fortinet / fortinet.fortimanager / 1.0.5 / module / fmgr_firewall_sslsshprofile Configure SSL/SSH protocol options. | "added in version" 2.10 of fortinet.fortimanager" Authors: Frank Shen (@fshen01), Link Zheng (@zhengl) preview | supported by communityfortinet.fortimanager.fmgr_firewall_sslsshprofile (1.0.5) — module
Install with ansible-galaxy collection install fortinet.fortimanager:==1.0.5
collections: - name: fortinet.fortimanager version: 1.0.5
This module is able to configure a FortiManager device by allowing the user to [ add get set update ] the following apis.
/pm/config/adom/{adom}/obj/firewall/ssl-ssh-profile
/pm/config/global/obj/firewall/ssl-ssh-profile
Examples include all parameters and values need to be adjusted to data sources before usage.
- hosts: fortimanager-inventory collections: - fortinet.fortimanager connection: httpapi vars: ansible_httpapi_use_ssl: True ansible_httpapi_validate_certs: False ansible_httpapi_port: 443 tasks: - name: REQUESTING /PM/CONFIG/OBJ/FIREWALL/SSL-SSH-PROFILE fmgr_firewall_sslsshprofile: loose_validation: False workspace_locking_adom: <value in [global, custom adom]> workspace_locking_timeout: 300 method: <value in [add, set, update]> url_params: adom: <value in [none, global, custom dom]> params: - data: - caname: <value of string> comment: <value of string> mapi-over-https: <value in [disable, enable]> name: <value of string> rpc-over-https: <value in [disable, enable]> server-cert: <value of string> server-cert-mode: <value in [re-sign, replace]> ssl-anomalies-log: <value in [disable, enable]> ssl-exempt: - address: <value of string> address6: <value of string> fortiguard-category: <value of string> id: <value of integer> regex: <value of string> type: <value in [fortiguard-category, address, address6, ...]> wildcard-fqdn: <value of string> ssl-exemptions-log: <value in [disable, enable]> ssl-server: - ftps-client-cert-request: <value in [bypass, inspect, block]> https-client-cert-request: <value in [bypass, inspect, block]> id: <value of integer> imaps-client-cert-request: <value in [bypass, inspect, block]> ip: <value of string> pop3s-client-cert-request: <value in [bypass, inspect, block]> smtps-client-cert-request: <value in [bypass, inspect, block]> ssl-other-client-cert-request: <value in [bypass, inspect, block]> untrusted-caname: <value of string> use-ssl-server: <value in [disable, enable]> whitelist: <value in [disable, enable]> - name: REQUESTING /PM/CONFIG/OBJ/FIREWALL/SSL-SSH-PROFILE fmgr_firewall_sslsshprofile: loose_validation: False workspace_locking_adom: <value in [global, custom adom]> workspace_locking_timeout: 300 method: <value in [get]> url_params: adom: <value in [none, global, custom dom]> params: - attr: <value of string> fields: - - <value in [caname, comment, mapi-over-https, ...]> filter: - <value of string> get used: <value of integer> loadsub: <value of integer> option: <value in [count, object member, datasrc, ...]> range: - <value of integer> sortings: - varidic.attr_name: <value in [1, -1]>
method: choices: - add - get - set - update description: - The method in request required: true type: str params: description: - The parameters for each method - See full parameters list in https://ansible-galaxy-fortimanager-docs.readthedocs.io/en/latest required: false type: list url_params: description: - The parameters for each API request URL - Also see full URL parameters in https://ansible-galaxy-fortimanager-docs.readthedocs.io/en/latest required: false type: dict loose_validation: description: - Do parameter validation in a loose way required: false type: bool workspace_locking_adom: description: - the adom name to lock in case FortiManager running in workspace mode - it can be global or any other custom adom names required: false type: str workspace_locking_timeout: default: 300 description: - the maximum time in seconds to wait for other user to release the workspace lock required: false type: int
data: description: The payload returned in the request returned: always type: dict status: description: The status of api request returned: always type: dict url: description: The full url requested returned: always sample: /sys/login/user type: str