
Webproxy profile name.

Outputs

All input properties are implicitly available as output properties. Additionally, the PackagesGlobalHeaderPolicy6 resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing PackagesGlobalHeaderPolicy6 Resource

Get an existing PackagesGlobalHeaderPolicy6 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PackagesGlobalHeaderPolicy6State, opts?: CustomResourceOptions): PackagesGlobalHeaderPolicy6
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        _policy_block: Optional[float] = None,
        action: Optional[str] = None,
        anti_replay: Optional[str] = None,
        app_category: Optional[str] = None,
        app_group: Optional[str] = None,
        application_charts: Optional[Sequence[str]] = None,
        application_list: Optional[str] = None,
        applications: Optional[Sequence[float]] = None,
        auto_asic_offload: Optional[str] = None,
        av_profile: Optional[str] = None,
        casi_profile: Optional[str] = None,
        cgn_log_server_grp: Optional[str] = None,
        cifs_profile: Optional[str] = None,
        comments: Optional[str] = None,
        custom_log_fields: Optional[str] = None,
        decrypted_traffic_mirror: Optional[str] = None,
        deep_inspection_options: Optional[str] = None,
        device_detection_portal: Optional[str] = None,
        devices: Optional[str] = None,
        diffserv_forward: Optional[str] = None,
        diffserv_reverse: Optional[str] = None,
        diffservcode_forward: Optional[str] = None,
        diffservcode_rev: Optional[str] = None,
        dlp_sensor: Optional[str] = None,
        dnsfilter_profile: Optional[str] = None,
        dscp_match: Optional[str] = None,
        dscp_negate: Optional[str] = None,
        dscp_value: Optional[str] = None,
        dsri: Optional[str] = None,
        dstaddr: Optional[str] = None,
        dstaddr_negate: Optional[str] = None,
        dstintf: Optional[str] = None,
        dynamic_profile: Optional[str] = None,
        dynamic_profile_accesses: Optional[Sequence[str]] = None,
        dynamic_profile_group: Optional[str] = None,
        email_collection_portal: Optional[str] = None,
        emailfilter_profile: Optional[str] = None,
        file_filter_profile: Optional[str] = None,
        firewall_session_dirty: Optional[str] = None,
        fixedport: Optional[str] = None,
        fsae: Optional[str] = None,
        fsso_groups: Optional[str] = None,
        global_label: Optional[str] = None,
        groups: Optional[str] = None,
        http_policy_redirect: Optional[str] = None,
        icap_profile: Optional[str] = None,
        identity_based: Optional[str] = None,
        identity_from: Optional[str] = None,
        inbound: Optional[str] = None,
        inspection_mode: Optional[str] = None,
        ippool: Optional[str] = None,
        ips_sensor: Optional[str] = None,
        label: Optional[str] = None,
        logtraffic: Optional[str] = None,
        logtraffic_start: Optional[str] = None,
        mms_profile: Optional[str] = None,
        name: Optional[str] = None,
        nat: Optional[str] = None,
        natinbound: Optional[str] = None,
        natoutbound: Optional[str] = None,
        np_accelation: Optional[str] = None,
        np_acceleration: Optional[str] = None,
        outbound: Optional[str] = None,
        packages_global_header_policy6_id: Optional[str] = None,
        per_ip_shaper: Optional[str] = None,
        pkg: Optional[str] = None,
        pkg_folder_path: Optional[str] = None,
        policy_offload: Optional[str] = None,
        policyid: Optional[float] = None,
        poolname: Optional[str] = None,
        profile_group: Optional[str] = None,
        profile_protocol_options: Optional[str] = None,
        profile_type: Optional[str] = None,
        replacemsg_group: Optional[str] = None,
        replacemsg_override_group: Optional[str] = None,
        rsso: Optional[str] = None,
        schedule: Optional[str] = None,
        send_deny_packet: Optional[str] = None,
        service: Optional[str] = None,
        service_negate: Optional[str] = None,
        session_ttl: Optional[str] = None,
        spamfilter_profile: Optional[str] = None,
        srcaddr: Optional[str] = None,
        srcaddr_negate: Optional[str] = None,
        srcintf: Optional[str] = None,
        ssh_filter_profile: Optional[str] = None,
        ssh_policy_redirect: Optional[str] = None,
        ssl_mirror: Optional[str] = None,
        ssl_mirror_intf: Optional[str] = None,
        ssl_ssh_profile: Optional[str] = None,
        sslvpn_auth: Optional[str] = None,
        sslvpn_ccert: Optional[str] = None,
        sslvpn_cipher: Optional[str] = None,
        status: Optional[str] = None,
        tags: Optional[str] = None,
        tcp_mss_receiver: Optional[float] = None,
        tcp_mss_sender: Optional[float] = None,
        tcp_session_without_syn: Optional[str] = None,
        timeout_send_rst: Optional[str] = None,
        tos: Optional[str] = None,
        tos_mask: Optional[str] = None,
        tos_negate: Optional[str] = None,
        traffic_shaper: Optional[str] = None,
        traffic_shaper_reverse: Optional[str] = None,
        url_category: Optional[str] = None,
        users: Optional[str] = None,
        utm_inspection_mode: Optional[str] = None,
        utm_status: Optional[str] = None,
        uuid: Optional[str] = None,
        vlan_cos_fwd: Optional[float] = None,
        vlan_cos_rev: Optional[float] = None,
        vlan_filter: Optional[str] = None,
        voip_profile: Optional[str] = None,
        vpntunnel: Optional[str] = None,
        waf_profile: Optional[str] = None,
        webcache: Optional[str] = None,
        webcache_https: Optional[str] = None,
        webfilter_profile: Optional[str] = None,
        webproxy_forward_server: Optional[str] = None,
        webproxy_profile: Optional[str] = None) -> PackagesGlobalHeaderPolicy6
func GetPackagesGlobalHeaderPolicy6(ctx *Context, name string, id IDInput, state *PackagesGlobalHeaderPolicy6State, opts ...ResourceOption) (*PackagesGlobalHeaderPolicy6, error)
public static PackagesGlobalHeaderPolicy6 Get(string name, Input<string> id, PackagesGlobalHeaderPolicy6State? state, CustomResourceOptions? opts = null)
public static PackagesGlobalHeaderPolicy6 get(String name, Output<String> id, PackagesGlobalHeaderPolicy6State state, CustomResourceOptions options)
resources:  _:    type: fortimanager:PackagesGlobalHeaderPolicy6    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
AntiReplay string
Enable/disable anti-replay check. Valid values: disable, enable.
AppCategory string
Application category ID list.
AppGroup string
Application group names.
ApplicationCharts List<string>
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
ApplicationList string
Name of an existing Application list.
Applications List<double>
Application ID list.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
AvProfile string
Name of an existing Antivirus profile.
CasiProfile string
Casi-Profile.
CgnLogServerGrp string
NP log server group name
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
CustomLogFields string
Log field index numbers to append custom log fields to log messages for this policy.
DecryptedTrafficMirror string
Decrypted-Traffic-Mirror.
DeepInspectionOptions string
Deep-Inspection-Options.
DeviceDetectionPortal string
Device-Detection-Portal. Valid values: disable, enable.
Devices string
Devices.
DiffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
DiffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
DiffservcodeForward string
Change packet's DiffServ to this value.
DiffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
DscpMatch string
Dscp-Match. Valid values: disable, enable.
DscpNegate string
Dscp-Negate. Valid values: disable, enable.
DscpValue string
Dscp-Value.
Dsri string
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
Dstaddr string
Destination address and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
DynamicProfile string
Dynamic-Profile. Valid values: disable, enable.
DynamicProfileAccesses List<string>
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
DynamicProfileGroup string
Dynamic-Profile-Group.
EmailCollectionPortal string
Email-Collection-Portal. Valid values: disable, enable.
EmailfilterProfile string
Name of an existing email filter profile.
FileFilterProfile string
File-Filter-Profile.
FirewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
Fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
Fsae string
Fsae. Valid values: disable, enable.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
HttpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
IcapProfile string
Name of an existing ICAP profile.
IdentityBased string
Identity-Based. Valid values: disable, enable.
IdentityFrom string
Identity-From. Valid values: auth, device.
Inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
InspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
Label string
Label for the policy that appears when the GUI is in Section View mode.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
Natinbound string
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
Natoutbound string
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
NpAccelation string
Np-Accelation. Valid values: disable, enable.
NpAcceleration string
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
Outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
PackagesGlobalHeaderPolicy6Id string
an identifier for the resource with format {{policyid}}.
PerIpShaper string
Per-IP traffic shaper.
Pkg string
Package.
PkgFolderPath string
Pkg Folder Path.
PolicyOffload string
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
Policyid double
Policy ID (0 - 4294967294).
Poolname string
IP Pool names.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
ReplacemsgGroup string
Replacemsg-Group.
ReplacemsgOverrideGroup string
Override the default replacement message group for this policy.
Rsso string
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
Schedule string
Schedule name.
SendDenyPacket string
Enable/disable return of deny-packet. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
SessionTtl string
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
SpamfilterProfile string
Spamfilter-Profile.
Srcaddr string
Source address and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
SslMirror string
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
SslMirrorIntf string
SSL mirror interface name.
SslSshProfile string
Name of an existing SSL SSH profile.
SslvpnAuth string
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
SslvpnCcert string
Sslvpn-Ccert. Valid values: disable, enable.
SslvpnCipher string
Sslvpn-Cipher. Valid values: any, high, medium.
Status string
Enable or disable this policy. Valid values: disable, enable.
Tags string
Tags.
TcpMssReceiver double
Receiver TCP maximum segment size (MSS).
TcpMssSender double
Sender TCP maximum segment size (MSS).
TcpSessionWithoutSyn string
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
TimeoutSendRst string
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
Tos string
ToS (Type of Service) value used for comparison.
TosMask string
Non-zero bit positions are used for comparison while zero bit positions are ignored.
TosNegate string
Enable negated TOS match. Valid values: disable, enable.
TrafficShaper string
Reverse traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UrlCategory string
URL category ID list.
Users string
Names of individual users that can authenticate with this policy.
UtmInspectionMode string
Utm-Inspection-Mode. Valid values: proxy, flow.
UtmStatus string
Enable AV/web/ips protection profile. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VlanCosFwd double
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanCosRev double
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanFilter string
Set VLAN filters.
VoipProfile string
Name of an existing VoIP profile.
Vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
WafProfile string
Name of an existing Web application firewall profile.
Webcache string
Enable/disable web cache. Valid values: disable, enable.
WebcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
WebfilterProfile string
Name of an existing Web filter profile.
WebproxyForwardServer string
Web proxy forward server name.
WebproxyProfile string
Webproxy profile name.
_policyBlock double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
AntiReplay string
Enable/disable anti-replay check. Valid values: disable, enable.
AppCategory string
Application category ID list.
AppGroup string
Application group names.
ApplicationCharts []string
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
ApplicationList string
Name of an existing Application list.
Applications []float64
Application ID list.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
AvProfile string
Name of an existing Antivirus profile.
CasiProfile string
Casi-Profile.
CgnLogServerGrp string
NP log server group name
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
CustomLogFields string
Log field index numbers to append custom log fields to log messages for this policy.
DecryptedTrafficMirror string
Decrypted-Traffic-Mirror.
DeepInspectionOptions string
Deep-Inspection-Options.
DeviceDetectionPortal string
Device-Detection-Portal. Valid values: disable, enable.
Devices string
Devices.
DiffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
DiffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
DiffservcodeForward string
Change packet's DiffServ to this value.
DiffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
DscpMatch string
Dscp-Match. Valid values: disable, enable.
DscpNegate string
Dscp-Negate. Valid values: disable, enable.
DscpValue string
Dscp-Value.
Dsri string
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
Dstaddr string
Destination address and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
DynamicProfile string
Dynamic-Profile. Valid values: disable, enable.
DynamicProfileAccesses []string
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
DynamicProfileGroup string
Dynamic-Profile-Group.
EmailCollectionPortal string
Email-Collection-Portal. Valid values: disable, enable.
EmailfilterProfile string
Name of an existing email filter profile.
FileFilterProfile string
File-Filter-Profile.
FirewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
Fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
Fsae string
Fsae. Valid values: disable, enable.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
HttpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
IcapProfile string
Name of an existing ICAP profile.
IdentityBased string
Identity-Based. Valid values: disable, enable.
IdentityFrom string
Identity-From. Valid values: auth, device.
Inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
InspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
Label string
Label for the policy that appears when the GUI is in Section View mode.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
Natinbound string
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
Natoutbound string
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
NpAccelation string
Np-Accelation. Valid values: disable, enable.
NpAcceleration string
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
Outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
PackagesGlobalHeaderPolicy6Id string
an identifier for the resource with format {{policyid}}.
PerIpShaper string
Per-IP traffic shaper.
Pkg string
Package.
PkgFolderPath string
Pkg Folder Path.
PolicyOffload string
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
Policyid float64
Policy ID (0 - 4294967294).
Poolname string
IP Pool names.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
ReplacemsgGroup string
Replacemsg-Group.
ReplacemsgOverrideGroup string
Override the default replacement message group for this policy.
Rsso string
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
Schedule string
Schedule name.
SendDenyPacket string
Enable/disable return of deny-packet. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
SessionTtl string
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
SpamfilterProfile string
Spamfilter-Profile.
