Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortios
  3. API Docs
  4. wirelesscontroller
  5. Widsprofile
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

fortios.wirelesscontroller.Widsprofile

Explore with Pulumi AI

Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

Configure wireless intrusion detection system (WIDS) profiles.

Create Widsprofile Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Widsprofile(name: string, args?: WidsprofileArgs, opts?: CustomResourceOptions);
@overload
def Widsprofile(resource_name: str,
                args: Optional[WidsprofileArgs] = None,
                opts: Optional[ResourceOptions] = None)

@overload
def Widsprofile(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                ap_auto_suppress: Optional[str] = None,
                ap_bgscan_disable_day: Optional[str] = None,
                ap_bgscan_disable_end: Optional[str] = None,
                ap_bgscan_disable_schedules: Optional[Sequence[WidsprofileApBgscanDisableScheduleArgs]] = None,
                ap_bgscan_disable_start: Optional[str] = None,
                ap_bgscan_duration: Optional[int] = None,
                ap_bgscan_idle: Optional[int] = None,
                ap_bgscan_intv: Optional[int] = None,
                ap_bgscan_period: Optional[int] = None,
                ap_bgscan_report_intv: Optional[int] = None,
                ap_fgscan_report_intv: Optional[int] = None,
                ap_scan: Optional[str] = None,
                ap_scan_channel_list2g5gs: Optional[Sequence[WidsprofileApScanChannelList2g5gArgs]] = None,
                ap_scan_channel_list6gs: Optional[Sequence[WidsprofileApScanChannelList6gArgs]] = None,
                ap_scan_passive: Optional[str] = None,
                ap_scan_threshold: Optional[str] = None,
                asleap_attack: Optional[str] = None,
                assoc_flood_thresh: Optional[int] = None,
                assoc_flood_time: Optional[int] = None,
                assoc_frame_flood: Optional[str] = None,
                auth_flood_thresh: Optional[int] = None,
                auth_flood_time: Optional[int] = None,
                auth_frame_flood: Optional[str] = None,
                comment: Optional[str] = None,
                deauth_broadcast: Optional[str] = None,
                deauth_unknown_src_thresh: Optional[int] = None,
                dynamic_sort_subtable: Optional[str] = None,
                eapol_fail_flood: Optional[str] = None,
                eapol_fail_intv: Optional[int] = None,
                eapol_fail_thresh: Optional[int] = None,
                eapol_logoff_flood: Optional[str] = None,
                eapol_logoff_intv: Optional[int] = None,
                eapol_logoff_thresh: Optional[int] = None,
                eapol_pre_fail_flood: Optional[str] = None,
                eapol_pre_fail_intv: Optional[int] = None,
                eapol_pre_fail_thresh: Optional[int] = None,
                eapol_pre_succ_flood: Optional[str] = None,
                eapol_pre_succ_intv: Optional[int] = None,
                eapol_pre_succ_thresh: Optional[int] = None,
                eapol_start_flood: Optional[str] = None,
                eapol_start_intv: Optional[int] = None,
                eapol_start_thresh: Optional[int] = None,
                eapol_succ_flood: Optional[str] = None,
                eapol_succ_intv: Optional[int] = None,
                eapol_succ_thresh: Optional[int] = None,
                get_all_tables: Optional[str] = None,
                invalid_mac_oui: Optional[str] = None,
                long_duration_attack: Optional[str] = None,
                long_duration_thresh: Optional[int] = None,
                name: Optional[str] = None,
                null_ssid_probe_resp: Optional[str] = None,
                sensor_mode: Optional[str] = None,
                spoofed_deauth: Optional[str] = None,
                vdomparam: Optional[str] = None,
                weak_wep_iv: Optional[str] = None,
                wireless_bridge: Optional[str] = None)
func NewWidsprofile(ctx *Context, name string, args *WidsprofileArgs, opts ...ResourceOption) (*Widsprofile, error)
public Widsprofile(string name, WidsprofileArgs? args = null, CustomResourceOptions? opts = null)
public Widsprofile(String name, WidsprofileArgs args)
public Widsprofile(String name, WidsprofileArgs args, CustomResourceOptions options)

type: fortios:wirelesscontroller:Widsprofile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args WidsprofileArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args WidsprofileArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args WidsprofileArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args WidsprofileArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. WidsprofileArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var widsprofileResource = new Fortios.Wirelesscontroller.Widsprofile("widsprofileResource", new()
{
    ApAutoSuppress = "string",
    ApBgscanDisableDay = "string",
    ApBgscanDisableEnd = "string",
    ApBgscanDisableSchedules = new[]
    {
        new Fortios.Wirelesscontroller.Inputs.WidsprofileApBgscanDisableScheduleArgs
        {
            Name = "string",
        },
    },
    ApBgscanDisableStart = "string",
    ApBgscanDuration = 0,
    ApBgscanIdle = 0,
    ApBgscanIntv = 0,
    ApBgscanPeriod = 0,
    ApBgscanReportIntv = 0,
    ApFgscanReportIntv = 0,
    ApScan = "string",
    ApScanChannelList2g5gs = new[]
    {
        new Fortios.Wirelesscontroller.Inputs.WidsprofileApScanChannelList2g5gArgs
        {
            Chan = "string",
        },
    },
    ApScanChannelList6gs = new[]
    {
        new Fortios.Wirelesscontroller.Inputs.WidsprofileApScanChannelList6gArgs
        {
            Chan = "string",
        },
    },
    ApScanPassive = "string",
    ApScanThreshold = "string",
    AsleapAttack = "string",
    AssocFloodThresh = 0,
    AssocFloodTime = 0,
    AssocFrameFlood = "string",
    AuthFloodThresh = 0,
    AuthFloodTime = 0,
    AuthFrameFlood = "string",
    Comment = "string",
    DeauthBroadcast = "string",
    DeauthUnknownSrcThresh = 0,
    DynamicSortSubtable = "string",
    EapolFailFlood = "string",
    EapolFailIntv = 0,
    EapolFailThresh = 0,
    EapolLogoffFlood = "string",
    EapolLogoffIntv = 0,
    EapolLogoffThresh = 0,
    EapolPreFailFlood = "string",
    EapolPreFailIntv = 0,
    EapolPreFailThresh = 0,
    EapolPreSuccFlood = "string",
    EapolPreSuccIntv = 0,
    EapolPreSuccThresh = 0,
    EapolStartFlood = "string",
    EapolStartIntv = 0,
    EapolStartThresh = 0,
    EapolSuccFlood = "string",
    EapolSuccIntv = 0,
    EapolSuccThresh = 0,
    GetAllTables = "string",
    InvalidMacOui = "string",
    LongDurationAttack = "string",
    LongDurationThresh = 0,
    Name = "string",
    NullSsidProbeResp = "string",
    SensorMode = "string",
    SpoofedDeauth = "string",
    Vdomparam = "string",
    WeakWepIv = "string",
    WirelessBridge = "string",
});
Copy
example, err := wirelesscontroller.NewWidsprofile(ctx, "widsprofileResource", &wirelesscontroller.WidsprofileArgs{
	ApAutoSuppress:     pulumi.String("string"),
	ApBgscanDisableDay: pulumi.String("string"),
	ApBgscanDisableEnd: pulumi.String("string"),
	ApBgscanDisableSchedules: wirelesscontroller.WidsprofileApBgscanDisableScheduleArray{
		&wirelesscontroller.WidsprofileApBgscanDisableScheduleArgs{
			Name: pulumi.String("string"),
		},
	},
	ApBgscanDisableStart: pulumi.String("string"),
	ApBgscanDuration:     pulumi.Int(0),
	ApBgscanIdle:         pulumi.Int(0),
	ApBgscanIntv:         pulumi.Int(0),
	ApBgscanPeriod:       pulumi.Int(0),
	ApBgscanReportIntv:   pulumi.Int(0),
	ApFgscanReportIntv:   pulumi.Int(0),
	ApScan:               pulumi.String("string"),
	ApScanChannelList2g5gs: wirelesscontroller.WidsprofileApScanChannelList2g5gArray{
		&wirelesscontroller.WidsprofileApScanChannelList2g5gArgs{
			Chan: pulumi.String("string"),
		},
	},
	ApScanChannelList6gs: wirelesscontroller.WidsprofileApScanChannelList6gArray{
		&wirelesscontroller.WidsprofileApScanChannelList6gArgs{
			Chan: pulumi.String("string"),
		},
	},
	ApScanPassive:          pulumi.String("string"),
	ApScanThreshold:        pulumi.String("string"),
	AsleapAttack:           pulumi.String("string"),
	AssocFloodThresh:       pulumi.Int(0),
	AssocFloodTime:         pulumi.Int(0),
	AssocFrameFlood:        pulumi.String("string"),
	AuthFloodThresh:        pulumi.Int(0),
	AuthFloodTime:          pulumi.Int(0),
	AuthFrameFlood:         pulumi.String("string"),
	Comment:                pulumi.String("string"),
	DeauthBroadcast:        pulumi.String("string"),
	DeauthUnknownSrcThresh: pulumi.Int(0),
	DynamicSortSubtable:    pulumi.String("string"),
	EapolFailFlood:         pulumi.String("string"),
	EapolFailIntv:          pulumi.Int(0),
	EapolFailThresh:        pulumi.Int(0),
	EapolLogoffFlood:       pulumi.String("string"),
	EapolLogoffIntv:        pulumi.Int(0),
	EapolLogoffThresh:      pulumi.Int(0),
	EapolPreFailFlood:      pulumi.String("string"),
	EapolPreFailIntv:       pulumi.Int(0),
	EapolPreFailThresh:     pulumi.Int(0),
	EapolPreSuccFlood:      pulumi.String("string"),
	EapolPreSuccIntv:       pulumi.Int(0),
	EapolPreSuccThresh:     pulumi.Int(0),
	EapolStartFlood:        pulumi.String("string"),
	EapolStartIntv:         pulumi.Int(0),
	EapolStartThresh:       pulumi.Int(0),
	EapolSuccFlood:         pulumi.String("string"),
	EapolSuccIntv:          pulumi.Int(0),
	EapolSuccThresh:        pulumi.Int(0),
	GetAllTables:           pulumi.String("string"),
	InvalidMacOui:          pulumi.String("string"),
	LongDurationAttack:     pulumi.String("string"),
	LongDurationThresh:     pulumi.Int(0),
	Name:                   pulumi.String("string"),
	NullSsidProbeResp:      pulumi.String("string"),
	SensorMode:             pulumi.String("string"),
	SpoofedDeauth:          pulumi.String("string"),
	Vdomparam:              pulumi.String("string"),
	WeakWepIv:              pulumi.String("string"),
	WirelessBridge:         pulumi.String("string"),
})
Copy
var widsprofileResource = new Widsprofile("widsprofileResource", WidsprofileArgs.builder()
    .apAutoSuppress("string")
    .apBgscanDisableDay("string")
    .apBgscanDisableEnd("string")
    .apBgscanDisableSchedules(WidsprofileApBgscanDisableScheduleArgs.builder()
        .name("string")
        .build())
    .apBgscanDisableStart("string")
    .apBgscanDuration(0)
    .apBgscanIdle(0)
    .apBgscanIntv(0)
    .apBgscanPeriod(0)
    .apBgscanReportIntv(0)
    .apFgscanReportIntv(0)
    .apScan("string")
    .apScanChannelList2g5gs(WidsprofileApScanChannelList2g5gArgs.builder()
        .chan("string")
        .build())
    .apScanChannelList6gs(WidsprofileApScanChannelList6gArgs.builder()
        .chan("string")
        .build())
    .apScanPassive("string")
    .apScanThreshold("string")
    .asleapAttack("string")
    .assocFloodThresh(0)
    .assocFloodTime(0)
    .assocFrameFlood("string")
    .authFloodThresh(0)
    .authFloodTime(0)
    .authFrameFlood("string")
    .comment("string")
    .deauthBroadcast("string")
    .deauthUnknownSrcThresh(0)
    .dynamicSortSubtable("string")
    .eapolFailFlood("string")
    .eapolFailIntv(0)
    .eapolFailThresh(0)
    .eapolLogoffFlood("string")
    .eapolLogoffIntv(0)
    .eapolLogoffThresh(0)
    .eapolPreFailFlood("string")
    .eapolPreFailIntv(0)
    .eapolPreFailThresh(0)
    .eapolPreSuccFlood("string")
    .eapolPreSuccIntv(0)
    .eapolPreSuccThresh(0)
    .eapolStartFlood("string")
    .eapolStartIntv(0)
    .eapolStartThresh(0)
    .eapolSuccFlood("string")
    .eapolSuccIntv(0)
    .eapolSuccThresh(0)
    .getAllTables("string")
    .invalidMacOui("string")
    .longDurationAttack("string")
    .longDurationThresh(0)
    .name("string")
    .nullSsidProbeResp("string")
    .sensorMode("string")
    .spoofedDeauth("string")
    .vdomparam("string")
    .weakWepIv("string")
    .wirelessBridge("string")
    .build());
Copy
widsprofile_resource = fortios.wirelesscontroller.Widsprofile("widsprofileResource",
    ap_auto_suppress="string",
    ap_bgscan_disable_day="string",
    ap_bgscan_disable_end="string",
    ap_bgscan_disable_schedules=[{
        "name": "string",
    }],
    ap_bgscan_disable_start="string",
    ap_bgscan_duration=0,
    ap_bgscan_idle=0,
    ap_bgscan_intv=0,
    ap_bgscan_period=0,
    ap_bgscan_report_intv=0,
    ap_fgscan_report_intv=0,
    ap_scan="string",
    ap_scan_channel_list2g5gs=[{
        "chan": "string",
    }],
    ap_scan_channel_list6gs=[{
        "chan": "string",
    }],
    ap_scan_passive="string",
    ap_scan_threshold="string",
    asleap_attack="string",
    assoc_flood_thresh=0,
    assoc_flood_time=0,
    assoc_frame_flood="string",
    auth_flood_thresh=0,
    auth_flood_time=0,
    auth_frame_flood="string",
    comment="string",
    deauth_broadcast="string",
    deauth_unknown_src_thresh=0,
    dynamic_sort_subtable="string",
    eapol_fail_flood="string",
    eapol_fail_intv=0,
    eapol_fail_thresh=0,
    eapol_logoff_flood="string",
    eapol_logoff_intv=0,
    eapol_logoff_thresh=0,
    eapol_pre_fail_flood="string",
    eapol_pre_fail_intv=0,
    eapol_pre_fail_thresh=0,
    eapol_pre_succ_flood="string",
    eapol_pre_succ_intv=0,
    eapol_pre_succ_thresh=0,
    eapol_start_flood="string",
    eapol_start_intv=0,
    eapol_start_thresh=0,
    eapol_succ_flood="string",
    eapol_succ_intv=0,
    eapol_succ_thresh=0,
    get_all_tables="string",
    invalid_mac_oui="string",
    long_duration_attack="string",
    long_duration_thresh=0,
    name="string",
    null_ssid_probe_resp="string",
    sensor_mode="string",
    spoofed_deauth="string",
    vdomparam="string",
    weak_wep_iv="string",
    wireless_bridge="string")
Copy
const widsprofileResource = new fortios.wirelesscontroller.Widsprofile("widsprofileResource", {
    apAutoSuppress: "string",
    apBgscanDisableDay: "string",
    apBgscanDisableEnd: "string",
    apBgscanDisableSchedules: [{
        name: "string",
    }],
    apBgscanDisableStart: "string",
    apBgscanDuration: 0,
    apBgscanIdle: 0,
    apBgscanIntv: 0,
    apBgscanPeriod: 0,
    apBgscanReportIntv: 0,
    apFgscanReportIntv: 0,
    apScan: "string",
    apScanChannelList2g5gs: [{
        chan: "string",
    }],
    apScanChannelList6gs: [{
        chan: "string",
    }],
    apScanPassive: "string",
    apScanThreshold: "string",
    asleapAttack: "string",
    assocFloodThresh: 0,
    assocFloodTime: 0,
    assocFrameFlood: "string",
    authFloodThresh: 0,
    authFloodTime: 0,
    authFrameFlood: "string",
    comment: "string",
    deauthBroadcast: "string",
    deauthUnknownSrcThresh: 0,
    dynamicSortSubtable: "string",
    eapolFailFlood: "string",
    eapolFailIntv: 0,
    eapolFailThresh: 0,
    eapolLogoffFlood: "string",
    eapolLogoffIntv: 0,
    eapolLogoffThresh: 0,
    eapolPreFailFlood: "string",
    eapolPreFailIntv: 0,
    eapolPreFailThresh: 0,
    eapolPreSuccFlood: "string",
    eapolPreSuccIntv: 0,
    eapolPreSuccThresh: 0,
    eapolStartFlood: "string",
    eapolStartIntv: 0,
    eapolStartThresh: 0,
    eapolSuccFlood: "string",
    eapolSuccIntv: 0,
    eapolSuccThresh: 0,
    getAllTables: "string",
    invalidMacOui: "string",
    longDurationAttack: "string",
    longDurationThresh: 0,
    name: "string",
    nullSsidProbeResp: "string",
    sensorMode: "string",
    spoofedDeauth: "string",
    vdomparam: "string",
    weakWepIv: "string",
    wirelessBridge: "string",
});
Copy
type: fortios:wirelesscontroller:Widsprofile
properties:
    apAutoSuppress: string
    apBgscanDisableDay: string
    apBgscanDisableEnd: string
    apBgscanDisableSchedules:
        - name: string
    apBgscanDisableStart: string
    apBgscanDuration: 0
    apBgscanIdle: 0
    apBgscanIntv: 0
    apBgscanPeriod: 0
    apBgscanReportIntv: 0
    apFgscanReportIntv: 0
    apScan: string
    apScanChannelList2g5gs:
        - chan: string
    apScanChannelList6gs:
        - chan: string
    apScanPassive: string
    apScanThreshold: string
    asleapAttack: string
    assocFloodThresh: 0
    assocFloodTime: 0
    assocFrameFlood: string
    authFloodThresh: 0
    authFloodTime: 0
    authFrameFlood: string
    comment: string
    deauthBroadcast: string
    deauthUnknownSrcThresh: 0
    dynamicSortSubtable: string
    eapolFailFlood: string
    eapolFailIntv: 0
    eapolFailThresh: 0
    eapolLogoffFlood: string
    eapolLogoffIntv: 0
    eapolLogoffThresh: 0
    eapolPreFailFlood: string
    eapolPreFailIntv: 0
    eapolPreFailThresh: 0
    eapolPreSuccFlood: string
    eapolPreSuccIntv: 0
    eapolPreSuccThresh: 0
    eapolStartFlood: string
    eapolStartIntv: 0
    eapolStartThresh: 0
    eapolSuccFlood: string
    eapolSuccIntv: 0
    eapolSuccThresh: 0
    getAllTables: string
    invalidMacOui: string
    longDurationAttack: string
    longDurationThresh: 0
    name: string
    nullSsidProbeResp: string
    sensorMode: string
    spoofedDeauth: string
    vdomparam: string
    weakWepIv: string
    wirelessBridge: string
Copy

Widsprofile Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Widsprofile resource accepts the following input properties:

ApAutoSuppress string
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
ApBgscanDisableDay string
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
ApBgscanDisableEnd string
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ApBgscanDisableSchedules List<Pulumiverse.Fortios.Wirelesscontroller.Inputs.WidsprofileApBgscanDisableSchedule>
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
ApBgscanDisableStart string
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ApBgscanDuration int
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
ApBgscanIdle int
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
ApBgscanIntv int
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
ApBgscanPeriod int
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
ApBgscanReportIntv int
Period between background scan reports (15 - 600 sec, default = 30).
ApFgscanReportIntv int
Period between foreground scan reports (15 - 600 sec, default = 15).
ApScan string
Enable/disable rogue AP detection. Valid values: disable, enable.
ApScanChannelList2g5gs List<Pulumiverse.Fortios.Wirelesscontroller.Inputs.WidsprofileApScanChannelList2g5g>
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
ApScanChannelList6gs List<Pulumiverse.Fortios.Wirelesscontroller.Inputs.WidsprofileApScanChannelList6g>
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
ApScanPassive string
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
ApScanThreshold string
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
AsleapAttack string
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
AssocFloodThresh int
The threshold value for association frame flooding.
AssocFloodTime int
Number of seconds after which a station is considered not connected.
AssocFrameFlood string
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
AuthFloodThresh int
The threshold value for authentication frame flooding.
AuthFloodTime int
Number of seconds after which a station is considered not connected.
AuthFrameFlood string
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
Comment string
Comment.
DeauthBroadcast string
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
DeauthUnknownSrcThresh int
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
EapolFailFlood string
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolFailIntv int
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
EapolFailThresh int
The threshold value for EAPOL-Failure flooding in specified interval.
EapolLogoffFlood string
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolLogoffIntv int
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
EapolLogoffThresh int
The threshold value for EAPOL-Logoff flooding in specified interval.
EapolPreFailFlood string
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
EapolPreFailIntv int
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
EapolPreFailThresh int
The threshold value for premature EAPOL-Failure flooding in specified interval.
EapolPreSuccFlood string
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
EapolPreSuccIntv int
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
EapolPreSuccThresh int
The threshold value for premature EAPOL-Success flooding in specified interval.
EapolStartFlood string
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolStartIntv int
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
EapolStartThresh int
The threshold value for EAPOL-Start flooding in specified interval.
EapolSuccFlood string
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolSuccIntv int
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
EapolSuccThresh int
The threshold value for EAPOL-Success flooding in specified interval.
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
InvalidMacOui string
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
LongDurationAttack string
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
LongDurationThresh int
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
Name Changes to this property will trigger replacement. string
WIDS profile name.
NullSsidProbeResp string
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
SensorMode string
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
SpoofedDeauth string
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
Vdomparam Changes to this property will trigger replacement. string

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

WeakWepIv string
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
WirelessBridge string
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.
ApAutoSuppress string
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
ApBgscanDisableDay string
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
ApBgscanDisableEnd string
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ApBgscanDisableSchedules []WidsprofileApBgscanDisableScheduleArgs
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
ApBgscanDisableStart string
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ApBgscanDuration int
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
ApBgscanIdle int
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
ApBgscanIntv int
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
ApBgscanPeriod int
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
ApBgscanReportIntv int
Period between background scan reports (15 - 600 sec, default = 30).
ApFgscanReportIntv int
Period between foreground scan reports (15 - 600 sec, default = 15).
ApScan string
Enable/disable rogue AP detection. Valid values: disable, enable.
ApScanChannelList2g5gs []WidsprofileApScanChannelList2g5gArgs
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
ApScanChannelList6gs []WidsprofileApScanChannelList6gArgs
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
ApScanPassive string
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
ApScanThreshold string
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
AsleapAttack string
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
AssocFloodThresh int
The threshold value for association frame flooding.
AssocFloodTime int
Number of seconds after which a station is considered not connected.
AssocFrameFlood string
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
AuthFloodThresh int
The threshold value for authentication frame flooding.
AuthFloodTime int
Number of seconds after which a station is considered not connected.
AuthFrameFlood string
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
Comment string
Comment.
DeauthBroadcast string
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
DeauthUnknownSrcThresh int
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
EapolFailFlood string
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolFailIntv int
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
EapolFailThresh int
The threshold value for EAPOL-Failure flooding in specified interval.
EapolLogoffFlood string
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolLogoffIntv int
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
EapolLogoffThresh int
The threshold value for EAPOL-Logoff flooding in specified interval.
EapolPreFailFlood string
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
EapolPreFailIntv int
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
EapolPreFailThresh int
The threshold value for premature EAPOL-Failure flooding in specified interval.
EapolPreSuccFlood string
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
EapolPreSuccIntv int
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
EapolPreSuccThresh int
The threshold value for premature EAPOL-Success flooding in specified interval.
EapolStartFlood string
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolStartIntv int
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
EapolStartThresh int
The threshold value for EAPOL-Start flooding in specified interval.
EapolSuccFlood string
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolSuccIntv int
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
EapolSuccThresh int
The threshold value for EAPOL-Success flooding in specified interval.
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
InvalidMacOui string
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
LongDurationAttack string
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
LongDurationThresh int
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
Name Changes to this property will trigger replacement. string
WIDS profile name.
NullSsidProbeResp string
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
SensorMode string
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
SpoofedDeauth string
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
Vdomparam Changes to this property will trigger replacement. string

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

WeakWepIv string
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
WirelessBridge string
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.
apAutoSuppress String
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
apBgscanDisableDay String
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
apBgscanDisableEnd String
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDisableSchedules List<WidsprofileApBgscanDisableSchedule>
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
apBgscanDisableStart String
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDuration Integer
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
apBgscanIdle Integer
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
apBgscanIntv Integer
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
apBgscanPeriod Integer
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
apBgscanReportIntv Integer
Period between background scan reports (15 - 600 sec, default = 30).
apFgscanReportIntv Integer
Period between foreground scan reports (15 - 600 sec, default = 15).
apScan String
Enable/disable rogue AP detection. Valid values: disable, enable.
apScanChannelList2g5gs List<WidsprofileApScanChannelList2g5g>
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
apScanChannelList6gs List<WidsprofileApScanChannelList6g>
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
apScanPassive String
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
apScanThreshold String
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
asleapAttack String
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
assocFloodThresh Integer
The threshold value for association frame flooding.
assocFloodTime Integer
Number of seconds after which a station is considered not connected.
assocFrameFlood String
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
authFloodThresh Integer
The threshold value for authentication frame flooding.
authFloodTime Integer
Number of seconds after which a station is considered not connected.
authFrameFlood String
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
comment String
Comment.
deauthBroadcast String
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
deauthUnknownSrcThresh Integer
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
eapolFailFlood String
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolFailIntv Integer
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
eapolFailThresh Integer
The threshold value for EAPOL-Failure flooding in specified interval.
eapolLogoffFlood String
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolLogoffIntv Integer
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
eapolLogoffThresh Integer
The threshold value for EAPOL-Logoff flooding in specified interval.
eapolPreFailFlood String
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreFailIntv Integer
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
eapolPreFailThresh Integer
The threshold value for premature EAPOL-Failure flooding in specified interval.
eapolPreSuccFlood String
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreSuccIntv Integer
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
eapolPreSuccThresh Integer
The threshold value for premature EAPOL-Success flooding in specified interval.
eapolStartFlood String
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolStartIntv Integer
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
eapolStartThresh Integer
The threshold value for EAPOL-Start flooding in specified interval.
eapolSuccFlood String
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolSuccIntv Integer
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
eapolSuccThresh Integer
The threshold value for EAPOL-Success flooding in specified interval.
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
invalidMacOui String
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
longDurationAttack String
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
longDurationThresh Integer
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
name Changes to this property will trigger replacement. String
WIDS profile name.
nullSsidProbeResp String
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
sensorMode String
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
spoofedDeauth String
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
vdomparam Changes to this property will trigger replacement. String

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

weakWepIv String
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
wirelessBridge String
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.
apAutoSuppress string
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
apBgscanDisableDay string
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
apBgscanDisableEnd string
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDisableSchedules WidsprofileApBgscanDisableSchedule[]
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
apBgscanDisableStart string
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDuration number
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
apBgscanIdle number
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
apBgscanIntv number
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
apBgscanPeriod number
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
apBgscanReportIntv number
Period between background scan reports (15 - 600 sec, default = 30).
apFgscanReportIntv number
Period between foreground scan reports (15 - 600 sec, default = 15).
apScan string
Enable/disable rogue AP detection. Valid values: disable, enable.
apScanChannelList2g5gs WidsprofileApScanChannelList2g5g[]
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
apScanChannelList6gs WidsprofileApScanChannelList6g[]
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
apScanPassive string
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
apScanThreshold string
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
asleapAttack string
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
assocFloodThresh number
The threshold value for association frame flooding.
assocFloodTime number
Number of seconds after which a station is considered not connected.
assocFrameFlood string
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
authFloodThresh number
The threshold value for authentication frame flooding.
authFloodTime number
Number of seconds after which a station is considered not connected.
authFrameFlood string
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
comment string
Comment.
deauthBroadcast string
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
deauthUnknownSrcThresh number
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
dynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
eapolFailFlood string
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolFailIntv number
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
eapolFailThresh number
The threshold value for EAPOL-Failure flooding in specified interval.
eapolLogoffFlood string
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolLogoffIntv number
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
eapolLogoffThresh number
The threshold value for EAPOL-Logoff flooding in specified interval.
eapolPreFailFlood string
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreFailIntv number
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
eapolPreFailThresh number
The threshold value for premature EAPOL-Failure flooding in specified interval.
eapolPreSuccFlood string
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreSuccIntv number
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
eapolPreSuccThresh number
The threshold value for premature EAPOL-Success flooding in specified interval.
eapolStartFlood string
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolStartIntv number
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
eapolStartThresh number
The threshold value for EAPOL-Start flooding in specified interval.
eapolSuccFlood string
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolSuccIntv number
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
eapolSuccThresh number
The threshold value for EAPOL-Success flooding in specified interval.
getAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
invalidMacOui string
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
longDurationAttack string
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
longDurationThresh number
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
name Changes to this property will trigger replacement. string
WIDS profile name.
nullSsidProbeResp string
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
sensorMode string
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
spoofedDeauth string
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
vdomparam Changes to this property will trigger replacement. string

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

weakWepIv string
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
wirelessBridge string
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.
ap_auto_suppress str
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
ap_bgscan_disable_day str
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
ap_bgscan_disable_end str
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ap_bgscan_disable_schedules Sequence[WidsprofileApBgscanDisableScheduleArgs]
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
ap_bgscan_disable_start str
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ap_bgscan_duration int
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
ap_bgscan_idle int
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
ap_bgscan_intv int
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
ap_bgscan_period int
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
ap_bgscan_report_intv int
Period between background scan reports (15 - 600 sec, default = 30).
ap_fgscan_report_intv int
Period between foreground scan reports (15 - 600 sec, default = 15).
ap_scan str
Enable/disable rogue AP detection. Valid values: disable, enable.
ap_scan_channel_list2g5gs Sequence[WidsprofileApScanChannelList2g5gArgs]
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
ap_scan_channel_list6gs Sequence[WidsprofileApScanChannelList6gArgs]
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
ap_scan_passive str
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
ap_scan_threshold str
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
asleap_attack str
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
assoc_flood_thresh int
The threshold value for association frame flooding.
assoc_flood_time int
Number of seconds after which a station is considered not connected.
assoc_frame_flood str
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
auth_flood_thresh int
The threshold value for authentication frame flooding.
auth_flood_time int
Number of seconds after which a station is considered not connected.
auth_frame_flood str
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
comment str
Comment.
deauth_broadcast str
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
deauth_unknown_src_thresh int
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
dynamic_sort_subtable str
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
eapol_fail_flood str
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapol_fail_intv int
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
eapol_fail_thresh int
The threshold value for EAPOL-Failure flooding in specified interval.
eapol_logoff_flood str
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapol_logoff_intv int
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
eapol_logoff_thresh int
The threshold value for EAPOL-Logoff flooding in specified interval.
eapol_pre_fail_flood str
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapol_pre_fail_intv int
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
eapol_pre_fail_thresh int
The threshold value for premature EAPOL-Failure flooding in specified interval.
eapol_pre_succ_flood str
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapol_pre_succ_intv int
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
eapol_pre_succ_thresh int
The threshold value for premature EAPOL-Success flooding in specified interval.
eapol_start_flood str
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapol_start_intv int
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
eapol_start_thresh int
The threshold value for EAPOL-Start flooding in specified interval.
eapol_succ_flood str
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapol_succ_intv int
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
eapol_succ_thresh int
The threshold value for EAPOL-Success flooding in specified interval.
get_all_tables str
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
invalid_mac_oui str
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
long_duration_attack str
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
long_duration_thresh int
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
name Changes to this property will trigger replacement. str
WIDS profile name.
null_ssid_probe_resp str
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
sensor_mode str
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
spoofed_deauth str
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
vdomparam Changes to this property will trigger replacement. str

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

weak_wep_iv str
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
wireless_bridge str
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.
apAutoSuppress String
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
apBgscanDisableDay String
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
apBgscanDisableEnd String
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDisableSchedules List<Property Map>
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
apBgscanDisableStart String
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDuration Number
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
apBgscanIdle Number
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
apBgscanIntv Number
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
apBgscanPeriod Number
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
apBgscanReportIntv Number
Period between background scan reports (15 - 600 sec, default = 30).
apFgscanReportIntv Number
Period between foreground scan reports (15 - 600 sec, default = 15).
apScan String
Enable/disable rogue AP detection. Valid values: disable, enable.
apScanChannelList2g5gs List<Property Map>
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
apScanChannelList6gs List<Property Map>
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
apScanPassive String
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
apScanThreshold String
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
asleapAttack String
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
assocFloodThresh Number
The threshold value for association frame flooding.
assocFloodTime Number
Number of seconds after which a station is considered not connected.
assocFrameFlood String
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
authFloodThresh Number
The threshold value for authentication frame flooding.
authFloodTime Number
Number of seconds after which a station is considered not connected.
authFrameFlood String
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
comment String
Comment.
deauthBroadcast String
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
deauthUnknownSrcThresh Number
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
eapolFailFlood String
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolFailIntv Number
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
eapolFailThresh Number
The threshold value for EAPOL-Failure flooding in specified interval.
eapolLogoffFlood String
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolLogoffIntv Number
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
eapolLogoffThresh Number
The threshold value for EAPOL-Logoff flooding in specified interval.
eapolPreFailFlood String
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreFailIntv Number
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
eapolPreFailThresh Number
The threshold value for premature EAPOL-Failure flooding in specified interval.
eapolPreSuccFlood String
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreSuccIntv Number
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
eapolPreSuccThresh Number
The threshold value for premature EAPOL-Success flooding in specified interval.
eapolStartFlood String
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolStartIntv Number
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
eapolStartThresh Number
The threshold value for EAPOL-Start flooding in specified interval.
eapolSuccFlood String
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolSuccIntv Number
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
eapolSuccThresh Number
The threshold value for EAPOL-Success flooding in specified interval.
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
invalidMacOui String
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
longDurationAttack String
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
longDurationThresh Number
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
name Changes to this property will trigger replacement. String
WIDS profile name.
nullSsidProbeResp String
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
sensorMode String
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
spoofedDeauth String
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
vdomparam Changes to this property will trigger replacement. String

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

weakWepIv String
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
wirelessBridge String
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.

Outputs

All input properties are implicitly available as output properties. Additionally, the Widsprofile resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing Widsprofile Resource

Get an existing Widsprofile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: WidsprofileState, opts?: CustomResourceOptions): Widsprofile
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        ap_auto_suppress: Optional[str] = None,
        ap_bgscan_disable_day: Optional[str] = None,
        ap_bgscan_disable_end: Optional[str] = None,
        ap_bgscan_disable_schedules: Optional[Sequence[WidsprofileApBgscanDisableScheduleArgs]] = None,
        ap_bgscan_disable_start: Optional[str] = None,
        ap_bgscan_duration: Optional[int] = None,
        ap_bgscan_idle: Optional[int] = None,
        ap_bgscan_intv: Optional[int] = None,
        ap_bgscan_period: Optional[int] = None,
        ap_bgscan_report_intv: Optional[int] = None,
        ap_fgscan_report_intv: Optional[int] = None,
        ap_scan: Optional[str] = None,
        ap_scan_channel_list2g5gs: Optional[Sequence[WidsprofileApScanChannelList2g5gArgs]] = None,
        ap_scan_channel_list6gs: Optional[Sequence[WidsprofileApScanChannelList6gArgs]] = None,
        ap_scan_passive: Optional[str] = None,
        ap_scan_threshold: Optional[str] = None,
        asleap_attack: Optional[str] = None,
        assoc_flood_thresh: Optional[int] = None,
        assoc_flood_time: Optional[int] = None,
        assoc_frame_flood: Optional[str] = None,
        auth_flood_thresh: Optional[int] = None,
        auth_flood_time: Optional[int] = None,
        auth_frame_flood: Optional[str] = None,
        comment: Optional[str] = None,
        deauth_broadcast: Optional[str] = None,
        deauth_unknown_src_thresh: Optional[int] = None,
        dynamic_sort_subtable: Optional[str] = None,
        eapol_fail_flood: Optional[str] = None,
        eapol_fail_intv: Optional[int] = None,
        eapol_fail_thresh: Optional[int] = None,
        eapol_logoff_flood: Optional[str] = None,
        eapol_logoff_intv: Optional[int] = None,
        eapol_logoff_thresh: Optional[int] = None,
        eapol_pre_fail_flood: Optional[str] = None,
        eapol_pre_fail_intv: Optional[int] = None,
        eapol_pre_fail_thresh: Optional[int] = None,
        eapol_pre_succ_flood: Optional[str] = None,
        eapol_pre_succ_intv: Optional[int] = None,
        eapol_pre_succ_thresh: Optional[int] = None,
        eapol_start_flood: Optional[str] = None,
        eapol_start_intv: Optional[int] = None,
        eapol_start_thresh: Optional[int] = None,
        eapol_succ_flood: Optional[str] = None,
        eapol_succ_intv: Optional[int] = None,
        eapol_succ_thresh: Optional[int] = None,
        get_all_tables: Optional[str] = None,
        invalid_mac_oui: Optional[str] = None,
        long_duration_attack: Optional[str] = None,
        long_duration_thresh: Optional[int] = None,
        name: Optional[str] = None,
        null_ssid_probe_resp: Optional[str] = None,
        sensor_mode: Optional[str] = None,
        spoofed_deauth: Optional[str] = None,
        vdomparam: Optional[str] = None,
        weak_wep_iv: Optional[str] = None,
        wireless_bridge: Optional[str] = None) -> Widsprofile
func GetWidsprofile(ctx *Context, name string, id IDInput, state *WidsprofileState, opts ...ResourceOption) (*Widsprofile, error)
public static Widsprofile Get(string name, Input<string> id, WidsprofileState? state, CustomResourceOptions? opts = null)
public static Widsprofile get(String name, Output<String> id, WidsprofileState state, CustomResourceOptions options)
resources:  _:    type: fortios:wirelesscontroller:Widsprofile    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
ApAutoSuppress string
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
ApBgscanDisableDay string
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
ApBgscanDisableEnd string
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ApBgscanDisableSchedules List<Pulumiverse.Fortios.Wirelesscontroller.Inputs.WidsprofileApBgscanDisableSchedule>
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
ApBgscanDisableStart string
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ApBgscanDuration int
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
ApBgscanIdle int
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
ApBgscanIntv int
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
ApBgscanPeriod int
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
ApBgscanReportIntv int
Period between background scan reports (15 - 600 sec, default = 30).
ApFgscanReportIntv int
Period between foreground scan reports (15 - 600 sec, default = 15).
ApScan string
Enable/disable rogue AP detection. Valid values: disable, enable.
ApScanChannelList2g5gs List<Pulumiverse.Fortios.Wirelesscontroller.Inputs.WidsprofileApScanChannelList2g5g>
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
ApScanChannelList6gs List<Pulumiverse.Fortios.Wirelesscontroller.Inputs.WidsprofileApScanChannelList6g>
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
ApScanPassive string
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
ApScanThreshold string
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
AsleapAttack string
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
AssocFloodThresh int
The threshold value for association frame flooding.
AssocFloodTime int
Number of seconds after which a station is considered not connected.
AssocFrameFlood string
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
AuthFloodThresh int
The threshold value for authentication frame flooding.
AuthFloodTime int
Number of seconds after which a station is considered not connected.
AuthFrameFlood string
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
Comment string
Comment.
DeauthBroadcast string
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
DeauthUnknownSrcThresh int
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
EapolFailFlood string
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolFailIntv int
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
EapolFailThresh int
The threshold value for EAPOL-Failure flooding in specified interval.
EapolLogoffFlood string
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolLogoffIntv int
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
EapolLogoffThresh int
The threshold value for EAPOL-Logoff flooding in specified interval.
EapolPreFailFlood string
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
EapolPreFailIntv int
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
EapolPreFailThresh int
The threshold value for premature EAPOL-Failure flooding in specified interval.
EapolPreSuccFlood string
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
EapolPreSuccIntv int
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
EapolPreSuccThresh int
The threshold value for premature EAPOL-Success flooding in specified interval.
EapolStartFlood string
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolStartIntv int
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
EapolStartThresh int
The threshold value for EAPOL-Start flooding in specified interval.
EapolSuccFlood string
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolSuccIntv int
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
EapolSuccThresh int
The threshold value for EAPOL-Success flooding in specified interval.
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
InvalidMacOui string
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
LongDurationAttack string
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
LongDurationThresh int
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
Name Changes to this property will trigger replacement. string
WIDS profile name.
NullSsidProbeResp string
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
SensorMode string
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
SpoofedDeauth string
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
Vdomparam Changes to this property will trigger replacement. string

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

WeakWepIv string
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
WirelessBridge string
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.
ApAutoSuppress string
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
ApBgscanDisableDay string
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
ApBgscanDisableEnd string
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ApBgscanDisableSchedules []WidsprofileApBgscanDisableScheduleArgs
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
ApBgscanDisableStart string
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ApBgscanDuration int
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
ApBgscanIdle int
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
ApBgscanIntv int
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
ApBgscanPeriod int
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
ApBgscanReportIntv int
Period between background scan reports (15 - 600 sec, default = 30).
ApFgscanReportIntv int
Period between foreground scan reports (15 - 600 sec, default = 15).
ApScan string
Enable/disable rogue AP detection. Valid values: disable, enable.
ApScanChannelList2g5gs []WidsprofileApScanChannelList2g5gArgs
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
ApScanChannelList6gs []WidsprofileApScanChannelList6gArgs
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
ApScanPassive string
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
ApScanThreshold string
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
AsleapAttack string
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
AssocFloodThresh int
The threshold value for association frame flooding.
AssocFloodTime int
Number of seconds after which a station is considered not connected.
AssocFrameFlood string
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
AuthFloodThresh int
The threshold value for authentication frame flooding.
AuthFloodTime int
Number of seconds after which a station is considered not connected.
AuthFrameFlood string
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
Comment string
Comment.
DeauthBroadcast string
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
DeauthUnknownSrcThresh int
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
EapolFailFlood string
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolFailIntv int
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
EapolFailThresh int
The threshold value for EAPOL-Failure flooding in specified interval.
EapolLogoffFlood string
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolLogoffIntv int
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
EapolLogoffThresh int
The threshold value for EAPOL-Logoff flooding in specified interval.
EapolPreFailFlood string
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
EapolPreFailIntv int
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
EapolPreFailThresh int
The threshold value for premature EAPOL-Failure flooding in specified interval.
EapolPreSuccFlood string
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
EapolPreSuccIntv int
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
EapolPreSuccThresh int
The threshold value for premature EAPOL-Success flooding in specified interval.
EapolStartFlood string
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolStartIntv int
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
EapolStartThresh int
The threshold value for EAPOL-Start flooding in specified interval.
EapolSuccFlood string
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
EapolSuccIntv int
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
EapolSuccThresh int
The threshold value for EAPOL-Success flooding in specified interval.
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
InvalidMacOui string
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
LongDurationAttack string
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
LongDurationThresh int
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
Name Changes to this property will trigger replacement. string
WIDS profile name.
NullSsidProbeResp string
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
SensorMode string
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
SpoofedDeauth string
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
Vdomparam Changes to this property will trigger replacement. string

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

WeakWepIv string
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
WirelessBridge string
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.
apAutoSuppress String
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
apBgscanDisableDay String
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
apBgscanDisableEnd String
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDisableSchedules List<WidsprofileApBgscanDisableSchedule>
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
apBgscanDisableStart String
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDuration Integer
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
apBgscanIdle Integer
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
apBgscanIntv Integer
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
apBgscanPeriod Integer
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
apBgscanReportIntv Integer
Period between background scan reports (15 - 600 sec, default = 30).
apFgscanReportIntv Integer
Period between foreground scan reports (15 - 600 sec, default = 15).
apScan String
Enable/disable rogue AP detection. Valid values: disable, enable.
apScanChannelList2g5gs List<WidsprofileApScanChannelList2g5g>
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
apScanChannelList6gs List<WidsprofileApScanChannelList6g>
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
apScanPassive String
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
apScanThreshold String
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
asleapAttack String
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
assocFloodThresh Integer
The threshold value for association frame flooding.
assocFloodTime Integer
Number of seconds after which a station is considered not connected.
assocFrameFlood String
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
authFloodThresh Integer
The threshold value for authentication frame flooding.
authFloodTime Integer
Number of seconds after which a station is considered not connected.
authFrameFlood String
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
comment String
Comment.
deauthBroadcast String
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
deauthUnknownSrcThresh Integer
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
eapolFailFlood String
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolFailIntv Integer
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
eapolFailThresh Integer
The threshold value for EAPOL-Failure flooding in specified interval.
eapolLogoffFlood String
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolLogoffIntv Integer
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
eapolLogoffThresh Integer
The threshold value for EAPOL-Logoff flooding in specified interval.
eapolPreFailFlood String
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreFailIntv Integer
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
eapolPreFailThresh Integer
The threshold value for premature EAPOL-Failure flooding in specified interval.
eapolPreSuccFlood String
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreSuccIntv Integer
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
eapolPreSuccThresh Integer
The threshold value for premature EAPOL-Success flooding in specified interval.
eapolStartFlood String
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolStartIntv Integer
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
eapolStartThresh Integer
The threshold value for EAPOL-Start flooding in specified interval.
eapolSuccFlood String
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolSuccIntv Integer
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
eapolSuccThresh Integer
The threshold value for EAPOL-Success flooding in specified interval.
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
invalidMacOui String
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
longDurationAttack String
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
longDurationThresh Integer
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
name Changes to this property will trigger replacement. String
WIDS profile name.
nullSsidProbeResp String
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
sensorMode String
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
spoofedDeauth String
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
vdomparam Changes to this property will trigger replacement. String

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

weakWepIv String
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
wirelessBridge String
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.
apAutoSuppress string
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
apBgscanDisableDay string
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
apBgscanDisableEnd string
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDisableSchedules WidsprofileApBgscanDisableSchedule[]
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
apBgscanDisableStart string
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDuration number
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
apBgscanIdle number
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
apBgscanIntv number
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
apBgscanPeriod number
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
apBgscanReportIntv number
Period between background scan reports (15 - 600 sec, default = 30).
apFgscanReportIntv number
Period between foreground scan reports (15 - 600 sec, default = 15).
apScan string
Enable/disable rogue AP detection. Valid values: disable, enable.
apScanChannelList2g5gs WidsprofileApScanChannelList2g5g[]
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
apScanChannelList6gs WidsprofileApScanChannelList6g[]
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
apScanPassive string
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
apScanThreshold string
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
asleapAttack string
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
assocFloodThresh number
The threshold value for association frame flooding.
assocFloodTime number
Number of seconds after which a station is considered not connected.
assocFrameFlood string
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
authFloodThresh number
The threshold value for authentication frame flooding.
authFloodTime number
Number of seconds after which a station is considered not connected.
authFrameFlood string
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
comment string
Comment.
deauthBroadcast string
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
deauthUnknownSrcThresh number
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
dynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
eapolFailFlood string
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolFailIntv number
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
eapolFailThresh number
The threshold value for EAPOL-Failure flooding in specified interval.
eapolLogoffFlood string
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolLogoffIntv number
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
eapolLogoffThresh number
The threshold value for EAPOL-Logoff flooding in specified interval.
eapolPreFailFlood string
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreFailIntv number
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
eapolPreFailThresh number
The threshold value for premature EAPOL-Failure flooding in specified interval.
eapolPreSuccFlood string
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreSuccIntv number
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
eapolPreSuccThresh number
The threshold value for premature EAPOL-Success flooding in specified interval.
eapolStartFlood string
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolStartIntv number
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
eapolStartThresh number
The threshold value for EAPOL-Start flooding in specified interval.
eapolSuccFlood string
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolSuccIntv number
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
eapolSuccThresh number
The threshold value for EAPOL-Success flooding in specified interval.
getAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
invalidMacOui string
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
longDurationAttack string
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
longDurationThresh number
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
name Changes to this property will trigger replacement. string
WIDS profile name.
nullSsidProbeResp string
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
sensorMode string
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
spoofedDeauth string
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
vdomparam Changes to this property will trigger replacement. string

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

weakWepIv string
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
wirelessBridge string
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.
ap_auto_suppress str
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
ap_bgscan_disable_day str
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
ap_bgscan_disable_end str
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ap_bgscan_disable_schedules Sequence[WidsprofileApBgscanDisableScheduleArgs]
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
ap_bgscan_disable_start str
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
ap_bgscan_duration int
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
ap_bgscan_idle int
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
ap_bgscan_intv int
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
ap_bgscan_period int
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
ap_bgscan_report_intv int
Period between background scan reports (15 - 600 sec, default = 30).
ap_fgscan_report_intv int
Period between foreground scan reports (15 - 600 sec, default = 15).
ap_scan str
Enable/disable rogue AP detection. Valid values: disable, enable.
ap_scan_channel_list2g5gs Sequence[WidsprofileApScanChannelList2g5gArgs]
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
ap_scan_channel_list6gs Sequence[WidsprofileApScanChannelList6gArgs]
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
ap_scan_passive str
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
ap_scan_threshold str
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
asleap_attack str
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
assoc_flood_thresh int
The threshold value for association frame flooding.
assoc_flood_time int
Number of seconds after which a station is considered not connected.
assoc_frame_flood str
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
auth_flood_thresh int
The threshold value for authentication frame flooding.
auth_flood_time int
Number of seconds after which a station is considered not connected.
auth_frame_flood str
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
comment str
Comment.
deauth_broadcast str
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
deauth_unknown_src_thresh int
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
dynamic_sort_subtable str
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
eapol_fail_flood str
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapol_fail_intv int
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
eapol_fail_thresh int
The threshold value for EAPOL-Failure flooding in specified interval.
eapol_logoff_flood str
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapol_logoff_intv int
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
eapol_logoff_thresh int
The threshold value for EAPOL-Logoff flooding in specified interval.
eapol_pre_fail_flood str
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapol_pre_fail_intv int
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
eapol_pre_fail_thresh int
The threshold value for premature EAPOL-Failure flooding in specified interval.
eapol_pre_succ_flood str
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapol_pre_succ_intv int
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
eapol_pre_succ_thresh int
The threshold value for premature EAPOL-Success flooding in specified interval.
eapol_start_flood str
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapol_start_intv int
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
eapol_start_thresh int
The threshold value for EAPOL-Start flooding in specified interval.
eapol_succ_flood str
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapol_succ_intv int
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
eapol_succ_thresh int
The threshold value for EAPOL-Success flooding in specified interval.
get_all_tables str
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
invalid_mac_oui str
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
long_duration_attack str
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
long_duration_thresh int
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
name Changes to this property will trigger replacement. str
WIDS profile name.
null_ssid_probe_resp str
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
sensor_mode str
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
spoofed_deauth str
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
vdomparam Changes to this property will trigger replacement. str

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

weak_wep_iv str
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
wireless_bridge str
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.
apAutoSuppress String
Enable/disable on-wire rogue AP auto-suppression (default = disable). Valid values: enable, disable.
apBgscanDisableDay String
Optionally turn off scanning for one or more days of the week. Separate the days with a space. By default, no days are set. Valid values: sunday, monday, tuesday, wednesday, thursday, friday, saturday.
apBgscanDisableEnd String
End time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDisableSchedules List<Property Map>
Firewall schedules for turning off FortiAP radio background scan. Background scan will be disabled when at least one of the schedules is valid. Separate multiple schedule names with a space. The structure of ap_bgscan_disable_schedules block is documented below.
apBgscanDisableStart String
Start time, using a 24-hour clock in the format of hh:mm, for disabling background scanning (default = 00:00).
apBgscanDuration Number
Listen time on scanning a channel (10 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 20. On FortiOS versions >= 7.0.2: default = 30.
apBgscanIdle Number
Wait time for channel inactivity before scanning this channel (0 - 1000 msec). On FortiOS versions 6.2.0-7.0.1: default = 0. On FortiOS versions >= 7.0.2: default = 20.
apBgscanIntv Number
Period between successive channel scans (1 - 600 sec). On FortiOS versions 6.2.0-7.0.1: default = 1. On FortiOS versions >= 7.0.2: default = 3.
apBgscanPeriod Number
Period between background scans (default = 600). On FortiOS versions 6.2.0-6.2.6: 60 - 3600 sec. On FortiOS versions 6.4.0-7.0.1: 10 - 3600 sec.
apBgscanReportIntv Number
Period between background scan reports (15 - 600 sec, default = 30).
apFgscanReportIntv Number
Period between foreground scan reports (15 - 600 sec, default = 15).
apScan String
Enable/disable rogue AP detection. Valid values: disable, enable.
apScanChannelList2g5gs List<Property Map>
Selected ap scan channel list for 2.4G and 5G bands. The structure of ap_scan_channel_list_2g_5g block is documented below.
apScanChannelList6gs List<Property Map>
Selected ap scan channel list for 6G band. The structure of ap_scan_channel_list_6g block is documented below.
apScanPassive String
Enable/disable passive scanning. Enable means do not send probe request on any channels (default = disable). Valid values: enable, disable.
apScanThreshold String
Minimum signal level/threshold in dBm required for the AP to report detected rogue AP (-95 to -20, default = -90).
asleapAttack String
Enable/disable asleap attack detection (default = disable). Valid values: enable, disable.
assocFloodThresh Number
The threshold value for association frame flooding.
assocFloodTime Number
Number of seconds after which a station is considered not connected.
assocFrameFlood String
Enable/disable association frame flooding detection (default = disable). Valid values: enable, disable.
authFloodThresh Number
The threshold value for authentication frame flooding.
authFloodTime Number
Number of seconds after which a station is considered not connected.
authFrameFlood String
Enable/disable authentication frame flooding detection (default = disable). Valid values: enable, disable.
comment String
Comment.
deauthBroadcast String
Enable/disable broadcasting de-authentication detection (default = disable). Valid values: enable, disable.
deauthUnknownSrcThresh Number
Threshold value per second to deauth unknown src for DoS attack (0: no limit).
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
eapolFailFlood String
Enable/disable EAPOL-Failure flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolFailIntv Number
The detection interval for EAPOL-Failure flooding (1 - 3600 sec).
eapolFailThresh Number
The threshold value for EAPOL-Failure flooding in specified interval.
eapolLogoffFlood String
Enable/disable EAPOL-Logoff flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolLogoffIntv Number
The detection interval for EAPOL-Logoff flooding (1 - 3600 sec).
eapolLogoffThresh Number
The threshold value for EAPOL-Logoff flooding in specified interval.
eapolPreFailFlood String
Enable/disable premature EAPOL-Failure flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreFailIntv Number
The detection interval for premature EAPOL-Failure flooding (1 - 3600 sec).
eapolPreFailThresh Number
The threshold value for premature EAPOL-Failure flooding in specified interval.
eapolPreSuccFlood String
Enable/disable premature EAPOL-Success flooding (to STA) detection (default = disable). Valid values: enable, disable.
eapolPreSuccIntv Number
The detection interval for premature EAPOL-Success flooding (1 - 3600 sec).
eapolPreSuccThresh Number
The threshold value for premature EAPOL-Success flooding in specified interval.
eapolStartFlood String
Enable/disable EAPOL-Start flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolStartIntv Number
The detection interval for EAPOL-Start flooding (1 - 3600 sec).
eapolStartThresh Number
The threshold value for EAPOL-Start flooding in specified interval.
eapolSuccFlood String
Enable/disable EAPOL-Success flooding (to AP) detection (default = disable). Valid values: enable, disable.
eapolSuccIntv Number
The detection interval for EAPOL-Success flooding (1 - 3600 sec).
eapolSuccThresh Number
The threshold value for EAPOL-Success flooding in specified interval.
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
invalidMacOui String
Enable/disable invalid MAC OUI detection. Valid values: enable, disable.
longDurationAttack String
Enable/disable long duration attack detection based on user configured threshold (default = disable). Valid values: enable, disable.
longDurationThresh Number
Threshold value for long duration attack detection (1000 - 32767 usec, default = 8200).
name Changes to this property will trigger replacement. String
WIDS profile name.
nullSsidProbeResp String
Enable/disable null SSID probe response detection (default = disable). Valid values: enable, disable.
sensorMode String
Scan nearby WiFi stations (default = disable). Valid values: disable, foreign, both.
spoofedDeauth String
Enable/disable spoofed de-authentication attack detection (default = disable). Valid values: enable, disable.
vdomparam Changes to this property will trigger replacement. String

Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

The ap_scan_channel_list_2g_5g block supports:

weakWepIv String
Enable/disable weak WEP IV (Initialization Vector) detection (default = disable). Valid values: enable, disable.
wirelessBridge String
Enable/disable wireless bridge detection (default = disable). Valid values: enable, disable.

Supporting Types

WidsprofileApBgscanDisableSchedule
, WidsprofileApBgscanDisableScheduleArgs

Name string
Schedule name.
Name string
Schedule name.
name String
Schedule name.
name string
Schedule name.
name str
Schedule name.
name String
Schedule name.

WidsprofileApScanChannelList2g5g
, WidsprofileApScanChannelList2g5gArgs

Chan string
Channel 6g number.
Chan string
Channel 6g number.
chan String
Channel 6g number.
chan string
Channel 6g number.
chan str
Channel 6g number.
chan String
Channel 6g number.

WidsprofileApScanChannelList6g
, WidsprofileApScanChannelList6gArgs

Chan string
Channel 6g number.
Chan string
Channel 6g number.
chan String
Channel 6g number.
chan string
Channel 6g number.
chan str
Channel 6g number.
chan String
Channel 6g number.

Import

WirelessController WidsProfile can be imported using any of these accepted formats:

$ pulumi import fortios:wirelesscontroller/widsprofile:Widsprofile labelname {{name}}
Copy

If you do not want to import arguments of block:

$ export “FORTIOS_IMPORT_TABLE”=“false”

$ pulumi import fortios:wirelesscontroller/widsprofile:Widsprofile labelname {{name}}
Copy

$ unset “FORTIOS_IMPORT_TABLE”

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortios pulumiverse/pulumi-fortios
License
Apache-2.0
Notes
This Pulumi package is based on the fortios Terraform Provider.
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios