/ home / chillancezen / chillancezen.fortimanager / 2.1.6 / module / fmgr_waf_profile_constraint

chillancezen.fortimanager.fmgr_waf_profile_constraint (2.1.6) — module

no description

| "added in version" 1.0.0 of chillancezen.fortimanager"

Authors: Link Zheng (@chillancezen), Jie Xue (@JieX19), Frank Shen (@fshen01), Hongbin Lu (@fgtdev-hblu)

preview | supported by community

Install collection

Install with ansible-galaxy collection install chillancezen.fortimanager:==2.1.6

Add to requirements.yml

  collections:
    - name: chillancezen.fortimanager
      version: 2.1.6

Description

This module is able to configure a FortiManager device.

Examples include all parameters and values which need to be adjusted to data sources before usage.

Usage examples

Scanned by Steampunk Spotter

 - hosts: fortimanager-inventory
   collections:
     - fortinet.fortimanager
   connection: httpapi
   vars:
      ansible_httpapi_use_ssl: True
      ansible_httpapi_validate_certs: False
      ansible_httpapi_port: 443
   tasks:
    - name: no description
      fmgr_waf_profile_constraint:
         bypass_validation: False
         workspace_locking_adom: <value in [global, custom adom including root]>
         workspace_locking_timeout: 300
         rc_succeeded: [0, -2, -3, ...]
         rc_failed: [-2, -3, ...]
         adom: <your own value>
         profile: <your own value>
         waf_profile_constraint:
            content-length:
               action: <value in [allow, block]>
               length: <value of integer>
               log: <value in [disable, enable]>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            exception:
              -
                  address: <value of string>
                  content-length: <value in [disable, enable]>
                  header-length: <value in [disable, enable]>
                  hostname: <value in [disable, enable]>
                  id: <value of integer>
                  line-length: <value in [disable, enable]>
                  malformed: <value in [disable, enable]>
                  max-cookie: <value in [disable, enable]>
                  max-header-line: <value in [disable, enable]>
                  max-range-segment: <value in [disable, enable]>
                  max-url-param: <value in [disable, enable]>
                  method: <value in [disable, enable]>
                  param-length: <value in [disable, enable]>
                  pattern: <value of string>
                  regex: <value in [disable, enable]>
                  url-param-length: <value in [disable, enable]>
                  version: <value in [disable, enable]>
            header-length:
               action: <value in [allow, block]>
               length: <value of integer>
               log: <value in [disable, enable]>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            hostname:
               action: <value in [allow, block]>
               log: <value in [disable, enable]>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            line-length:
               action: <value in [allow, block]>
               length: <value of integer>
               log: <value in [disable, enable]>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            malformed:
               action: <value in [allow, block]>
               log: <value in [disable, enable]>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            max-cookie:
               action: <value in [allow, block]>
               log: <value in [disable, enable]>
               max-cookie: <value of integer>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            max-header-line:
               action: <value in [allow, block]>
               log: <value in [disable, enable]>
               max-header-line: <value of integer>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            max-range-segment:
               action: <value in [allow, block]>
               log: <value in [disable, enable]>
               max-range-segment: <value of integer>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            max-url-param:
               action: <value in [allow, block]>
               log: <value in [disable, enable]>
               max-url-param: <value of integer>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            method:
               action: <value in [allow, block]>
               log: <value in [disable, enable]>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            param-length:
               action: <value in [allow, block]>
               length: <value of integer>
               log: <value in [disable, enable]>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            url-param-length:
               action: <value in [allow, block]>
               length: <value of integer>
               log: <value in [disable, enable]>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>
            version:
               action: <value in [allow, block]>
               log: <value in [disable, enable]>
               severity: <value in [low, medium, high]>
               status: <value in [disable, enable]>

Outputs

request_url:
  description: The full url requested
  returned: always
  sample: /sys/login/user
  type: str
response_code:
  description: The status of api request
  returned: always
  sample: 0
  type: int
response_message:
  description: The descriptive message of the api response
  returned: always
  sample: OK.
  type: str