community.general.fmgr_secprof_profile_group (0.1.1) — module

Manage security profiles within FortiManager

Authors: Luke Weighall (@lweighall), Andrew Welsh (@Ghilli3), Jim Huber (@p4r4n0y1ng)

preview | supported by community

Install collection

Install with ansible-galaxy collection install community.general:==0.1.1


Add to requirements.yml

  collections:
    - name: community.general
      version: 0.1.1

Description

Manage security profile group which allows you to create a group of security profiles and apply that to a policy.

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
  - name: DELETE Profile
    fmgr_secprof_profile_group:
      name: "Ansible_TEST_Profile_Group"
      mode: "delete"
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
  - name: CREATE Profile
    fmgr_secprof_profile_group:
      name: "Ansible_TEST_Profile_Group"
      mode: "set"
      av_profile: "Ansible_AV_Profile"
      profile_protocol_options: "default"

Inputs

    
adom:
    default: root
    description:
    - The ADOM the configuration should belong to.
    required: false

mode:
    choices:
    - add
    - set
    - delete
    - update
    default: add
    description:
    - Sets one of three modes for managing the object.
    - Allows use of soft-adds instead of overwriting existing values.
    required: false

name:
    description:
    - Profile group name.
    required: false
    type: str

av_profile:
    description:
    - Name of an existing Antivirus profile.
    required: false
    type: str

dlp_sensor:
    description:
    - Name of an existing DLP sensor.
    required: false
    type: str

ips_sensor:
    description:
    - Name of an existing IPS sensor.
    required: false
    type: str

mms_profile:
    description:
    - Name of an existing MMS profile.
    required: false
    type: str

waf_profile:
    description:
    - Name of an existing Web application firewall profile.
    required: false
    type: str

icap_profile:
    description:
    - Name of an existing ICAP profile.
    required: false
    type: str

voip_profile:
    description:
    - Name of an existing VoIP profile.
    required: false
    type: str

ssl_ssh_profile:
    description:
    - Name of an existing SSL SSH profile.
    required: false
    type: str

application_list:
    description:
    - Name of an existing Application list.
    required: false
    type: str

dnsfilter_profile:
    description:
    - Name of an existing DNS filter profile.
    required: false
    type: str

webfilter_profile:
    description:
    - Name of an existing Web filter profile.
    required: false
    type: str

spamfilter_profile:
    description:
    - Name of an existing Spam filter profile.
    required: false
    type: str

ssh_filter_profile:
    description:
    - Name of an existing SSH filter profile.
    required: false
    type: str

profile_protocol_options:
    description:
    - Name of an existing Protocol options profile.
    required: false
    type: str

Outputs

api_result:
  description: full API response, includes status code and message
  returned: always
  type: str