Srcaddr string
Source address and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
SslMirror string
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
SslMirrorIntf string
SSL mirror interface name.
SslSshProfile string
Name of an existing SSL SSH profile.
SslvpnAuth string
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
SslvpnCcert string
Sslvpn-Ccert. Valid values: disable, enable.
SslvpnCipher string
Sslvpn-Cipher. Valid values: any, high, medium.
Status string
Enable or disable this policy. Valid values: disable, enable.
Tags string
Tags.
TcpMssReceiver float64
Receiver TCP maximum segment size (MSS).
TcpMssSender float64
Sender TCP maximum segment size (MSS).
TcpSessionWithoutSyn string
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
TimeoutSendRst string
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
Tos string
ToS (Type of Service) value used for comparison.
TosMask string
Non-zero bit positions are used for comparison while zero bit positions are ignored.
TosNegate string
Enable negated TOS match. Valid values: disable, enable.
TrafficShaper string
Reverse traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UrlCategory string
URL category ID list.
Users string
Names of individual users that can authenticate with this policy.
UtmInspectionMode string
Utm-Inspection-Mode. Valid values: proxy, flow.
UtmStatus string
Enable AV/web/ips protection profile. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VlanCosFwd float64
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanCosRev float64
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanFilter string
Set VLAN filters.
VoipProfile string
Name of an existing VoIP profile.
Vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
WafProfile string
Name of an existing Web application firewall profile.
Webcache string
Enable/disable web cache. Valid values: disable, enable.
WebcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
WebfilterProfile string
Name of an existing Web filter profile.
WebproxyForwardServer string
Web proxy forward server name.
WebproxyProfile string
Webproxy profile name.
_policyBlock float64
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
_policyBlock Double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
antiReplay String
Enable/disable anti-replay check. Valid values: disable, enable.
appCategory String
Application category ID list.
appGroup String
Application group names.
applicationCharts List<String>
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
applicationList String
Name of an existing Application list.
applications List<Double>
Application ID list.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile String
Name of an existing Antivirus profile.
casiProfile String
Casi-Profile.
cgnLogServerGrp String
NP log server group name
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
customLogFields String
Log field index numbers to append custom log fields to log messages for this policy.
decryptedTrafficMirror String
Decrypted-Traffic-Mirror.
deepInspectionOptions String
Deep-Inspection-Options.
deviceDetectionPortal String
Device-Detection-Portal. Valid values: disable, enable.
devices String
Devices.
diffservForward String
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse String
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward String
Change packet's DiffServ to this value.
diffservcodeRev String
Change packet's reverse (reply) DiffServ to this value.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dscpMatch String
Dscp-Match. Valid values: disable, enable.
dscpNegate String
Dscp-Negate. Valid values: disable, enable.
dscpValue String
Dscp-Value.
dsri String
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
dstaddr String
Destination address and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
dynamicProfile String
Dynamic-Profile. Valid values: disable, enable.
dynamicProfileAccesses List<String>
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
dynamicProfileGroup String
Dynamic-Profile-Group.
emailCollectionPortal String
Email-Collection-Portal. Valid values: disable, enable.
emailfilterProfile String
Name of an existing email filter profile.
fileFilterProfile String
File-Filter-Profile.
firewallSessionDirty String
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
fixedport String
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fsae String
Fsae. Valid values: disable, enable.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
httpPolicyRedirect String
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile String
Name of an existing ICAP profile.
identityBased String
Identity-Based. Valid values: disable, enable.
identityFrom String
Identity-From. Valid values: auth, device.
inbound String
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode String
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
label String
Label for the policy that appears when the GUI is in Section View mode.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
natinbound String
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
natoutbound String
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
npAccelation String
Np-Accelation. Valid values: disable, enable.
npAcceleration String
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
outbound String
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesGlobalHeaderPolicy6Id String
an identifier for the resource with format {{policyid}}.
perIpShaper String
Per-IP traffic shaper.
pkg String
Package.
pkgFolderPath String
Pkg Folder Path.
policyOffload String
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
policyid Double
Policy ID (0 - 4294967294).
poolname String
IP Pool names.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
replacemsgGroup String
Replacemsg-Group.
replacemsgOverrideGroup String
Override the default replacement message group for this policy.
rsso String
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
schedule String
Schedule name.
sendDenyPacket String
Enable/disable return of deny-packet. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl String
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilterProfile String
Spamfilter-Profile.
srcaddr String
Source address and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sshPolicyRedirect String
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslMirror String
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
sslMirrorIntf String
SSL mirror interface name.
sslSshProfile String
Name of an existing SSL SSH profile.
sslvpnAuth String
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
sslvpnCcert String
Sslvpn-Ccert. Valid values: disable, enable.
sslvpnCipher String
Sslvpn-Cipher. Valid values: any, high, medium.
status String
Enable or disable this policy. Valid values: disable, enable.
tags String
Tags.
tcpMssReceiver Double
Receiver TCP maximum segment size (MSS).
tcpMssSender Double
Sender TCP maximum segment size (MSS).
tcpSessionWithoutSyn String
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
timeoutSendRst String
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
tos String
ToS (Type of Service) value used for comparison.
tosMask String
Non-zero bit positions are used for comparison while zero bit positions are ignored.
tosNegate String
Enable negated TOS match. Valid values: disable, enable.
trafficShaper String
Reverse traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
urlCategory String
URL category ID list.
users String
Names of individual users that can authenticate with this policy.
utmInspectionMode String
Utm-Inspection-Mode. Valid values: proxy, flow.
utmStatus String
Enable AV/web/ips protection profile. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlanCosFwd Double
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanCosRev Double
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanFilter String
Set VLAN filters.
voipProfile String
Name of an existing VoIP profile.
vpntunnel String
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile String
Name of an existing Web application firewall profile.
webcache String
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps String
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile String
Name of an existing Web filter profile.
webproxyForwardServer String
Web proxy forward server name.
webproxyProfile String
Webproxy profile name.
_policyBlock number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
antiReplay string
Enable/disable anti-replay check. Valid values: disable, enable.
appCategory string
Application category ID list.
appGroup string
Application group names.
applicationCharts string[]
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
applicationList string
Name of an existing Application list.
applications number[]
Application ID list.
autoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile string
Name of an existing Antivirus profile.
casiProfile string
Casi-Profile.
cgnLogServerGrp string
NP log server group name
cifsProfile string
Name of an existing CIFS profile.
comments string
Comment.
customLogFields string
Log field index numbers to append custom log fields to log messages for this policy.
decryptedTrafficMirror string
Decrypted-Traffic-Mirror.
deepInspectionOptions string
Deep-Inspection-Options.
deviceDetectionPortal string
Device-Detection-Portal. Valid values: disable, enable.
devices string
Devices.
diffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward string
Change packet's DiffServ to this value.
diffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
dlpSensor string
Name of an existing DLP sensor.
dnsfilterProfile string
Name of an existing DNS filter profile.
dscpMatch string
Dscp-Match. Valid values: disable, enable.
dscpNegate string
Dscp-Negate. Valid values: disable, enable.
dscpValue string
Dscp-Value.
dsri string
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
dstaddr string
Destination address and address group names.
dstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf string
Outgoing (egress) interface.
dynamicProfile string
Dynamic-Profile. Valid values: disable, enable.
dynamicProfileAccesses string[]
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
dynamicProfileGroup string
Dynamic-Profile-Group.
emailCollectionPortal string
Email-Collection-Portal. Valid values: disable, enable.
emailfilterProfile string
Name of an existing email filter profile.
fileFilterProfile string
File-Filter-Profile.
firewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fsae string
Fsae. Valid values: disable, enable.
fssoGroups string
Names of FSSO groups.
globalLabel string
Label for the policy that appears when the GUI is in Global View mode.
groups string
Names of user groups that can authenticate with this policy.
httpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile string
Name of an existing ICAP profile.
identityBased string
Identity-Based. Valid values: disable, enable.
identityFrom string
Identity-From. Valid values: auth, device.
inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor string
Name of an existing IPS sensor.
label string
Label for the policy that appears when the GUI is in Section View mode.
logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
logtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
mmsProfile string
Name of an existing MMS profile.
name string
Policy name.
nat string
Enable/disable source NAT. Valid values: disable, enable.
natinbound string
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
natoutbound string
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
npAccelation string
Np-Accelation. Valid values: disable, enable.
npAcceleration string
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesGlobalHeaderPolicy6Id string
an identifier for the resource with format {{policyid}}.
perIpShaper string
Per-IP traffic shaper.
pkg string
Package.
pkgFolderPath string
Pkg Folder Path.
policyOffload string
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
policyid number
Policy ID (0 - 4294967294).
poolname string
IP Pool names.
profileGroup string
Name of profile group.
profileProtocolOptions string
Name of an existing Protocol options profile.
profileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
replacemsgGroup string
Replacemsg-Group.
replacemsgOverrideGroup string
Override the default replacement message group for this policy.
rsso string
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
schedule string
Schedule name.
sendDenyPacket string
Enable/disable return of deny-packet. Valid values: disable, enable.
service string
Service and service group names.
serviceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl string
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilterProfile string
Spamfilter-Profile.
srcaddr string
Source address and address group names.
srcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf string
Incoming (ingress) interface.
sshFilterProfile string
Name of an existing SSH filter profile.
sshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslMirror string
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
sslMirrorIntf string
SSL mirror interface name.
sslSshProfile string
Name of an existing SSL SSH profile.
sslvpnAuth string
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
sslvpnCcert string
Sslvpn-Ccert. Valid values: disable, enable.
sslvpnCipher string
Sslvpn-Cipher. Valid values: any, high, medium.
status string
Enable or disable this policy. Valid values: disable, enable.
tags string
Tags.
tcpMssReceiver number
Receiver TCP maximum segment size (MSS).
tcpMssSender number
Sender TCP maximum segment size (MSS).
tcpSessionWithoutSyn string
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
timeoutSendRst string
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
tos string
ToS (Type of Service) value used for comparison.
tosMask string
Non-zero bit positions are used for comparison while zero bit positions are ignored.
tosNegate string
Enable negated TOS match. Valid values: disable, enable.
trafficShaper string
Reverse traffic shaper.
trafficShaperReverse string
Reverse traffic shaper.
urlCategory string
URL category ID list.
users string
Names of individual users that can authenticate with this policy.
utmInspectionMode string
Utm-Inspection-Mode. Valid values: proxy, flow.
utmStatus string
Enable AV/web/ips protection profile. Valid values: disable, enable.
uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlanCosFwd number
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanCosRev number
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanFilter string
Set VLAN filters.
voipProfile string
Name of an existing VoIP profile.
vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile string
Name of an existing Web application firewall profile.
webcache string
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile string
Name of an existing Web filter profile.
webproxyForwardServer string
Web proxy forward server name.
webproxyProfile string
Webproxy profile name.
_policy_block float
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action str
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
anti_replay str
Enable/disable anti-replay check. Valid values: disable, enable.
app_category str
Application category ID list.
app_group str
Application group names.
application_charts Sequence[str]
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
application_list str
Name of an existing Application list.
applications Sequence[float]
Application ID list.
auto_asic_offload str
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
av_profile str
Name of an existing Antivirus profile.
casi_profile str
Casi-Profile.
cgn_log_server_grp str
NP log server group name
cifs_profile str
Name of an existing CIFS profile.
comments str
Comment.
custom_log_fields str
Log field index numbers to append custom log fields to log messages for this policy.
decrypted_traffic_mirror str
Decrypted-Traffic-Mirror.
deep_inspection_options str
Deep-Inspection-Options.
device_detection_portal str
Device-Detection-Portal. Valid values: disable, enable.
devices str
Devices.
diffserv_forward str
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffserv_reverse str
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcode_forward str
Change packet's DiffServ to this value.
diffservcode_rev str
Change packet's reverse (reply) DiffServ to this value.
dlp_sensor str
Name of an existing DLP sensor.
dnsfilter_profile str
Name of an existing DNS filter profile.
dscp_match str
Dscp-Match. Valid values: disable, enable.
dscp_negate str
Dscp-Negate. Valid values: disable, enable.
dscp_value str
Dscp-Value.
dsri str
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
dstaddr str
Destination address and address group names.
dstaddr_negate str
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf str
Outgoing (egress) interface.
dynamic_profile str
Dynamic-Profile. Valid values: disable, enable.
dynamic_profile_accesses Sequence[str]
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
dynamic_profile_group str
Dynamic-Profile-Group.
email_collection_portal str
Email-Collection-Portal. Valid values: disable, enable.
emailfilter_profile str
Name of an existing email filter profile.
file_filter_profile str
File-Filter-Profile.
firewall_session_dirty str
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
fixedport str
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fsae str
Fsae. Valid values: disable, enable.
fsso_groups str
Names of FSSO groups.
global_label str
Label for the policy that appears when the GUI is in Global View mode.
groups str
Names of user groups that can authenticate with this policy.
http_policy_redirect str
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icap_profile str
Name of an existing ICAP profile.
identity_based str
Identity-Based. Valid values: disable, enable.
identity_from str
Identity-From. Valid values: auth, device.
inbound str
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspection_mode str
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
ippool str
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ips_sensor str
Name of an existing IPS sensor.
label str
Label for the policy that appears when the GUI is in Section View mode.
logtraffic str
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
logtraffic_start str
Record logs when a session starts. Valid values: disable, enable.
mms_profile str
Name of an existing MMS profile.
name str
Policy name.
nat str
Enable/disable source NAT. Valid values: disable, enable.
natinbound str
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
natoutbound str
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
np_accelation str
Np-Accelation. Valid values: disable, enable.
np_acceleration str
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
outbound str
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packages_global_header_policy6_id str
an identifier for the resource with format {{policyid}}.
per_ip_shaper str
Per-IP traffic shaper.
pkg str
Package.
pkg_folder_path str
Pkg Folder Path.
policy_offload str
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
policyid float
Policy ID (0 - 4294967294).
poolname str
IP Pool names.
profile_group str
Name of profile group.
profile_protocol_options str
Name of an existing Protocol options profile.
profile_type str
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
replacemsg_group str
Replacemsg-Group.
replacemsg_override_group str
Override the default replacement message group for this policy.
rsso str
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
schedule str
Schedule name.
send_deny_packet str
Enable/disable return of deny-packet. Valid values: disable, enable.
service str
Service and service group names.
service_negate str
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
session_ttl str
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilter_profile str
Spamfilter-Profile.
srcaddr str
Source address and address group names.
srcaddr_negate str
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf str
Incoming (ingress) interface.
ssh_filter_profile str
Name of an existing SSH filter profile.
ssh_policy_redirect str
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
ssl_mirror str
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
ssl_mirror_intf str
SSL mirror interface name.
ssl_ssh_profile str
Name of an existing SSL SSH profile.
sslvpn_auth str
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
sslvpn_ccert str
Sslvpn-Ccert. Valid values: disable, enable.
sslvpn_cipher str
Sslvpn-Cipher. Valid values: any, high, medium.
status str
Enable or disable this policy. Valid values: disable, enable.
tags str
Tags.
tcp_mss_receiver float
Receiver TCP maximum segment size (MSS).
tcp_mss_sender float
Sender TCP maximum segment size (MSS).
tcp_session_without_syn str
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
timeout_send_rst str
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
tos str
ToS (Type of Service) value used for comparison.
tos_mask str
Non-zero bit positions are used for comparison while zero bit positions are ignored.
tos_negate str
Enable negated TOS match. Valid values: disable, enable.
traffic_shaper str
Reverse traffic shaper.
traffic_shaper_reverse str
Reverse traffic shaper.
url_category str
URL category ID list.
users str
Names of individual users that can authenticate with this policy.
utm_inspection_mode str
Utm-Inspection-Mode. Valid values: proxy, flow.
utm_status str
Enable AV/web/ips protection profile. Valid values: disable, enable.
uuid str
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlan_cos_fwd float
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlan_cos_rev float
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlan_filter str
Set VLAN filters.
voip_profile str
Name of an existing VoIP profile.
vpntunnel str
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
waf_profile str
Name of an existing Web application firewall profile.
webcache str
Enable/disable web cache. Valid values: disable, enable.
webcache_https str
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilter_profile str
Name of an existing Web filter profile.
webproxy_forward_server str
Web proxy forward server name.
webproxy_profile str
Webproxy profile name.
_policyBlock Number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec, ssl-vpn.
antiReplay String
Enable/disable anti-replay check. Valid values: disable, enable.
appCategory String
Application category ID list.
appGroup String
Application group names.
applicationCharts List<String>
Application-Charts. Valid values: top10-app, top10-p2p-user, top10-media-user.
applicationList String
Name of an existing Application list.
applications List<Number>
Application ID list.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile String
Name of an existing Antivirus profile.
casiProfile String
Casi-Profile.
cgnLogServerGrp String
NP log server group name
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
customLogFields String
Log field index numbers to append custom log fields to log messages for this policy.
decryptedTrafficMirror String
Decrypted-Traffic-Mirror.
deepInspectionOptions String
Deep-Inspection-Options.
deviceDetectionPortal String
Device-Detection-Portal. Valid values: disable, enable.
devices String
Devices.
diffservForward String
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse String
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward String
Change packet's DiffServ to this value.
diffservcodeRev String
Change packet's reverse (reply) DiffServ to this value.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dscpMatch String
Dscp-Match. Valid values: disable, enable.
dscpNegate String
Dscp-Negate. Valid values: disable, enable.
dscpValue String
Dscp-Value.
dsri String
Enable DSRI to ignore HTTP server responses. Valid values: disable, enable.
dstaddr String
Destination address and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
dynamicProfile String
Dynamic-Profile. Valid values: disable, enable.
dynamicProfileAccesses List<String>
Dynamic-Profile-Access. Valid values: imap, smtp, pop3, http, ftp, im, nntp, imaps, smtps, pop3s, https, ftps.
dynamicProfileGroup String
Dynamic-Profile-Group.
emailCollectionPortal String
Email-Collection-Portal. Valid values: disable, enable.
emailfilterProfile String
Name of an existing email filter profile.
fileFilterProfile String
File-Filter-Profile.
firewallSessionDirty String
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
fixedport String
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fsae String
Fsae. Valid values: disable, enable.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
httpPolicyRedirect String
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile String
Name of an existing ICAP profile.
identityBased String
Identity-Based. Valid values: disable, enable.
identityFrom String
Identity-From. Valid values: auth, device.
inbound String
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode String
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
label String
Label for the policy that appears when the GUI is in Section View mode.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, enable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
natinbound String
Policy-based IPsec VPN: apply destination NAT to inbound traffic. Valid values: disable, enable.
natoutbound String
Policy-based IPsec VPN: apply source NAT to outbound traffic. Valid values: disable, enable.
npAccelation String
Np-Accelation. Valid values: disable, enable.
npAcceleration String
Enable/disable UTM Network Processor acceleration. Valid values: disable, enable.
outbound String
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesGlobalHeaderPolicy6Id String
an identifier for the resource with format {{policyid}}.
perIpShaper String
Per-IP traffic shaper.
pkg String
Package.
pkgFolderPath String
Pkg Folder Path.
policyOffload String
Enable/disable offloading policy configuration to CP processors. Valid values: disable, enable.
policyid Number
Policy ID (0 - 4294967294).
poolname String
IP Pool names.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
replacemsgGroup String
Replacemsg-Group.
replacemsgOverrideGroup String
Override the default replacement message group for this policy.
rsso String
Enable/disable RADIUS single sign-on (RSSO). Valid values: disable, enable.
schedule String
Schedule name.
sendDenyPacket String
Enable/disable return of deny-packet. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl String
Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilterProfile String
Spamfilter-Profile.
srcaddr String
Source address and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sshPolicyRedirect String
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslMirror String
Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring). Valid values: disable, enable.
sslMirrorIntf String
SSL mirror interface name.
sslSshProfile String
Name of an existing SSL SSH profile.
sslvpnAuth String
Sslvpn-Auth. Valid values: any, local, radius, ldap, tacacs+.
sslvpnCcert String
Sslvpn-Ccert. Valid values: disable, enable.
sslvpnCipher String
Sslvpn-Cipher. Valid values: any, high, medium.
status String
Enable or disable this policy. Valid values: disable, enable.
tags String
Tags.
tcpMssReceiver Number
Receiver TCP maximum segment size (MSS).
tcpMssSender Number
Sender TCP maximum segment size (MSS).
tcpSessionWithoutSyn String
Enable/disable creation of TCP session without SYN flag. Valid values: all, data-only, disable.
timeoutSendRst String
Enable/disable sending RST packets when TCP sessions expire. Valid values: disable, enable.
tos String
ToS (Type of Service) value used for comparison.
tosMask String
Non-zero bit positions are used for comparison while zero bit positions are ignored.
tosNegate String
Enable negated TOS match. Valid values: disable, enable.
trafficShaper String
Reverse traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
urlCategory String
URL category ID list.
users String
Names of individual users that can authenticate with this policy.
utmInspectionMode String
Utm-Inspection-Mode. Valid values: proxy, flow.
utmStatus String
Enable AV/web/ips protection profile. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlanCosFwd Number
VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanCosRev Number
VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanFilter String
Set VLAN filters.
voipProfile String
Name of an existing VoIP profile.
vpntunnel String
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile String
Name of an existing Web application firewall profile.
webcache String
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps String
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile String
Name of an existing Web filter profile.
webproxyForwardServer String
Web proxy forward server name.
webproxyProfile String
Webproxy profile name.

Import

Packages GlobalHeaderPolicy6 can be imported using any of these accepted formats:

Set import_options = [“pkg_folder_path=YOUR_VALUE”, “pkg=YOUR_VALUE”] in the provider section.

$ export “FORTIMANAGER_IMPORT_TABLE”=“true”

$ pulumi import fortimanager:index/packagesGlobalHeaderPolicy6:PackagesGlobalHeaderPolicy6 labelname {{policyid}}
Copy

$ unset “FORTIMANAGER_IMPORT_TABLE”

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortimanager fortinetdev/terraform-provider-fortimanager
License
Notes
This Pulumi package is based on the fortimanager Terraform Provider.
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager