Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. PackagesFirewallConsolidatedPolicy
fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.PackagesFirewallConsolidatedPolicy

Explore with Pulumi AI

fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

Configure consolidated IPv4/IPv6 policies.

Create PackagesFirewallConsolidatedPolicy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PackagesFirewallConsolidatedPolicy(name: string, args: PackagesFirewallConsolidatedPolicyArgs, opts?: CustomResourceOptions);
@overload
def PackagesFirewallConsolidatedPolicy(resource_name: str,
                                       args: PackagesFirewallConsolidatedPolicyArgs,
                                       opts: Optional[ResourceOptions] = None)

@overload
def PackagesFirewallConsolidatedPolicy(resource_name: str,
                                       opts: Optional[ResourceOptions] = None,
                                       pkg: Optional[str] = None,
                                       _policy_block: Optional[float] = None,
                                       action: Optional[str] = None,
                                       adom: Optional[str] = None,
                                       app_category: Optional[str] = None,
                                       app_group: Optional[str] = None,
                                       application_list: Optional[str] = None,
                                       applications: Optional[Sequence[float]] = None,
                                       auto_asic_offload: Optional[str] = None,
                                       av_profile: Optional[str] = None,
                                       captive_portal_exempt: Optional[str] = None,
                                       cifs_profile: Optional[str] = None,
                                       comments: Optional[str] = None,
                                       diffserv_forward: Optional[str] = None,
                                       diffserv_reverse: Optional[str] = None,
                                       diffservcode_forward: Optional[str] = None,
                                       diffservcode_rev: Optional[str] = None,
                                       dlp_sensor: Optional[str] = None,
                                       dnsfilter_profile: Optional[str] = None,
                                       dstaddr4: Optional[str] = None,
                                       dstaddr6: Optional[str] = None,
                                       dstaddr_negate: Optional[str] = None,
                                       dstintf: Optional[str] = None,
                                       emailfilter_profile: Optional[str] = None,
                                       fixedport: Optional[str] = None,
                                       fsso_groups: Optional[str] = None,
                                       global_label: Optional[str] = None,
                                       groups: Optional[str] = None,
                                       http_policy_redirect: Optional[str] = None,
                                       icap_profile: Optional[str] = None,
                                       inbound: Optional[str] = None,
                                       inspection_mode: Optional[str] = None,
                                       internet_service: Optional[str] = None,
                                       internet_service_custom: Optional[str] = None,
                                       internet_service_custom_group: Optional[str] = None,
                                       internet_service_group: Optional[str] = None,
                                       internet_service_id: Optional[str] = None,
                                       internet_service_negate: Optional[str] = None,
                                       internet_service_src: Optional[str] = None,
                                       internet_service_src_custom: Optional[str] = None,
                                       internet_service_src_custom_group: Optional[str] = None,
                                       internet_service_src_group: Optional[str] = None,
                                       internet_service_src_id: Optional[str] = None,
                                       internet_service_src_negate: Optional[str] = None,
                                       ippool: Optional[str] = None,
                                       ips_sensor: Optional[str] = None,
                                       logtraffic: Optional[str] = None,
                                       logtraffic_start: Optional[str] = None,
                                       mms_profile: Optional[str] = None,
                                       name: Optional[str] = None,
                                       nat: Optional[str] = None,
                                       outbound: Optional[str] = None,
                                       packages_firewall_consolidated_policy_id: Optional[str] = None,
                                       per_ip_shaper: Optional[str] = None,
                                       pkg_folder_path: Optional[str] = None,
                                       policyid: Optional[float] = None,
                                       poolname4: Optional[str] = None,
                                       poolname6: Optional[str] = None,
                                       profile_group: Optional[str] = None,
                                       profile_protocol_options: Optional[str] = None,
                                       profile_type: Optional[str] = None,
                                       schedule: Optional[str] = None,
                                       scopetype: Optional[str] = None,
                                       service: Optional[str] = None,
                                       service_negate: Optional[str] = None,
                                       session_ttl: Optional[float] = None,
                                       srcaddr4: Optional[str] = None,
                                       srcaddr6: Optional[str] = None,
                                       srcaddr_negate: Optional[str] = None,
                                       srcintf: Optional[str] = None,
                                       ssh_filter_profile: Optional[str] = None,
                                       ssh_policy_redirect: Optional[str] = None,
                                       ssl_ssh_profile: Optional[str] = None,
                                       status: Optional[str] = None,
                                       tcp_mss_receiver: Optional[float] = None,
                                       tcp_mss_sender: Optional[float] = None,
                                       traffic_shaper: Optional[str] = None,
                                       traffic_shaper_reverse: Optional[str] = None,
                                       url_category: Optional[str] = None,
                                       users: Optional[str] = None,
                                       utm_status: Optional[str] = None,
                                       uuid: Optional[str] = None,
                                       voip_profile: Optional[str] = None,
                                       vpntunnel: Optional[str] = None,
                                       waf_profile: Optional[str] = None,
                                       wanopt: Optional[str] = None,
                                       wanopt_detection: Optional[str] = None,
                                       wanopt_passive_opt: Optional[str] = None,
                                       wanopt_peer: Optional[str] = None,
                                       wanopt_profile: Optional[str] = None,
                                       webcache: Optional[str] = None,
                                       webcache_https: Optional[str] = None,
                                       webfilter_profile: Optional[str] = None,
                                       webproxy_forward_server: Optional[str] = None,
                                       webproxy_profile: Optional[str] = None)
func NewPackagesFirewallConsolidatedPolicy(ctx *Context, name string, args PackagesFirewallConsolidatedPolicyArgs, opts ...ResourceOption) (*PackagesFirewallConsolidatedPolicy, error)
public PackagesFirewallConsolidatedPolicy(string name, PackagesFirewallConsolidatedPolicyArgs args, CustomResourceOptions? opts = null)
public PackagesFirewallConsolidatedPolicy(String name, PackagesFirewallConsolidatedPolicyArgs args)
public PackagesFirewallConsolidatedPolicy(String name, PackagesFirewallConsolidatedPolicyArgs args, CustomResourceOptions options)

type: fortimanager:PackagesFirewallConsolidatedPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. PackagesFirewallConsolidatedPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. PackagesFirewallConsolidatedPolicyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. PackagesFirewallConsolidatedPolicyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. PackagesFirewallConsolidatedPolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. PackagesFirewallConsolidatedPolicyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var packagesFirewallConsolidatedPolicyResource = new Fortimanager.PackagesFirewallConsolidatedPolicy("packagesFirewallConsolidatedPolicyResource", new()
{
    Pkg = "string",
    _policyBlock = 0,
    Action = "string",
    Adom = "string",
    AppCategory = "string",
    AppGroup = "string",
    ApplicationList = "string",
    Applications = new[]
    {
        0,
    },
    AutoAsicOffload = "string",
    AvProfile = "string",
    CaptivePortalExempt = "string",
    CifsProfile = "string",
    Comments = "string",
    DiffservForward = "string",
    DiffservReverse = "string",
    DiffservcodeForward = "string",
    DiffservcodeRev = "string",
    DlpSensor = "string",
    DnsfilterProfile = "string",
    Dstaddr4 = "string",
    Dstaddr6 = "string",
    DstaddrNegate = "string",
    Dstintf = "string",
    EmailfilterProfile = "string",
    Fixedport = "string",
    FssoGroups = "string",
    GlobalLabel = "string",
    Groups = "string",
    HttpPolicyRedirect = "string",
    IcapProfile = "string",
    Inbound = "string",
    InspectionMode = "string",
    InternetService = "string",
    InternetServiceCustom = "string",
    InternetServiceCustomGroup = "string",
    InternetServiceGroup = "string",
    InternetServiceId = "string",
    InternetServiceNegate = "string",
    InternetServiceSrc = "string",
    InternetServiceSrcCustom = "string",
    InternetServiceSrcCustomGroup = "string",
    InternetServiceSrcGroup = "string",
    InternetServiceSrcId = "string",
    InternetServiceSrcNegate = "string",
    Ippool = "string",
    IpsSensor = "string",
    Logtraffic = "string",
    LogtrafficStart = "string",
    MmsProfile = "string",
    Name = "string",
    Nat = "string",
    Outbound = "string",
    PackagesFirewallConsolidatedPolicyId = "string",
    PerIpShaper = "string",
    PkgFolderPath = "string",
    Policyid = 0,
    Poolname4 = "string",
    Poolname6 = "string",
    ProfileGroup = "string",
    ProfileProtocolOptions = "string",
    ProfileType = "string",
    Schedule = "string",
    Scopetype = "string",
    Service = "string",
    ServiceNegate = "string",
    SessionTtl = 0,
    Srcaddr4 = "string",
    Srcaddr6 = "string",
    SrcaddrNegate = "string",
    Srcintf = "string",
    SshFilterProfile = "string",
    SshPolicyRedirect = "string",
    SslSshProfile = "string",
    Status = "string",
    TcpMssReceiver = 0,
    TcpMssSender = 0,
    TrafficShaper = "string",
    TrafficShaperReverse = "string",
    UrlCategory = "string",
    Users = "string",
    UtmStatus = "string",
    Uuid = "string",
    VoipProfile = "string",
    Vpntunnel = "string",
    WafProfile = "string",
    Wanopt = "string",
    WanoptDetection = "string",
    WanoptPassiveOpt = "string",
    WanoptPeer = "string",
    WanoptProfile = "string",
    Webcache = "string",
    WebcacheHttps = "string",
    WebfilterProfile = "string",
    WebproxyForwardServer = "string",
    WebproxyProfile = "string",
});
Copy
example, err := fortimanager.NewPackagesFirewallConsolidatedPolicy(ctx, "packagesFirewallConsolidatedPolicyResource", &fortimanager.PackagesFirewallConsolidatedPolicyArgs{
Pkg: pulumi.String("string"),
_policyBlock: pulumi.Float64(0),
Action: pulumi.String("string"),
Adom: pulumi.String("string"),
AppCategory: pulumi.String("string"),
AppGroup: pulumi.String("string"),
ApplicationList: pulumi.String("string"),
Applications: pulumi.Float64Array{
pulumi.Float64(0),
},
AutoAsicOffload: pulumi.String("string"),
AvProfile: pulumi.String("string"),
CaptivePortalExempt: pulumi.String("string"),
CifsProfile: pulumi.String("string"),
Comments: pulumi.String("string"),
DiffservForward: pulumi.String("string"),
DiffservReverse: pulumi.String("string"),
DiffservcodeForward: pulumi.String("string"),
DiffservcodeRev: pulumi.String("string"),
DlpSensor: pulumi.String("string"),
DnsfilterProfile: pulumi.String("string"),
Dstaddr4: pulumi.String("string"),
Dstaddr6: pulumi.String("string"),
DstaddrNegate: pulumi.String("string"),
Dstintf: pulumi.String("string"),
EmailfilterProfile: pulumi.String("string"),
Fixedport: pulumi.String("string"),
FssoGroups: pulumi.String("string"),
GlobalLabel: pulumi.String("string"),
Groups: pulumi.String("string"),
HttpPolicyRedirect: pulumi.String("string"),
IcapProfile: pulumi.String("string"),
Inbound: pulumi.String("string"),
InspectionMode: pulumi.String("string"),
InternetService: pulumi.String("string"),
InternetServiceCustom: pulumi.String("string"),
InternetServiceCustomGroup: pulumi.String("string"),
InternetServiceGroup: pulumi.String("string"),
InternetServiceId: pulumi.String("string"),
InternetServiceNegate: pulumi.String("string"),
InternetServiceSrc: pulumi.String("string"),
InternetServiceSrcCustom: pulumi.String("string"),
InternetServiceSrcCustomGroup: pulumi.String("string"),
InternetServiceSrcGroup: pulumi.String("string"),
InternetServiceSrcId: pulumi.String("string"),
InternetServiceSrcNegate: pulumi.String("string"),
Ippool: pulumi.String("string"),
IpsSensor: pulumi.String("string"),
Logtraffic: pulumi.String("string"),
LogtrafficStart: pulumi.String("string"),
MmsProfile: pulumi.String("string"),
Name: pulumi.String("string"),
Nat: pulumi.String("string"),
Outbound: pulumi.String("string"),
PackagesFirewallConsolidatedPolicyId: pulumi.String("string"),
PerIpShaper: pulumi.String("string"),
PkgFolderPath: pulumi.String("string"),
Policyid: pulumi.Float64(0),
Poolname4: pulumi.String("string"),
Poolname6: pulumi.String("string"),
ProfileGroup: pulumi.String("string"),
ProfileProtocolOptions: pulumi.String("string"),
ProfileType: pulumi.String("string"),
Schedule: pulumi.String("string"),
Scopetype: pulumi.String("string"),
Service: pulumi.String("string"),
ServiceNegate: pulumi.String("string"),
SessionTtl: pulumi.Float64(0),
Srcaddr4: pulumi.String("string"),
Srcaddr6: pulumi.String("string"),
SrcaddrNegate: pulumi.String("string"),
Srcintf: pulumi.String("string"),
SshFilterProfile: pulumi.String("string"),
SshPolicyRedirect: pulumi.String("string"),
SslSshProfile: pulumi.String("string"),
Status: pulumi.String("string"),
TcpMssReceiver: pulumi.Float64(0),
TcpMssSender: pulumi.Float64(0),
TrafficShaper: pulumi.String("string"),
TrafficShaperReverse: pulumi.String("string"),
UrlCategory: pulumi.String("string"),
Users: pulumi.String("string"),
UtmStatus: pulumi.String("string"),
Uuid: pulumi.String("string"),
VoipProfile: pulumi.String("string"),
Vpntunnel: pulumi.String("string"),
WafProfile: pulumi.String("string"),
Wanopt: pulumi.String("string"),
WanoptDetection: pulumi.String("string"),
WanoptPassiveOpt: pulumi.String("string"),
WanoptPeer: pulumi.String("string"),
WanoptProfile: pulumi.String("string"),
Webcache: pulumi.String("string"),
WebcacheHttps: pulumi.String("string"),
WebfilterProfile: pulumi.String("string"),
WebproxyForwardServer: pulumi.String("string"),
WebproxyProfile: pulumi.String("string"),
})
Copy
var packagesFirewallConsolidatedPolicyResource = new PackagesFirewallConsolidatedPolicy("packagesFirewallConsolidatedPolicyResource", PackagesFirewallConsolidatedPolicyArgs.builder()
    .pkg("string")
    ._policyBlock(0)
    .action("string")
    .adom("string")
    .appCategory("string")
    .appGroup("string")
    .applicationList("string")
    .applications(0)
    .autoAsicOffload("string")
    .avProfile("string")
    .captivePortalExempt("string")
    .cifsProfile("string")
    .comments("string")
    .diffservForward("string")
    .diffservReverse("string")
    .diffservcodeForward("string")
    .diffservcodeRev("string")
    .dlpSensor("string")
    .dnsfilterProfile("string")
    .dstaddr4("string")
    .dstaddr6("string")
    .dstaddrNegate("string")
    .dstintf("string")
    .emailfilterProfile("string")
    .fixedport("string")
    .fssoGroups("string")
    .globalLabel("string")
    .groups("string")
    .httpPolicyRedirect("string")
    .icapProfile("string")
    .inbound("string")
    .inspectionMode("string")
    .internetService("string")
    .internetServiceCustom("string")
    .internetServiceCustomGroup("string")
    .internetServiceGroup("string")
    .internetServiceId("string")
    .internetServiceNegate("string")
    .internetServiceSrc("string")
    .internetServiceSrcCustom("string")
    .internetServiceSrcCustomGroup("string")
    .internetServiceSrcGroup("string")
    .internetServiceSrcId("string")
    .internetServiceSrcNegate("string")
    .ippool("string")
    .ipsSensor("string")
    .logtraffic("string")
    .logtrafficStart("string")
    .mmsProfile("string")
    .name("string")
    .nat("string")
    .outbound("string")
    .packagesFirewallConsolidatedPolicyId("string")
    .perIpShaper("string")
    .pkgFolderPath("string")
    .policyid(0)
    .poolname4("string")
    .poolname6("string")
    .profileGroup("string")
    .profileProtocolOptions("string")
    .profileType("string")
    .schedule("string")
    .scopetype("string")
    .service("string")
    .serviceNegate("string")
    .sessionTtl(0)
    .srcaddr4("string")
    .srcaddr6("string")
    .srcaddrNegate("string")
    .srcintf("string")
    .sshFilterProfile("string")
    .sshPolicyRedirect("string")
    .sslSshProfile("string")
    .status("string")
    .tcpMssReceiver(0)
    .tcpMssSender(0)
    .trafficShaper("string")
    .trafficShaperReverse("string")
    .urlCategory("string")
    .users("string")
    .utmStatus("string")
    .uuid("string")
    .voipProfile("string")
    .vpntunnel("string")
    .wafProfile("string")
    .wanopt("string")
    .wanoptDetection("string")
    .wanoptPassiveOpt("string")
    .wanoptPeer("string")
    .wanoptProfile("string")
    .webcache("string")
    .webcacheHttps("string")
    .webfilterProfile("string")
    .webproxyForwardServer("string")
    .webproxyProfile("string")
    .build());
Copy
packages_firewall_consolidated_policy_resource = fortimanager.PackagesFirewallConsolidatedPolicy("packagesFirewallConsolidatedPolicyResource",
    pkg="string",
    _policy_block=0,
    action="string",
    adom="string",
    app_category="string",
    app_group="string",
    application_list="string",
    applications=[0],
    auto_asic_offload="string",
    av_profile="string",
    captive_portal_exempt="string",
    cifs_profile="string",
    comments="string",
    diffserv_forward="string",
    diffserv_reverse="string",
    diffservcode_forward="string",
    diffservcode_rev="string",
    dlp_sensor="string",
    dnsfilter_profile="string",
    dstaddr4="string",
    dstaddr6="string",
    dstaddr_negate="string",
    dstintf="string",
    emailfilter_profile="string",
    fixedport="string",
    fsso_groups="string",
    global_label="string",
    groups="string",
    http_policy_redirect="string",
    icap_profile="string",
    inbound="string",
    inspection_mode="string",
    internet_service="string",
    internet_service_custom="string",
    internet_service_custom_group="string",
    internet_service_group="string",
    internet_service_id="string",
    internet_service_negate="string",
    internet_service_src="string",
    internet_service_src_custom="string",
    internet_service_src_custom_group="string",
    internet_service_src_group="string",
    internet_service_src_id="string",
    internet_service_src_negate="string",
    ippool="string",
    ips_sensor="string",
    logtraffic="string",
    logtraffic_start="string",
    mms_profile="string",
    name="string",
    nat="string",
    outbound="string",
    packages_firewall_consolidated_policy_id="string",
    per_ip_shaper="string",
    pkg_folder_path="string",
    policyid=0,
    poolname4="string",
    poolname6="string",
    profile_group="string",
    profile_protocol_options="string",
    profile_type="string",
    schedule="string",
    scopetype="string",
    service="string",
    service_negate="string",
    session_ttl=0,
    srcaddr4="string",
    srcaddr6="string",
    srcaddr_negate="string",
    srcintf="string",
    ssh_filter_profile="string",
    ssh_policy_redirect="string",
    ssl_ssh_profile="string",
    status="string",
    tcp_mss_receiver=0,
    tcp_mss_sender=0,
    traffic_shaper="string",
    traffic_shaper_reverse="string",
    url_category="string",
    users="string",
    utm_status="string",
    uuid="string",
    voip_profile="string",
    vpntunnel="string",
    waf_profile="string",
    wanopt="string",
    wanopt_detection="string",
    wanopt_passive_opt="string",
    wanopt_peer="string",
    wanopt_profile="string",
    webcache="string",
    webcache_https="string",
    webfilter_profile="string",
    webproxy_forward_server="string",
    webproxy_profile="string")
Copy
const packagesFirewallConsolidatedPolicyResource = new fortimanager.PackagesFirewallConsolidatedPolicy("packagesFirewallConsolidatedPolicyResource", {
    pkg: "string",
    _policyBlock: 0,
    action: "string",
    adom: "string",
    appCategory: "string",
    appGroup: "string",
    applicationList: "string",
    applications: [0],
    autoAsicOffload: "string",
    avProfile: "string",
    captivePortalExempt: "string",
    cifsProfile: "string",
    comments: "string",
    diffservForward: "string",
    diffservReverse: "string",
    diffservcodeForward: "string",
    diffservcodeRev: "string",
    dlpSensor: "string",
    dnsfilterProfile: "string",
    dstaddr4: "string",
    dstaddr6: "string",
    dstaddrNegate: "string",
    dstintf: "string",
    emailfilterProfile: "string",
    fixedport: "string",
    fssoGroups: "string",
    globalLabel: "string",
    groups: "string",
    httpPolicyRedirect: "string",
    icapProfile: "string",
    inbound: "string",
    inspectionMode: "string",
    internetService: "string",
    internetServiceCustom: "string",
    internetServiceCustomGroup: "string",
    internetServiceGroup: "string",
    internetServiceId: "string",
    internetServiceNegate: "string",
    internetServiceSrc: "string",
    internetServiceSrcCustom: "string",
    internetServiceSrcCustomGroup: "string",
    internetServiceSrcGroup: "string",
    internetServiceSrcId: "string",
    internetServiceSrcNegate: "string",
    ippool: "string",
    ipsSensor: "string",
    logtraffic: "string",
    logtrafficStart: "string",
    mmsProfile: "string",
    name: "string",
    nat: "string",
    outbound: "string",
    packagesFirewallConsolidatedPolicyId: "string",
    perIpShaper: "string",
    pkgFolderPath: "string",
    policyid: 0,
    poolname4: "string",
    poolname6: "string",
    profileGroup: "string",
    profileProtocolOptions: "string",
    profileType: "string",
    schedule: "string",
    scopetype: "string",
    service: "string",
    serviceNegate: "string",
    sessionTtl: 0,
    srcaddr4: "string",
    srcaddr6: "string",
    srcaddrNegate: "string",
    srcintf: "string",
    sshFilterProfile: "string",
    sshPolicyRedirect: "string",
    sslSshProfile: "string",
    status: "string",
    tcpMssReceiver: 0,
    tcpMssSender: 0,
    trafficShaper: "string",
    trafficShaperReverse: "string",
    urlCategory: "string",
    users: "string",
    utmStatus: "string",
    uuid: "string",
    voipProfile: "string",
    vpntunnel: "string",
    wafProfile: "string",
    wanopt: "string",
    wanoptDetection: "string",
    wanoptPassiveOpt: "string",
    wanoptPeer: "string",
    wanoptProfile: "string",
    webcache: "string",
    webcacheHttps: "string",
    webfilterProfile: "string",
    webproxyForwardServer: "string",
    webproxyProfile: "string",
});
Copy
type: fortimanager:PackagesFirewallConsolidatedPolicy
properties:
    _policyBlock: 0
    action: string
    adom: string
    appCategory: string
    appGroup: string
    applicationList: string
    applications:
        - 0
    autoAsicOffload: string
    avProfile: string
    captivePortalExempt: string
    cifsProfile: string
    comments: string
    diffservForward: string
    diffservReverse: string
    diffservcodeForward: string
    diffservcodeRev: string
    dlpSensor: string
    dnsfilterProfile: string
    dstaddr4: string
    dstaddr6: string
    dstaddrNegate: string
    dstintf: string
    emailfilterProfile: string
    fixedport: string
    fssoGroups: string
    globalLabel: string
    groups: string
    httpPolicyRedirect: string
    icapProfile: string
    inbound: string
    inspectionMode: string
    internetService: string
    internetServiceCustom: string
    internetServiceCustomGroup: string
    internetServiceGroup: string
    internetServiceId: string
    internetServiceNegate: string
    internetServiceSrc: string
    internetServiceSrcCustom: string
    internetServiceSrcCustomGroup: string
    internetServiceSrcGroup: string
    internetServiceSrcId: string
    internetServiceSrcNegate: string
    ippool: string
    ipsSensor: string
    logtraffic: string
    logtrafficStart: string
    mmsProfile: string
    name: string
    nat: string
    outbound: string
    packagesFirewallConsolidatedPolicyId: string
    perIpShaper: string
    pkg: string
    pkgFolderPath: string
    policyid: 0
    poolname4: string
    poolname6: string
    profileGroup: string
    profileProtocolOptions: string
    profileType: string
    schedule: string
    scopetype: string
    service: string
    serviceNegate: string
    sessionTtl: 0
    srcaddr4: string
    srcaddr6: string
    srcaddrNegate: string
    srcintf: string
    sshFilterProfile: string
    sshPolicyRedirect: string
    sslSshProfile: string
    status: string
    tcpMssReceiver: 0
    tcpMssSender: 0
    trafficShaper: string
    trafficShaperReverse: string
    urlCategory: string
    users: string
    utmStatus: string
    uuid: string
    voipProfile: string
    vpntunnel: string
    wafProfile: string
    wanopt: string
    wanoptDetection: string
    wanoptPassiveOpt: string
    wanoptPeer: string
    wanoptProfile: string
    webcache: string
    webcacheHttps: string
    webfilterProfile: string
    webproxyForwardServer: string
    webproxyProfile: string
Copy

PackagesFirewallConsolidatedPolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PackagesFirewallConsolidatedPolicy resource accepts the following input properties:

Pkg This property is required. string
Package.
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AppCategory string
App-Category.
AppGroup string
App-Group.
ApplicationList string
Name of an existing Application list.
Applications List<double>
Application.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
AvProfile string
Name of an existing Antivirus profile.
CaptivePortalExempt string
Enable exemption of some users from the captive portal. Valid values: disable, enable.
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
DiffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
DiffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
DiffservcodeForward string
Change packet's DiffServ to this value.
DiffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
Dstaddr4 string
Destination IPv4 address name and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
EmailfilterProfile string
Name of an existing email filter profile.
Fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
HttpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
IcapProfile string
Name of an existing ICAP profile.
Inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
InspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
InternetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
InternetServiceCustom string
Custom Internet Service name.
InternetServiceCustomGroup string
Custom Internet Service group name.
InternetServiceGroup string
Internet Service group name.
InternetServiceId string
Internet Service ID.
InternetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetServiceSrcCustom string
Custom Internet Service source name.
InternetServiceSrcCustomGroup string
Custom Internet Service source group name.
InternetServiceSrcGroup string
Internet Service source group name.
InternetServiceSrcId string
Internet Service source ID.
InternetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
Outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
PackagesFirewallConsolidatedPolicyId string
an identifier for the resource with format {{policyid}}.
PerIpShaper string
Per-IP traffic shaper.
PkgFolderPath string
Pkg Folder Path.
Policyid double
Policy ID (0 - 4294967294).
Poolname4 string
IPv4 pool names.
Poolname6 string
IPv6 pool names.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
Schedule string
Schedule name.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
SessionTtl double
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
Srcaddr4 string
Source IPv4 address name and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
SslSshProfile string
Name of an existing SSL SSH profile.
Status string
Enable or disable this policy. Valid values: disable, enable.
TcpMssReceiver double
Receiver TCP maximum segment size (MSS).
TcpMssSender double
Sender TCP maximum segment size (MSS).
TrafficShaper string
Traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UrlCategory string
Url-Category.
Users string
Names of individual users that can authenticate with this policy.
UtmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VoipProfile string
Name of an existing VoIP profile.
Vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
WafProfile string
Name of an existing Web application firewall profile.
Wanopt string
Enable/disable WAN optimization. Valid values: disable, enable.
WanoptDetection string
WAN optimization auto-detection mode. Valid values: active, passive, off.
WanoptPassiveOpt string
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
WanoptPeer string
WAN optimization peer.
WanoptProfile string
WAN optimization profile.
Webcache string
Enable/disable web cache. Valid values: disable, enable.
WebcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
WebfilterProfile string
Name of an existing Web filter profile.
WebproxyForwardServer string
Webproxy forward server name.
WebproxyProfile string
Webproxy profile name.
_policyBlock double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
Pkg This property is required. string
Package.
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AppCategory string
App-Category.
AppGroup string
App-Group.
ApplicationList string
Name of an existing Application list.
Applications []float64
Application.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
AvProfile string
Name of an existing Antivirus profile.
CaptivePortalExempt string
Enable exemption of some users from the captive portal. Valid values: disable, enable.
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
DiffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
DiffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
DiffservcodeForward string
Change packet's DiffServ to this value.
DiffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
Dstaddr4 string
Destination IPv4 address name and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
EmailfilterProfile string
Name of an existing email filter profile.
Fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
HttpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
IcapProfile string
Name of an existing ICAP profile.
Inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
InspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
InternetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
InternetServiceCustom string
Custom Internet Service name.
InternetServiceCustomGroup string
Custom Internet Service group name.
InternetServiceGroup string
Internet Service group name.
InternetServiceId string
Internet Service ID.
InternetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetServiceSrcCustom string
Custom Internet Service source name.
InternetServiceSrcCustomGroup string
Custom Internet Service source group name.
InternetServiceSrcGroup string
Internet Service source group name.
InternetServiceSrcId string
Internet Service source ID.
InternetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
Outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
PackagesFirewallConsolidatedPolicyId string
an identifier for the resource with format {{policyid}}.
PerIpShaper string
Per-IP traffic shaper.
PkgFolderPath string
Pkg Folder Path.
Policyid float64
Policy ID (0 - 4294967294).
Poolname4 string
IPv4 pool names.
Poolname6 string
IPv6 pool names.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
Schedule string
Schedule name.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
SessionTtl float64
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
Srcaddr4 string
Source IPv4 address name and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
SslSshProfile string
Name of an existing SSL SSH profile.
Status string
Enable or disable this policy. Valid values: disable, enable.
TcpMssReceiver float64
Receiver TCP maximum segment size (MSS).
TcpMssSender float64
Sender TCP maximum segment size (MSS).
TrafficShaper string
Traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UrlCategory string
Url-Category.
Users string
Names of individual users that can authenticate with this policy.
UtmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VoipProfile string
Name of an existing VoIP profile.
Vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
WafProfile string
Name of an existing Web application firewall profile.
Wanopt string
Enable/disable WAN optimization. Valid values: disable, enable.
WanoptDetection string
WAN optimization auto-detection mode. Valid values: active, passive, off.
WanoptPassiveOpt string
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
WanoptPeer string
WAN optimization peer.
WanoptProfile string
WAN optimization profile.
Webcache string
Enable/disable web cache. Valid values: disable, enable.
WebcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
WebfilterProfile string
Name of an existing Web filter profile.
WebproxyForwardServer string
Webproxy forward server name.
WebproxyProfile string
Webproxy profile name.
_policyBlock float64
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
pkg This property is required. String
Package.
_policyBlock Double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory String
App-Category.
appGroup String
App-Group.
applicationList String
Name of an existing Application list.
applications List<Double>
Application.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile String
Name of an existing Antivirus profile.
captivePortalExempt String
Enable exemption of some users from the captive portal. Valid values: disable, enable.
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
diffservForward String
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse String
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward String
Change packet's DiffServ to this value.
diffservcodeRev String
Change packet's reverse (reply) DiffServ to this value.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dstaddr4 String
Destination IPv4 address name and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
emailfilterProfile String
Name of an existing email filter profile.
fixedport String
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
httpPolicyRedirect String
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile String
Name of an existing ICAP profile.
inbound String
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode String
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
internetService String
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetServiceCustom String
Custom Internet Service name.
internetServiceCustomGroup String
Custom Internet Service group name.
internetServiceGroup String
Internet Service group name.
internetServiceId String
Internet Service ID.
internetServiceNegate String
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc String
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom String
Custom Internet Service source name.
internetServiceSrcCustomGroup String
Custom Internet Service source group name.
internetServiceSrcGroup String
Internet Service source group name.
internetServiceSrcId String
Internet Service source ID.
internetServiceSrcNegate String
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
outbound String
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesFirewallConsolidatedPolicyId String
an identifier for the resource with format {{policyid}}.
perIpShaper String
Per-IP traffic shaper.
pkgFolderPath String
Pkg Folder Path.
policyid Double
Policy ID (0 - 4294967294).
poolname4 String
IPv4 pool names.
poolname6 String
IPv6 pool names.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule String
Schedule name.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl Double
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
srcaddr4 String
Source IPv4 address name and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sshPolicyRedirect String
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslSshProfile String
Name of an existing SSL SSH profile.
status String
Enable or disable this policy. Valid values: disable, enable.
tcpMssReceiver Double
Receiver TCP maximum segment size (MSS).
tcpMssSender Double
Sender TCP maximum segment size (MSS).
trafficShaper String
Traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
urlCategory String
Url-Category.
users String
Names of individual users that can authenticate with this policy.
utmStatus String
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
voipProfile String
Name of an existing VoIP profile.
vpntunnel String
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile String
Name of an existing Web application firewall profile.
wanopt String
Enable/disable WAN optimization. Valid values: disable, enable.
wanoptDetection String
WAN optimization auto-detection mode. Valid values: active, passive, off.
wanoptPassiveOpt String
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
wanoptPeer String
WAN optimization peer.
wanoptProfile String
WAN optimization profile.
webcache String
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps String
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile String
Name of an existing Web filter profile.
webproxyForwardServer String
Webproxy forward server name.
webproxyProfile String
Webproxy profile name.
pkg This property is required. string
Package.
_policyBlock number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory string
App-Category.
appGroup string
App-Group.
applicationList string
Name of an existing Application list.
applications number[]
Application.
autoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile string
Name of an existing Antivirus profile.
captivePortalExempt string
Enable exemption of some users from the captive portal. Valid values: disable, enable.
cifsProfile string
Name of an existing CIFS profile.
comments string
Comment.
diffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward string
Change packet's DiffServ to this value.
diffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
dlpSensor string
Name of an existing DLP sensor.
dnsfilterProfile string
Name of an existing DNS filter profile.
dstaddr4 string
Destination IPv4 address name and address group names.
dstaddr6 string
Destination IPv6 address name and address group names.
dstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf string
Outgoing (egress) interface.
emailfilterProfile string
Name of an existing email filter profile.
fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fssoGroups string
Names of FSSO groups.
globalLabel string
Label for the policy that appears when the GUI is in Global View mode.
groups string
Names of user groups that can authenticate with this policy.
httpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile string
Name of an existing ICAP profile.
inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
internetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetServiceCustom string
Custom Internet Service name.
internetServiceCustomGroup string
Custom Internet Service group name.
internetServiceGroup string
Internet Service group name.
internetServiceId string
Internet Service ID.
internetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom string
Custom Internet Service source name.
internetServiceSrcCustomGroup string
Custom Internet Service source group name.
internetServiceSrcGroup string
Internet Service source group name.
internetServiceSrcId string
Internet Service source ID.
internetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor string
Name of an existing IPS sensor.
logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
mmsProfile string
Name of an existing MMS profile.
name string
Policy name.
nat string
Enable/disable source NAT. Valid values: disable, enable.
outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesFirewallConsolidatedPolicyId string
an identifier for the resource with format {{policyid}}.
perIpShaper string
Per-IP traffic shaper.
pkgFolderPath string
Pkg Folder Path.
policyid number
Policy ID (0 - 4294967294).
poolname4 string
IPv4 pool names.
poolname6 string
IPv6 pool names.
profileGroup string
Name of profile group.
profileProtocolOptions string
Name of an existing Protocol options profile.
profileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule string
Schedule name.
scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service string
Service and service group names.
serviceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl number
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
srcaddr4 string
Source IPv4 address name and address group names.
srcaddr6 string
Source IPv6 address name and address group names.
srcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf string
Incoming (ingress) interface.
sshFilterProfile string
Name of an existing SSH filter profile.
sshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslSshProfile string
Name of an existing SSL SSH profile.
status string
Enable or disable this policy. Valid values: disable, enable.
tcpMssReceiver number
Receiver TCP maximum segment size (MSS).
tcpMssSender number
Sender TCP maximum segment size (MSS).
trafficShaper string
Traffic shaper.
trafficShaperReverse string
Reverse traffic shaper.
urlCategory string
Url-Category.
users string
Names of individual users that can authenticate with this policy.
utmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
voipProfile string
Name of an existing VoIP profile.
vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile string
Name of an existing Web application firewall profile.
wanopt string
Enable/disable WAN optimization. Valid values: disable, enable.
wanoptDetection string
WAN optimization auto-detection mode. Valid values: active, passive, off.
wanoptPassiveOpt string
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
wanoptPeer string
WAN optimization peer.
wanoptProfile string
WAN optimization profile.
webcache string
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile string
Name of an existing Web filter profile.
webproxyForwardServer string
Webproxy forward server name.
webproxyProfile string
Webproxy profile name.
pkg This property is required. str
Package.
_policy_block float
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action str
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
app_category str
App-Category.
app_group str
App-Group.
application_list str
Name of an existing Application list.
applications Sequence[float]
Application.
auto_asic_offload str
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
av_profile str
Name of an existing Antivirus profile.
captive_portal_exempt str
Enable exemption of some users from the captive portal. Valid values: disable, enable.
cifs_profile str
Name of an existing CIFS profile.
comments str
Comment.
diffserv_forward str
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffserv_reverse str
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcode_forward str
Change packet's DiffServ to this value.
diffservcode_rev str
Change packet's reverse (reply) DiffServ to this value.
dlp_sensor str
Name of an existing DLP sensor.
dnsfilter_profile str
Name of an existing DNS filter profile.
dstaddr4 str
Destination IPv4 address name and address group names.
dstaddr6 str
Destination IPv6 address name and address group names.
dstaddr_negate str
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf str
Outgoing (egress) interface.
emailfilter_profile str
Name of an existing email filter profile.
fixedport str
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fsso_groups str
Names of FSSO groups.
global_label str
Label for the policy that appears when the GUI is in Global View mode.
groups str
Names of user groups that can authenticate with this policy.
http_policy_redirect str
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icap_profile str
Name of an existing ICAP profile.
inbound str
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspection_mode str
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
internet_service str
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internet_service_custom str
Custom Internet Service name.
internet_service_custom_group str
Custom Internet Service group name.
internet_service_group str
Internet Service group name.
internet_service_id str
Internet Service ID.
internet_service_negate str
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internet_service_src str
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internet_service_src_custom str
Custom Internet Service source name.
internet_service_src_custom_group str
Custom Internet Service source group name.
internet_service_src_group str
Internet Service source group name.
internet_service_src_id str
Internet Service source ID.
internet_service_src_negate str
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ippool str
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ips_sensor str
Name of an existing IPS sensor.
logtraffic str
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtraffic_start str
Record logs when a session starts. Valid values: disable, enable.
mms_profile str
Name of an existing MMS profile.
name str
Policy name.
nat str
Enable/disable source NAT. Valid values: disable, enable.
outbound str
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packages_firewall_consolidated_policy_id str
an identifier for the resource with format {{policyid}}.
per_ip_shaper str
Per-IP traffic shaper.
pkg_folder_path str
Pkg Folder Path.
policyid float
Policy ID (0 - 4294967294).
poolname4 str
IPv4 pool names.
poolname6 str
IPv6 pool names.
profile_group str
Name of profile group.
profile_protocol_options str
Name of an existing Protocol options profile.
profile_type str
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule str
Schedule name.
scopetype str
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service str
Service and service group names.
service_negate str
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
session_ttl float
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
srcaddr4 str
Source IPv4 address name and address group names.
srcaddr6 str
Source IPv6 address name and address group names.
srcaddr_negate str
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf str
Incoming (ingress) interface.
ssh_filter_profile str
Name of an existing SSH filter profile.
ssh_policy_redirect str
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
ssl_ssh_profile str
Name of an existing SSL SSH profile.
status str
Enable or disable this policy. Valid values: disable, enable.
tcp_mss_receiver float
Receiver TCP maximum segment size (MSS).
tcp_mss_sender float
Sender TCP maximum segment size (MSS).
traffic_shaper str
Traffic shaper.
traffic_shaper_reverse str
Reverse traffic shaper.
url_category str
Url-Category.
users str
Names of individual users that can authenticate with this policy.
utm_status str
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
uuid str
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
voip_profile str
Name of an existing VoIP profile.
vpntunnel str
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
waf_profile str
Name of an existing Web application firewall profile.
wanopt str
Enable/disable WAN optimization. Valid values: disable, enable.
wanopt_detection str
WAN optimization auto-detection mode. Valid values: active, passive, off.
wanopt_passive_opt str
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
wanopt_peer str
WAN optimization peer.
wanopt_profile str
WAN optimization profile.
webcache str
Enable/disable web cache. Valid values: disable, enable.
webcache_https str
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilter_profile str
Name of an existing Web filter profile.
webproxy_forward_server str
Webproxy forward server name.
webproxy_profile str
Webproxy profile name.
pkg This property is required. String
Package.
_policyBlock Number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory String
App-Category.
appGroup String
App-Group.
applicationList String
Name of an existing Application list.
applications List<Number>
Application.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile String
Name of an existing Antivirus profile.
captivePortalExempt String
Enable exemption of some users from the captive portal. Valid values: disable, enable.
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
diffservForward String
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse String
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward String
Change packet's DiffServ to this value.
diffservcodeRev String
Change packet's reverse (reply) DiffServ to this value.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dstaddr4 String
Destination IPv4 address name and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
emailfilterProfile String
Name of an existing email filter profile.
fixedport String
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
httpPolicyRedirect String
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile String
Name of an existing ICAP profile.
inbound String
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode String
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
internetService String
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetServiceCustom String
Custom Internet Service name.
internetServiceCustomGroup String
Custom Internet Service group name.
internetServiceGroup String
Internet Service group name.
internetServiceId String
Internet Service ID.
internetServiceNegate String
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc String
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom String
Custom Internet Service source name.
internetServiceSrcCustomGroup String
Custom Internet Service source group name.
internetServiceSrcGroup String
Internet Service source group name.
internetServiceSrcId String
Internet Service source ID.
internetServiceSrcNegate String
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
outbound String
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesFirewallConsolidatedPolicyId String
an identifier for the resource with format {{policyid}}.
perIpShaper String
Per-IP traffic shaper.
pkgFolderPath String
Pkg Folder Path.
policyid Number
Policy ID (0 - 4294967294).
poolname4 String
IPv4 pool names.
poolname6 String
IPv6 pool names.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule String
Schedule name.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl Number
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
srcaddr4 String
Source IPv4 address name and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sshPolicyRedirect String
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslSshProfile String
Name of an existing SSL SSH profile.
status String
Enable or disable this policy. Valid values: disable, enable.
tcpMssReceiver Number
Receiver TCP maximum segment size (MSS).
tcpMssSender Number
Sender TCP maximum segment size (MSS).
trafficShaper String
Traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
urlCategory String
Url-Category.
users String
Names of individual users that can authenticate with this policy.
utmStatus String
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
voipProfile String
Name of an existing VoIP profile.
vpntunnel String
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile String
Name of an existing Web application firewall profile.
wanopt String
Enable/disable WAN optimization. Valid values: disable, enable.
wanoptDetection String
WAN optimization auto-detection mode. Valid values: active, passive, off.
wanoptPassiveOpt String
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
wanoptPeer String
WAN optimization peer.
wanoptProfile String
WAN optimization profile.
webcache String
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps String
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile String
Name of an existing Web filter profile.
webproxyForwardServer String
Webproxy forward server name.
webproxyProfile String
Webproxy profile name.

Outputs

All input properties are implicitly available as output properties. Additionally, the PackagesFirewallConsolidatedPolicy resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing PackagesFirewallConsolidatedPolicy Resource

Get an existing PackagesFirewallConsolidatedPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PackagesFirewallConsolidatedPolicyState, opts?: CustomResourceOptions): PackagesFirewallConsolidatedPolicy
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        _policy_block: Optional[float] = None,
        action: Optional[str] = None,
        adom: Optional[str] = None,
        app_category: Optional[str] = None,
        app_group: Optional[str] = None,
        application_list: Optional[str] = None,
        applications: Optional[Sequence[float]] = None,
        auto_asic_offload: Optional[str] = None,
        av_profile: Optional[str] = None,
        captive_portal_exempt: Optional[str] = None,
        cifs_profile: Optional[str] = None,
        comments: Optional[str] = None,
        diffserv_forward: Optional[str] = None,
        diffserv_reverse: Optional[str] = None,
        diffservcode_forward: Optional[str] = None,
        diffservcode_rev: Optional[str] = None,
        dlp_sensor: Optional[str] = None,
        dnsfilter_profile: Optional[str] = None,
        dstaddr4: Optional[str] = None,
        dstaddr6: Optional[str] = None,
        dstaddr_negate: Optional[str] = None,
        dstintf: Optional[str] = None,
        emailfilter_profile: Optional[str] = None,
        fixedport: Optional[str] = None,
        fsso_groups: Optional[str] = None,
        global_label: Optional[str] = None,
        groups: Optional[str] = None,
        http_policy_redirect: Optional[str] = None,
        icap_profile: Optional[str] = None,
        inbound: Optional[str] = None,
        inspection_mode: Optional[str] = None,
        internet_service: Optional[str] = None,
        internet_service_custom: Optional[str] = None,
        internet_service_custom_group: Optional[str] = None,
        internet_service_group: Optional[str] = None,
        internet_service_id: Optional[str] = None,
        internet_service_negate: Optional[str] = None,
        internet_service_src: Optional[str] = None,
        internet_service_src_custom: Optional[str] = None,
        internet_service_src_custom_group: Optional[str] = None,
        internet_service_src_group: Optional[str] = None,
        internet_service_src_id: Optional[str] = None,
        internet_service_src_negate: Optional[str] = None,
        ippool: Optional[str] = None,
        ips_sensor: Optional[str] = None,
        logtraffic: Optional[str] = None,
        logtraffic_start: Optional[str] = None,
        mms_profile: Optional[str] = None,
        name: Optional[str] = None,
        nat: Optional[str] = None,
        outbound: Optional[str] = None,
        packages_firewall_consolidated_policy_id: Optional[str] = None,
        per_ip_shaper: Optional[str] = None,
        pkg: Optional[str] = None,
        pkg_folder_path: Optional[str] = None,
        policyid: Optional[float] = None,
        poolname4: Optional[str] = None,
        poolname6: Optional[str] = None,
        profile_group: Optional[str] = None,
        profile_protocol_options: Optional[str] = None,
        profile_type: Optional[str] = None,
        schedule: Optional[str] = None,
        scopetype: Optional[str] = None,
        service: Optional[str] = None,
        service_negate: Optional[str] = None,
        session_ttl: Optional[float] = None,
        srcaddr4: Optional[str] = None,
        srcaddr6: Optional[str] = None,
        srcaddr_negate: Optional[str] = None,
        srcintf: Optional[str] = None,
        ssh_filter_profile: Optional[str] = None,
        ssh_policy_redirect: Optional[str] = None,
        ssl_ssh_profile: Optional[str] = None,
        status: Optional[str] = None,
        tcp_mss_receiver: Optional[float] = None,
        tcp_mss_sender: Optional[float] = None,
        traffic_shaper: Optional[str] = None,
        traffic_shaper_reverse: Optional[str] = None,
        url_category: Optional[str] = None,
        users: Optional[str] = None,
        utm_status: Optional[str] = None,
        uuid: Optional[str] = None,
        voip_profile: Optional[str] = None,
        vpntunnel: Optional[str] = None,
        waf_profile: Optional[str] = None,
        wanopt: Optional[str] = None,
        wanopt_detection: Optional[str] = None,
        wanopt_passive_opt: Optional[str] = None,
        wanopt_peer: Optional[str] = None,
        wanopt_profile: Optional[str] = None,
        webcache: Optional[str] = None,
        webcache_https: Optional[str] = None,
        webfilter_profile: Optional[str] = None,
        webproxy_forward_server: Optional[str] = None,
        webproxy_profile: Optional[str] = None) -> PackagesFirewallConsolidatedPolicy
func GetPackagesFirewallConsolidatedPolicy(ctx *Context, name string, id IDInput, state *PackagesFirewallConsolidatedPolicyState, opts ...ResourceOption) (*PackagesFirewallConsolidatedPolicy, error)
public static PackagesFirewallConsolidatedPolicy Get(string name, Input<string> id, PackagesFirewallConsolidatedPolicyState? state, CustomResourceOptions? opts = null)
public static PackagesFirewallConsolidatedPolicy get(String name, Output<String> id, PackagesFirewallConsolidatedPolicyState state, CustomResourceOptions options)
resources:  _:    type: fortimanager:PackagesFirewallConsolidatedPolicy    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AppCategory string
App-Category.
AppGroup string
App-Group.
ApplicationList string
Name of an existing Application list.
Applications List<double>
Application.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
AvProfile string
Name of an existing Antivirus profile.
CaptivePortalExempt string
Enable exemption of some users from the captive portal. Valid values: disable, enable.
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
DiffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
DiffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
DiffservcodeForward string
Change packet's DiffServ to this value.
DiffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
Dstaddr4 string
Destination IPv4 address name and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
EmailfilterProfile string
Name of an existing email filter profile.
Fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
HttpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
IcapProfile string
Name of an existing ICAP profile.
Inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
InspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
InternetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
InternetServiceCustom string
Custom Internet Service name.
InternetServiceCustomGroup string
Custom Internet Service group name.
InternetServiceGroup string
Internet Service group name.
InternetServiceId string
Internet Service ID.
InternetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetServiceSrcCustom string
Custom Internet Service source name.
InternetServiceSrcCustomGroup string
Custom Internet Service source group name.
InternetServiceSrcGroup string
Internet Service source group name.
InternetServiceSrcId string
Internet Service source ID.
InternetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
Outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
PackagesFirewallConsolidatedPolicyId string
an identifier for the resource with format {{policyid}}.
PerIpShaper string
Per-IP traffic shaper.
Pkg string
Package.
PkgFolderPath string
Pkg Folder Path.
Policyid double
Policy ID (0 - 4294967294).
Poolname4 string
IPv4 pool names.
Poolname6 string
IPv6 pool names.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
Schedule string
Schedule name.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
SessionTtl double
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
Srcaddr4 string
Source IPv4 address name and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
SslSshProfile string
Name of an existing SSL SSH profile.
Status string
Enable or disable this policy. Valid values: disable, enable.
TcpMssReceiver double
Receiver TCP maximum segment size (MSS).
TcpMssSender double
Sender TCP maximum segment size (MSS).
TrafficShaper string
Traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UrlCategory string
Url-Category.
Users string
Names of individual users that can authenticate with this policy.
UtmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VoipProfile string
Name of an existing VoIP profile.
Vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
WafProfile string
Name of an existing Web application firewall profile.
Wanopt string
Enable/disable WAN optimization. Valid values: disable, enable.
WanoptDetection string
WAN optimization auto-detection mode. Valid values: active, passive, off.
WanoptPassiveOpt string
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
WanoptPeer string
WAN optimization peer.
WanoptProfile string
WAN optimization profile.
Webcache string
Enable/disable web cache. Valid values: disable, enable.
WebcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
WebfilterProfile string
Name of an existing Web filter profile.
WebproxyForwardServer string
Webproxy forward server name.
WebproxyProfile string
Webproxy profile name.
_policyBlock double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AppCategory string
App-Category.
AppGroup string
App-Group.
ApplicationList string
Name of an existing Application list.
Applications []float64
Application.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
AvProfile string
Name of an existing Antivirus profile.
CaptivePortalExempt string
Enable exemption of some users from the captive portal. Valid values: disable, enable.
CifsProfile string
Name of an existing CIFS profile.
Comments string
Comment.
DiffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
DiffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
DiffservcodeForward string
Change packet's DiffServ to this value.
DiffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
DlpSensor string
Name of an existing DLP sensor.
DnsfilterProfile string
Name of an existing DNS filter profile.
Dstaddr4 string
Destination IPv4 address name and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
EmailfilterProfile string
Name of an existing email filter profile.
Fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
FssoGroups string
Names of FSSO groups.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Groups string
Names of user groups that can authenticate with this policy.
HttpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
IcapProfile string
Name of an existing ICAP profile.
Inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
InspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
InternetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
InternetServiceCustom string
Custom Internet Service name.
InternetServiceCustomGroup string
Custom Internet Service group name.
InternetServiceGroup string
Internet Service group name.
InternetServiceId string
Internet Service ID.
InternetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
InternetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
InternetServiceSrcCustom string
Custom Internet Service source name.
InternetServiceSrcCustomGroup string
Custom Internet Service source group name.
InternetServiceSrcGroup string
Internet Service source group name.
InternetServiceSrcId string
Internet Service source ID.
InternetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
IpsSensor string
Name of an existing IPS sensor.
Logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
LogtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
MmsProfile string
Name of an existing MMS profile.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
Outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
PackagesFirewallConsolidatedPolicyId string
an identifier for the resource with format {{policyid}}.
PerIpShaper string
Per-IP traffic shaper.
Pkg string
Package.
PkgFolderPath string
Pkg Folder Path.
Policyid float64
Policy ID (0 - 4294967294).
Poolname4 string
IPv4 pool names.
Poolname6 string
IPv6 pool names.
ProfileGroup string
Name of profile group.
ProfileProtocolOptions string
Name of an existing Protocol options profile.
ProfileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
Schedule string
Schedule name.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
SessionTtl float64
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
Srcaddr4 string
Source IPv4 address name and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
SshFilterProfile string
Name of an existing SSH filter profile.
SshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
SslSshProfile string
Name of an existing SSL SSH profile.
Status string
Enable or disable this policy. Valid values: disable, enable.
TcpMssReceiver float64
Receiver TCP maximum segment size (MSS).
TcpMssSender float64
Sender TCP maximum segment size (MSS).
TrafficShaper string
Traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UrlCategory string
Url-Category.
Users string
Names of individual users that can authenticate with this policy.
UtmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VoipProfile string
Name of an existing VoIP profile.
Vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
WafProfile string
Name of an existing Web application firewall profile.
Wanopt string
Enable/disable WAN optimization. Valid values: disable, enable.
WanoptDetection string
WAN optimization auto-detection mode. Valid values: active, passive, off.
WanoptPassiveOpt string
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
WanoptPeer string
WAN optimization peer.
WanoptProfile string
WAN optimization profile.
Webcache string
Enable/disable web cache. Valid values: disable, enable.
WebcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
WebfilterProfile string
Name of an existing Web filter profile.
WebproxyForwardServer string
Webproxy forward server name.
WebproxyProfile string
Webproxy profile name.
_policyBlock float64
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
_policyBlock Double
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory String
App-Category.
appGroup String
App-Group.
applicationList String
Name of an existing Application list.
applications List<Double>
Application.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile String
Name of an existing Antivirus profile.
captivePortalExempt String
Enable exemption of some users from the captive portal. Valid values: disable, enable.
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
diffservForward String
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse String
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward String
Change packet's DiffServ to this value.
diffservcodeRev String
Change packet's reverse (reply) DiffServ to this value.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dstaddr4 String
Destination IPv4 address name and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
emailfilterProfile String
Name of an existing email filter profile.
fixedport String
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
httpPolicyRedirect String
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile String
Name of an existing ICAP profile.
inbound String
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode String
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
internetService String
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetServiceCustom String
Custom Internet Service name.
internetServiceCustomGroup String
Custom Internet Service group name.
internetServiceGroup String
Internet Service group name.
internetServiceId String
Internet Service ID.
internetServiceNegate String
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc String
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom String
Custom Internet Service source name.
internetServiceSrcCustomGroup String
Custom Internet Service source group name.
internetServiceSrcGroup String
Internet Service source group name.
internetServiceSrcId String
Internet Service source ID.
internetServiceSrcNegate String
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
outbound String
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesFirewallConsolidatedPolicyId String
an identifier for the resource with format {{policyid}}.
perIpShaper String
Per-IP traffic shaper.
pkg String
Package.
pkgFolderPath String
Pkg Folder Path.
policyid Double
Policy ID (0 - 4294967294).
poolname4 String
IPv4 pool names.
poolname6 String
IPv6 pool names.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule String
Schedule name.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl Double
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
srcaddr4 String
Source IPv4 address name and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sshPolicyRedirect String
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslSshProfile String
Name of an existing SSL SSH profile.
status String
Enable or disable this policy. Valid values: disable, enable.
tcpMssReceiver Double
Receiver TCP maximum segment size (MSS).
tcpMssSender Double
Sender TCP maximum segment size (MSS).
trafficShaper String
Traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
urlCategory String
Url-Category.
users String
Names of individual users that can authenticate with this policy.
utmStatus String
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
voipProfile String
Name of an existing VoIP profile.
vpntunnel String
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile String
Name of an existing Web application firewall profile.
wanopt String
Enable/disable WAN optimization. Valid values: disable, enable.
wanoptDetection String
WAN optimization auto-detection mode. Valid values: active, passive, off.
wanoptPassiveOpt String
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
wanoptPeer String
WAN optimization peer.
wanoptProfile String
WAN optimization profile.
webcache String
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps String
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile String
Name of an existing Web filter profile.
webproxyForwardServer String
Webproxy forward server name.
webproxyProfile String
Webproxy profile name.
_policyBlock number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action string
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory string
App-Category.
appGroup string
App-Group.
applicationList string
Name of an existing Application list.
applications number[]
Application.
autoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile string
Name of an existing Antivirus profile.
captivePortalExempt string
Enable exemption of some users from the captive portal. Valid values: disable, enable.
cifsProfile string
Name of an existing CIFS profile.
comments string
Comment.
diffservForward string
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse string
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward string
Change packet's DiffServ to this value.
diffservcodeRev string
Change packet's reverse (reply) DiffServ to this value.
dlpSensor string
Name of an existing DLP sensor.
dnsfilterProfile string
Name of an existing DNS filter profile.
dstaddr4 string
Destination IPv4 address name and address group names.
dstaddr6 string
Destination IPv6 address name and address group names.
dstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf string
Outgoing (egress) interface.
emailfilterProfile string
Name of an existing email filter profile.
fixedport string
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fssoGroups string
Names of FSSO groups.
globalLabel string
Label for the policy that appears when the GUI is in Global View mode.
groups string
Names of user groups that can authenticate with this policy.
httpPolicyRedirect string
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile string
Name of an existing ICAP profile.
inbound string
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode string
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
internetService string
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetServiceCustom string
Custom Internet Service name.
internetServiceCustomGroup string
Custom Internet Service group name.
internetServiceGroup string
Internet Service group name.
internetServiceId string
Internet Service ID.
internetServiceNegate string
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc string
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom string
Custom Internet Service source name.
internetServiceSrcCustomGroup string
Custom Internet Service source group name.
internetServiceSrcGroup string
Internet Service source group name.
internetServiceSrcId string
Internet Service source ID.
internetServiceSrcNegate string
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor string
Name of an existing IPS sensor.
logtraffic string
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart string
Record logs when a session starts. Valid values: disable, enable.
mmsProfile string
Name of an existing MMS profile.
name string
Policy name.
nat string
Enable/disable source NAT. Valid values: disable, enable.
outbound string
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesFirewallConsolidatedPolicyId string
an identifier for the resource with format {{policyid}}.
perIpShaper string
Per-IP traffic shaper.
pkg string
Package.
pkgFolderPath string
Pkg Folder Path.
policyid number
Policy ID (0 - 4294967294).
poolname4 string
IPv4 pool names.
poolname6 string
IPv6 pool names.
profileGroup string
Name of profile group.
profileProtocolOptions string
Name of an existing Protocol options profile.
profileType string
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule string
Schedule name.
scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service string
Service and service group names.
serviceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl number
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
srcaddr4 string
Source IPv4 address name and address group names.
srcaddr6 string
Source IPv6 address name and address group names.
srcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf string
Incoming (ingress) interface.
sshFilterProfile string
Name of an existing SSH filter profile.
sshPolicyRedirect string
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslSshProfile string
Name of an existing SSL SSH profile.
status string
Enable or disable this policy. Valid values: disable, enable.
tcpMssReceiver number
Receiver TCP maximum segment size (MSS).
tcpMssSender number
Sender TCP maximum segment size (MSS).
trafficShaper string
Traffic shaper.
trafficShaperReverse string
Reverse traffic shaper.
urlCategory string
Url-Category.
users string
Names of individual users that can authenticate with this policy.
utmStatus string
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
voipProfile string
Name of an existing VoIP profile.
vpntunnel string
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile string
Name of an existing Web application firewall profile.
wanopt string
Enable/disable WAN optimization. Valid values: disable, enable.
wanoptDetection string
WAN optimization auto-detection mode. Valid values: active, passive, off.
wanoptPassiveOpt string
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
wanoptPeer string
WAN optimization peer.
wanoptProfile string
WAN optimization profile.
webcache string
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps string
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile string
Name of an existing Web filter profile.
webproxyForwardServer string
Webproxy forward server name.
webproxyProfile string
Webproxy profile name.
_policy_block float
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action str
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
app_category str
App-Category.
app_group str
App-Group.
application_list str
Name of an existing Application list.
applications Sequence[float]
Application.
auto_asic_offload str
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
av_profile str
Name of an existing Antivirus profile.
captive_portal_exempt str
Enable exemption of some users from the captive portal. Valid values: disable, enable.
cifs_profile str
Name of an existing CIFS profile.
comments str
Comment.
diffserv_forward str
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffserv_reverse str
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcode_forward str
Change packet's DiffServ to this value.
diffservcode_rev str
Change packet's reverse (reply) DiffServ to this value.
dlp_sensor str
Name of an existing DLP sensor.
dnsfilter_profile str
Name of an existing DNS filter profile.
dstaddr4 str
Destination IPv4 address name and address group names.
dstaddr6 str
Destination IPv6 address name and address group names.
dstaddr_negate str
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf str
Outgoing (egress) interface.
emailfilter_profile str
Name of an existing email filter profile.
fixedport str
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fsso_groups str
Names of FSSO groups.
global_label str
Label for the policy that appears when the GUI is in Global View mode.
groups str
Names of user groups that can authenticate with this policy.
http_policy_redirect str
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icap_profile str
Name of an existing ICAP profile.
inbound str
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspection_mode str
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
internet_service str
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internet_service_custom str
Custom Internet Service name.
internet_service_custom_group str
Custom Internet Service group name.
internet_service_group str
Internet Service group name.
internet_service_id str
Internet Service ID.
internet_service_negate str
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internet_service_src str
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internet_service_src_custom str
Custom Internet Service source name.
internet_service_src_custom_group str
Custom Internet Service source group name.
internet_service_src_group str
Internet Service source group name.
internet_service_src_id str
Internet Service source ID.
internet_service_src_negate str
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ippool str
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ips_sensor str
Name of an existing IPS sensor.
logtraffic str
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtraffic_start str
Record logs when a session starts. Valid values: disable, enable.
mms_profile str
Name of an existing MMS profile.
name str
Policy name.
nat str
Enable/disable source NAT. Valid values: disable, enable.
outbound str
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packages_firewall_consolidated_policy_id str
an identifier for the resource with format {{policyid}}.
per_ip_shaper str
Per-IP traffic shaper.
pkg str
Package.
pkg_folder_path str
Pkg Folder Path.
policyid float
Policy ID (0 - 4294967294).
poolname4 str
IPv4 pool names.
poolname6 str
IPv6 pool names.
profile_group str
Name of profile group.
profile_protocol_options str
Name of an existing Protocol options profile.
profile_type str
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule str
Schedule name.
scopetype str
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service str
Service and service group names.
service_negate str
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
session_ttl float
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
srcaddr4 str
Source IPv4 address name and address group names.
srcaddr6 str
Source IPv6 address name and address group names.
srcaddr_negate str
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf str
Incoming (ingress) interface.
ssh_filter_profile str
Name of an existing SSH filter profile.
ssh_policy_redirect str
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
ssl_ssh_profile str
Name of an existing SSL SSH profile.
status str
Enable or disable this policy. Valid values: disable, enable.
tcp_mss_receiver float
Receiver TCP maximum segment size (MSS).
tcp_mss_sender float
Sender TCP maximum segment size (MSS).
traffic_shaper str
Traffic shaper.
traffic_shaper_reverse str
Reverse traffic shaper.
url_category str
Url-Category.
users str
Names of individual users that can authenticate with this policy.
utm_status str
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
uuid str
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
voip_profile str
Name of an existing VoIP profile.
vpntunnel str
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
waf_profile str
Name of an existing Web application firewall profile.
wanopt str
Enable/disable WAN optimization. Valid values: disable, enable.
wanopt_detection str
WAN optimization auto-detection mode. Valid values: active, passive, off.
wanopt_passive_opt str
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
wanopt_peer str
WAN optimization peer.
wanopt_profile str
WAN optimization profile.
webcache str
Enable/disable web cache. Valid values: disable, enable.
webcache_https str
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilter_profile str
Name of an existing Web filter profile.
webproxy_forward_server str
Webproxy forward server name.
webproxy_profile str
Webproxy profile name.
_policyBlock Number
Assigned policy block. When this attribute is set, the policy represent a policy block, and all other attributes are ignored. This attribute is not available when configuring policy inside a policy block.
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept, ipsec.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
appCategory String
App-Category.
appGroup String
App-Group.
applicationList String
Name of an existing Application list.
applications List<Number>
Application.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
avProfile String
Name of an existing Antivirus profile.
captivePortalExempt String
Enable exemption of some users from the captive portal. Valid values: disable, enable.
cifsProfile String
Name of an existing CIFS profile.
comments String
Comment.
diffservForward String
Enable to change packet's DiffServ values to the specified diffservcode-forward value. Valid values: disable, enable.
diffservReverse String
Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value. Valid values: disable, enable.
diffservcodeForward String
Change packet's DiffServ to this value.
diffservcodeRev String
Change packet's reverse (reply) DiffServ to this value.
dlpSensor String
Name of an existing DLP sensor.
dnsfilterProfile String
Name of an existing DNS filter profile.
dstaddr4 String
Destination IPv4 address name and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
emailfilterProfile String
Name of an existing email filter profile.
fixedport String
Enable to prevent source NAT from changing a session's source port. Valid values: disable, enable.
fssoGroups String
Names of FSSO groups.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
groups String
Names of user groups that can authenticate with this policy.
httpPolicyRedirect String
Redirect HTTP(S) traffic to matching transparent web proxy policy. Valid values: disable, enable.
icapProfile String
Name of an existing ICAP profile.
inbound String
Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN. Valid values: disable, enable.
inspectionMode String
Policy inspection mode (Flow/proxy). Default is Flow mode. Valid values: proxy, flow.
internetService String
Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: disable, enable.
internetServiceCustom String
Custom Internet Service name.
internetServiceCustomGroup String
Custom Internet Service group name.
internetServiceGroup String
Internet Service group name.
internetServiceId String
Internet Service ID.
internetServiceNegate String
When enabled internet-service specifies what the service must NOT be. Valid values: disable, enable.
internetServiceSrc String
Enable/disable use of Internet Services in source for this policy. If enabled, source address is not used. Valid values: disable, enable.
internetServiceSrcCustom String
Custom Internet Service source name.
internetServiceSrcCustomGroup String
Custom Internet Service source group name.
internetServiceSrcGroup String
Internet Service source group name.
internetServiceSrcId String
Internet Service source ID.
internetServiceSrcNegate String
When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
ipsSensor String
Name of an existing IPS sensor.
logtraffic String
Enable or disable logging. Log all sessions or security profile sessions. Valid values: disable, all, utm.
logtrafficStart String
Record logs when a session starts. Valid values: disable, enable.
mmsProfile String
Name of an existing MMS profile.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
outbound String
Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN. Valid values: disable, enable.
packagesFirewallConsolidatedPolicyId String
an identifier for the resource with format {{policyid}}.
perIpShaper String
Per-IP traffic shaper.
pkg String
Package.
pkgFolderPath String
Pkg Folder Path.
policyid Number
Policy ID (0 - 4294967294).
poolname4 String
IPv4 pool names.
poolname6 String
IPv6 pool names.
profileGroup String
Name of profile group.
profileProtocolOptions String
Name of an existing Protocol options profile.
profileType String
Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
schedule String
Schedule name.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
sessionTtl Number
TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
srcaddr4 String
Source IPv4 address name and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
sshFilterProfile String
Name of an existing SSH filter profile.
sshPolicyRedirect String
Redirect SSH traffic to matching transparent proxy policy. Valid values: disable, enable.
sslSshProfile String
Name of an existing SSL SSH profile.
status String
Enable or disable this policy. Valid values: disable, enable.
tcpMssReceiver Number
Receiver TCP maximum segment size (MSS).
tcpMssSender Number
Sender TCP maximum segment size (MSS).
trafficShaper String
Traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
urlCategory String
Url-Category.
users String
Names of individual users that can authenticate with this policy.
utmStatus String
Enable to add one or more security profiles (AV, IPS, etc.) to the firewall policy. Valid values: disable, enable.
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
voipProfile String
Name of an existing VoIP profile.
vpntunnel String
Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile String
Name of an existing Web application firewall profile.
wanopt String
Enable/disable WAN optimization. Valid values: disable, enable.
wanoptDetection String
WAN optimization auto-detection mode. Valid values: active, passive, off.
wanoptPassiveOpt String
WAN optimization passive mode options. This option decides what IP address will be used to connect to server. Valid values: default, transparent, non-transparent.
wanoptPeer String
WAN optimization peer.
wanoptProfile String
WAN optimization profile.
webcache String
Enable/disable web cache. Valid values: disable, enable.
webcacheHttps String
Enable/disable web cache for HTTPS. Valid values: disable, enable.
webfilterProfile String
Name of an existing Web filter profile.
webproxyForwardServer String
Webproxy forward server name.
webproxyProfile String
Webproxy profile name.

Import

Packages FirewallConsolidatedPolicy can be imported using any of these accepted formats:

Set import_options = [“pkg_folder_path=YOUR_VALUE”, “pkg=YOUR_VALUE”] in the provider section.

$ export “FORTIMANAGER_IMPORT_TABLE”=“true”

$ pulumi import fortimanager:index/packagesFirewallConsolidatedPolicy:PackagesFirewallConsolidatedPolicy labelname {{policyid}}
Copy

$ unset “FORTIMANAGER_IMPORT_TABLE”

-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortimanager fortinetdev/terraform-provider-fortimanager
License
Notes
This Pulumi package is based on the fortimanager Terraform Provider.
fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager