Fortios v0.0.5, Apr 9 24

Fortios v0.0.5 published on Tuesday, Apr 9, 2024 by pulumiverse

fortios.firewall.getPolicy6

Explore with Pulumi AI

Fortios v0.0.5 published on Tuesday, Apr 9, 2024 by pulumiverse

Using getPolicy6

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getPolicy6(args: GetPolicy6Args, opts?: InvokeOptions): Promise<GetPolicy6Result>
function getPolicy6Output(args: GetPolicy6OutputArgs, opts?: InvokeOptions): Output<GetPolicy6Result>

def get_policy6(policyid: Optional[int] = None,
                vdomparam: Optional[str] = None,
                opts: Optional[InvokeOptions] = None) -> GetPolicy6Result
def get_policy6_output(policyid: Optional[pulumi.Input[int]] = None,
                vdomparam: Optional[pulumi.Input[str]] = None,
                opts: Optional[InvokeOptions] = None) -> Output[GetPolicy6Result]

func LookupPolicy6(ctx *Context, args *LookupPolicy6Args, opts ...InvokeOption) (*LookupPolicy6Result, error)
func LookupPolicy6Output(ctx *Context, args *LookupPolicy6OutputArgs, opts ...InvokeOption) LookupPolicy6ResultOutput

> Note: This function is named LookupPolicy6 in the Go SDK.

public static class GetPolicy6 
{
    public static Task<GetPolicy6Result> InvokeAsync(GetPolicy6Args args, InvokeOptions? opts = null)
    public static Output<GetPolicy6Result> Invoke(GetPolicy6InvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetPolicy6Result> getPolicy6(GetPolicy6Args args, InvokeOptions options)
// Output-based functions aren't available in Java yet

fn::invoke:
  function: fortios:firewall/getPolicy6:getPolicy6
  arguments:
    # arguments dictionary

The following arguments are supported:

Policyid int: Specify the policyid of the desired firewall policy6.
Vdomparam string: Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

Policyid int: Specify the policyid of the desired firewall policy6.
Vdomparam string: Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

policyid Integer: Specify the policyid of the desired firewall policy6.
vdomparam String: Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

policyid number: Specify the policyid of the desired firewall policy6.
vdomparam string: Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

policyid int: Specify the policyid of the desired firewall policy6.
vdomparam str: Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

policyid Number: Specify the policyid of the desired firewall policy6.
vdomparam String: Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

getPolicy6 Result

The following output properties are available:

Action string: Policy action (allow/deny/ipsec).
AntiReplay string: Enable/disable anti-replay check.
AppCategories List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6AppCategory>: Application category ID list. The structure of app_category block is documented below.
AppGroups List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6AppGroup>: Application group names. The structure of app_group block is documented below.
ApplicationList string: Name of an existing Application list.
Applications List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6Application>: Application ID list. The structure of application block is documented below.
AutoAsicOffload string: Enable/disable policy traffic ASIC offloading.
AvProfile string: Name of an existing Antivirus profile.
CifsProfile string: Name of an existing CIFS profile.
Comments string: Comment.
CustomLogFields List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6CustomLogField>: Log field index numbers to append custom log fields to log messages for this policy. The structure of custom_log_fields block is documented below.
DecryptedTrafficMirror string: Decrypted traffic mirror.
Devices List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6Device>: Names of devices or device groups that can be matched by the policy. The structure of devices block is documented below.
DiffservForward string: Enable to change packet's DiffServ values to the specified diffservcode-forward value.
DiffservReverse string: Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
DiffservcodeForward string: Change packet's DiffServ to this value.
DiffservcodeRev string: Change packet's reverse (reply) DiffServ to this value.
DlpSensor string: Name of an existing DLP sensor.
DnsfilterProfile string: Name of an existing DNS filter profile.
Dsri string: Enable DSRI to ignore HTTP server responses.
DstaddrNegate string: When enabled dstaddr specifies what the destination address must NOT be.
Dstaddrs List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6Dstaddr>: Destination address and address group names. The structure of dstaddr block is documented below.
Dstintfs List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6Dstintf>: Outgoing (egress) interface. The structure of dstintf block is documented below.
EmailfilterProfile string: Name of an existing email filter profile.
FirewallSessionDirty string: How to handle sessions if the configuration of this firewall policy changes.
Fixedport string: Enable to prevent source NAT from changing a session's source port.
FssoGroups List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6FssoGroup>: Names of FSSO groups. The structure of fsso_groups block is documented below.
GlobalLabel string: Label for the policy that appears when the GUI is in Global View mode.
Groups List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6Group>: Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
HttpPolicyRedirect string: Redirect HTTP(S) traffic to matching transparent web proxy policy.
IcapProfile string: Name of an existing ICAP profile.
Id string: The provider-assigned unique ID for this managed resource.
Inbound string: Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
InspectionMode string: Policy inspection mode (Flow/proxy). Default is Flow mode.
Ippool string: Enable to use IP Pools for source NAT.
IpsSensor string: Name of an existing IPS sensor.
Label string: Label for the policy that appears when the GUI is in Section View mode.
Logtraffic string: Enable or disable logging. Log all sessions or security profile sessions.
LogtrafficStart string: Record logs when a session starts.
Name string: Names of FSSO groups.
Nat string: Enable/disable source NAT.
Natinbound string: Policy-based IPsec VPN: apply destination NAT to inbound traffic.
Natoutbound string: Policy-based IPsec VPN: apply source NAT to outbound traffic.
Outbound string: Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
PerIpShaper string: Per-IP traffic shaper.
Policyid int: Policy ID.
Poolnames List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6Poolname>: IP Pool names. The structure of poolname block is documented below.
ProfileGroup string: Name of profile group.
ProfileProtocolOptions string: Name of an existing Protocol options profile.
ProfileType string: Determine whether the firewall policy allows security profile groups or single profiles only.
ReplacemsgOverrideGroup string: Override the default replacement message group for this policy.
Rsso string: Enable/disable RADIUS single sign-on (RSSO).
Schedule string: Schedule name.
SendDenyPacket string: Enable/disable return of deny-packet.
ServiceNegate string: When enabled service specifies what the service must NOT be.
Services List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6Service>: Service and service group names. The structure of service block is documented below.
SessionTtl int: Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
SpamfilterProfile string: Name of an existing Spam filter profile.
SrcaddrNegate string: When enabled srcaddr specifies what the source address must NOT be.
Srcaddrs List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6Srcaddr>: Source address and address group names. The structure of srcaddr block is documented below.
Srcintfs List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6Srcintf>: Incoming (ingress) interface. The structure of srcintf block is documented below.
SshFilterProfile string: Name of an existing SSH filter profile.
SshPolicyRedirect string: Redirect SSH traffic to matching transparent proxy policy.
SslMirror string: Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring).
SslMirrorIntfs List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6SslMirrorIntf>: SSL mirror interface name. The structure of ssl_mirror_intf block is documented below.
SslSshProfile string: Name of an existing SSL SSH profile.
Status string: Enable or disable this policy.
TcpMssReceiver int: Receiver TCP maximum segment size (MSS).
TcpMssSender int: Sender TCP maximum segment size (MSS).
TcpSessionWithoutSyn string: Enable/disable creation of TCP session without SYN flag.
TimeoutSendRst string: Enable/disable sending RST packets when TCP sessions expire.
Tos string: ToS (Type of Service) value used for comparison.
TosMask string: Non-zero bit positions are used for comparison while zero bit positions are ignored.
TosNegate string: Enable negated TOS match.
TrafficShaper string: Reverse traffic shaper.
TrafficShaperReverse string: Reverse traffic shaper.
UrlCategories List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6UrlCategory>: URL category ID list. The structure of url_category block is documented below.
Users List<Pulumiverse.Fortios.Firewall.Outputs.GetPolicy6User>: Names of individual users that can authenticate with this policy. The structure of users block is documented below.
UtmStatus string: Enable AV/web/ips protection profile.
Uuid string: Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VlanCosFwd int: VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanCosRev int: VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanFilter string: Set VLAN filters.
VoipProfile string: Name of an existing VoIP profile.
Vpntunnel string: Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
WafProfile string: Name of an existing Web application firewall profile.
Webcache string: Enable/disable web cache.
WebcacheHttps string: Enable/disable web cache for HTTPS.
WebfilterProfile string: Name of an existing Web filter profile.
WebproxyForwardServer string: Web proxy forward server name.
WebproxyProfile string: Webproxy profile name.
Vdomparam string

Action string: Policy action (allow/deny/ipsec).
AntiReplay string: Enable/disable anti-replay check.
AppCategories []GetPolicy6AppCategory: Application category ID list. The structure of app_category block is documented below.
AppGroups []GetPolicy6AppGroup: Application group names. The structure of app_group block is documented below.
ApplicationList string: Name of an existing Application list.
Applications []GetPolicy6Application: Application ID list. The structure of application block is documented below.
AutoAsicOffload string: Enable/disable policy traffic ASIC offloading.
AvProfile string: Name of an existing Antivirus profile.
CifsProfile string: Name of an existing CIFS profile.
Comments string: Comment.
CustomLogFields []GetPolicy6CustomLogField: Log field index numbers to append custom log fields to log messages for this policy. The structure of custom_log_fields block is documented below.
DecryptedTrafficMirror string: Decrypted traffic mirror.
Devices []GetPolicy6Device: Names of devices or device groups that can be matched by the policy. The structure of devices block is documented below.
DiffservForward string: Enable to change packet's DiffServ values to the specified diffservcode-forward value.
DiffservReverse string: Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
DiffservcodeForward string: Change packet's DiffServ to this value.
DiffservcodeRev string: Change packet's reverse (reply) DiffServ to this value.
DlpSensor string: Name of an existing DLP sensor.
DnsfilterProfile string: Name of an existing DNS filter profile.
Dsri string: Enable DSRI to ignore HTTP server responses.
DstaddrNegate string: When enabled dstaddr specifies what the destination address must NOT be.
Dstaddrs []GetPolicy6Dstaddr: Destination address and address group names. The structure of dstaddr block is documented below.
Dstintfs []GetPolicy6Dstintf: Outgoing (egress) interface. The structure of dstintf block is documented below.
EmailfilterProfile string: Name of an existing email filter profile.
FirewallSessionDirty string: How to handle sessions if the configuration of this firewall policy changes.
Fixedport string: Enable to prevent source NAT from changing a session's source port.
FssoGroups []GetPolicy6FssoGroup: Names of FSSO groups. The structure of fsso_groups block is documented below.
GlobalLabel string: Label for the policy that appears when the GUI is in Global View mode.
Groups []GetPolicy6Group: Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
HttpPolicyRedirect string: Redirect HTTP(S) traffic to matching transparent web proxy policy.
IcapProfile string: Name of an existing ICAP profile.
Id string: The provider-assigned unique ID for this managed resource.
Inbound string: Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
InspectionMode string: Policy inspection mode (Flow/proxy). Default is Flow mode.
Ippool string: Enable to use IP Pools for source NAT.
IpsSensor string: Name of an existing IPS sensor.
Label string: Label for the policy that appears when the GUI is in Section View mode.
Logtraffic string: Enable or disable logging. Log all sessions or security profile sessions.
LogtrafficStart string: Record logs when a session starts.
Name string: Names of FSSO groups.
Nat string: Enable/disable source NAT.
Natinbound string: Policy-based IPsec VPN: apply destination NAT to inbound traffic.
Natoutbound string: Policy-based IPsec VPN: apply source NAT to outbound traffic.
Outbound string: Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
PerIpShaper string: Per-IP traffic shaper.
Policyid int: Policy ID.
Poolnames []GetPolicy6Poolname: IP Pool names. The structure of poolname block is documented below.
ProfileGroup string: Name of profile group.
ProfileProtocolOptions string: Name of an existing Protocol options profile.
ProfileType string: Determine whether the firewall policy allows security profile groups or single profiles only.
ReplacemsgOverrideGroup string: Override the default replacement message group for this policy.
Rsso string: Enable/disable RADIUS single sign-on (RSSO).
Schedule string: Schedule name.
SendDenyPacket string: Enable/disable return of deny-packet.
ServiceNegate string: When enabled service specifies what the service must NOT be.
Services []GetPolicy6Service: Service and service group names. The structure of service block is documented below.
SessionTtl int: Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
SpamfilterProfile string: Name of an existing Spam filter profile.
SrcaddrNegate string: When enabled srcaddr specifies what the source address must NOT be.
Srcaddrs []GetPolicy6Srcaddr: Source address and address group names. The structure of srcaddr block is documented below.
Srcintfs []GetPolicy6Srcintf: Incoming (ingress) interface. The structure of srcintf block is documented below.
SshFilterProfile string: Name of an existing SSH filter profile.
SshPolicyRedirect string: Redirect SSH traffic to matching transparent proxy policy.
SslMirror string: Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring).
SslMirrorIntfs []GetPolicy6SslMirrorIntf: SSL mirror interface name. The structure of ssl_mirror_intf block is documented below.
SslSshProfile string: Name of an existing SSL SSH profile.
Status string: Enable or disable this policy.
TcpMssReceiver int: Receiver TCP maximum segment size (MSS).
TcpMssSender int: Sender TCP maximum segment size (MSS).
TcpSessionWithoutSyn string: Enable/disable creation of TCP session without SYN flag.
TimeoutSendRst string: Enable/disable sending RST packets when TCP sessions expire.
Tos string: ToS (Type of Service) value used for comparison.
TosMask string: Non-zero bit positions are used for comparison while zero bit positions are ignored.
TosNegate string: Enable negated TOS match.
TrafficShaper string: Reverse traffic shaper.
TrafficShaperReverse string: Reverse traffic shaper.
UrlCategories []GetPolicy6UrlCategory: URL category ID list. The structure of url_category block is documented below.
Users []GetPolicy6User: Names of individual users that can authenticate with this policy. The structure of users block is documented below.
UtmStatus string: Enable AV/web/ips protection profile.
Uuid string: Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
VlanCosFwd int: VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanCosRev int: VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
VlanFilter string: Set VLAN filters.
VoipProfile string: Name of an existing VoIP profile.
Vpntunnel string: Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
WafProfile string: Name of an existing Web application firewall profile.
Webcache string: Enable/disable web cache.
WebcacheHttps string: Enable/disable web cache for HTTPS.
WebfilterProfile string: Name of an existing Web filter profile.
WebproxyForwardServer string: Web proxy forward server name.
WebproxyProfile string: Webproxy profile name.
Vdomparam string

action String: Policy action (allow/deny/ipsec).
antiReplay String: Enable/disable anti-replay check.
appCategories List<GetPolicy6AppCategory>: Application category ID list. The structure of app_category block is documented below.
appGroups List<GetPolicy6AppGroup>: Application group names. The structure of app_group block is documented below.
applicationList String: Name of an existing Application list.
applications List<GetPolicy6Application>: Application ID list. The structure of application block is documented below.
autoAsicOffload String: Enable/disable policy traffic ASIC offloading.
avProfile String: Name of an existing Antivirus profile.
cifsProfile String: Name of an existing CIFS profile.
comments String: Comment.
customLogFields List<GetPolicy6CustomLogField>: Log field index numbers to append custom log fields to log messages for this policy. The structure of custom_log_fields block is documented below.
decryptedTrafficMirror String: Decrypted traffic mirror.
devices List<GetPolicy6Device>: Names of devices or device groups that can be matched by the policy. The structure of devices block is documented below.
diffservForward String: Enable to change packet's DiffServ values to the specified diffservcode-forward value.
diffservReverse String: Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
diffservcodeForward String: Change packet's DiffServ to this value.
diffservcodeRev String: Change packet's reverse (reply) DiffServ to this value.
dlpSensor String: Name of an existing DLP sensor.
dnsfilterProfile String: Name of an existing DNS filter profile.
dsri String: Enable DSRI to ignore HTTP server responses.
dstaddrNegate String: When enabled dstaddr specifies what the destination address must NOT be.
dstaddrs List<GetPolicy6Dstaddr>: Destination address and address group names. The structure of dstaddr block is documented below.
dstintfs List<GetPolicy6Dstintf>: Outgoing (egress) interface. The structure of dstintf block is documented below.
emailfilterProfile String: Name of an existing email filter profile.
firewallSessionDirty String: How to handle sessions if the configuration of this firewall policy changes.
fixedport String: Enable to prevent source NAT from changing a session's source port.
fssoGroups List<GetPolicy6FssoGroup>: Names of FSSO groups. The structure of fsso_groups block is documented below.
globalLabel String: Label for the policy that appears when the GUI is in Global View mode.
groups List<GetPolicy6Group>: Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
httpPolicyRedirect String: Redirect HTTP(S) traffic to matching transparent web proxy policy.
icapProfile String: Name of an existing ICAP profile.
id String: The provider-assigned unique ID for this managed resource.
inbound String: Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
inspectionMode String: Policy inspection mode (Flow/proxy). Default is Flow mode.
ippool String: Enable to use IP Pools for source NAT.
ipsSensor String: Name of an existing IPS sensor.
label String: Label for the policy that appears when the GUI is in Section View mode.
logtraffic String: Enable or disable logging. Log all sessions or security profile sessions.
logtrafficStart String: Record logs when a session starts.
name String: Names of FSSO groups.
nat String: Enable/disable source NAT.
natinbound String: Policy-based IPsec VPN: apply destination NAT to inbound traffic.
natoutbound String: Policy-based IPsec VPN: apply source NAT to outbound traffic.
outbound String: Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
perIpShaper String: Per-IP traffic shaper.
policyid Integer: Policy ID.
poolnames List<GetPolicy6Poolname>: IP Pool names. The structure of poolname block is documented below.
profileGroup String: Name of profile group.
profileProtocolOptions String: Name of an existing Protocol options profile.
profileType String: Determine whether the firewall policy allows security profile groups or single profiles only.
replacemsgOverrideGroup String: Override the default replacement message group for this policy.
rsso String: Enable/disable RADIUS single sign-on (RSSO).
schedule String: Schedule name.
sendDenyPacket String: Enable/disable return of deny-packet.
serviceNegate String: When enabled service specifies what the service must NOT be.
services List<GetPolicy6Service>: Service and service group names. The structure of service block is documented below.
sessionTtl Integer: Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilterProfile String: Name of an existing Spam filter profile.
srcaddrNegate String: When enabled srcaddr specifies what the source address must NOT be.
srcaddrs List<GetPolicy6Srcaddr>: Source address and address group names. The structure of srcaddr block is documented below.
srcintfs List<GetPolicy6Srcintf>: Incoming (ingress) interface. The structure of srcintf block is documented below.
sshFilterProfile String: Name of an existing SSH filter profile.
sshPolicyRedirect String: Redirect SSH traffic to matching transparent proxy policy.
sslMirror String: Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring).
sslMirrorIntfs List<GetPolicy6SslMirrorIntf>: SSL mirror interface name. The structure of ssl_mirror_intf block is documented below.
sslSshProfile String: Name of an existing SSL SSH profile.
status String: Enable or disable this policy.
tcpMssReceiver Integer: Receiver TCP maximum segment size (MSS).
tcpMssSender Integer: Sender TCP maximum segment size (MSS).
tcpSessionWithoutSyn String: Enable/disable creation of TCP session without SYN flag.
timeoutSendRst String: Enable/disable sending RST packets when TCP sessions expire.
tos String: ToS (Type of Service) value used for comparison.
tosMask String: Non-zero bit positions are used for comparison while zero bit positions are ignored.
tosNegate String: Enable negated TOS match.
trafficShaper String: Reverse traffic shaper.
trafficShaperReverse String: Reverse traffic shaper.
urlCategories List<GetPolicy6UrlCategory>: URL category ID list. The structure of url_category block is documented below.
users List<GetPolicy6User>: Names of individual users that can authenticate with this policy. The structure of users block is documented below.
utmStatus String: Enable AV/web/ips protection profile.
uuid String: Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlanCosFwd Integer: VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanCosRev Integer: VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanFilter String: Set VLAN filters.
voipProfile String: Name of an existing VoIP profile.
vpntunnel String: Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile String: Name of an existing Web application firewall profile.
webcache String: Enable/disable web cache.
webcacheHttps String: Enable/disable web cache for HTTPS.
webfilterProfile String: Name of an existing Web filter profile.
webproxyForwardServer String: Web proxy forward server name.
webproxyProfile String: Webproxy profile name.
vdomparam String

action string: Policy action (allow/deny/ipsec).
antiReplay string: Enable/disable anti-replay check.
appCategories GetPolicy6AppCategory[]: Application category ID list. The structure of app_category block is documented below.
appGroups GetPolicy6AppGroup[]: Application group names. The structure of app_group block is documented below.
applicationList string: Name of an existing Application list.
applications GetPolicy6Application[]: Application ID list. The structure of application block is documented below.
autoAsicOffload string: Enable/disable policy traffic ASIC offloading.
avProfile string: Name of an existing Antivirus profile.
cifsProfile string: Name of an existing CIFS profile.
comments string: Comment.
customLogFields GetPolicy6CustomLogField[]: Log field index numbers to append custom log fields to log messages for this policy. The structure of custom_log_fields block is documented below.
decryptedTrafficMirror string: Decrypted traffic mirror.
devices GetPolicy6Device[]: Names of devices or device groups that can be matched by the policy. The structure of devices block is documented below.
diffservForward string: Enable to change packet's DiffServ values to the specified diffservcode-forward value.
diffservReverse string: Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
diffservcodeForward string: Change packet's DiffServ to this value.
diffservcodeRev string: Change packet's reverse (reply) DiffServ to this value.
dlpSensor string: Name of an existing DLP sensor.
dnsfilterProfile string: Name of an existing DNS filter profile.
dsri string: Enable DSRI to ignore HTTP server responses.
dstaddrNegate string: When enabled dstaddr specifies what the destination address must NOT be.
dstaddrs GetPolicy6Dstaddr[]: Destination address and address group names. The structure of dstaddr block is documented below.
dstintfs GetPolicy6Dstintf[]: Outgoing (egress) interface. The structure of dstintf block is documented below.
emailfilterProfile string: Name of an existing email filter profile.
firewallSessionDirty string: How to handle sessions if the configuration of this firewall policy changes.
fixedport string: Enable to prevent source NAT from changing a session's source port.
fssoGroups GetPolicy6FssoGroup[]: Names of FSSO groups. The structure of fsso_groups block is documented below.
globalLabel string: Label for the policy that appears when the GUI is in Global View mode.
groups GetPolicy6Group[]: Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
httpPolicyRedirect string: Redirect HTTP(S) traffic to matching transparent web proxy policy.
icapProfile string: Name of an existing ICAP profile.
id string: The provider-assigned unique ID for this managed resource.
inbound string: Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
inspectionMode string: Policy inspection mode (Flow/proxy). Default is Flow mode.
ippool string: Enable to use IP Pools for source NAT.
ipsSensor string: Name of an existing IPS sensor.
label string: Label for the policy that appears when the GUI is in Section View mode.
logtraffic string: Enable or disable logging. Log all sessions or security profile sessions.
logtrafficStart string: Record logs when a session starts.
name string: Names of FSSO groups.
nat string: Enable/disable source NAT.
natinbound string: Policy-based IPsec VPN: apply destination NAT to inbound traffic.
natoutbound string: Policy-based IPsec VPN: apply source NAT to outbound traffic.
outbound string: Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
perIpShaper string: Per-IP traffic shaper.
policyid number: Policy ID.
poolnames GetPolicy6Poolname[]: IP Pool names. The structure of poolname block is documented below.
profileGroup string: Name of profile group.
profileProtocolOptions string: Name of an existing Protocol options profile.
profileType string: Determine whether the firewall policy allows security profile groups or single profiles only.
replacemsgOverrideGroup string: Override the default replacement message group for this policy.
rsso string: Enable/disable RADIUS single sign-on (RSSO).
schedule string: Schedule name.
sendDenyPacket string: Enable/disable return of deny-packet.
serviceNegate string: When enabled service specifies what the service must NOT be.
services GetPolicy6Service[]: Service and service group names. The structure of service block is documented below.
sessionTtl number: Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilterProfile string: Name of an existing Spam filter profile.
srcaddrNegate string: When enabled srcaddr specifies what the source address must NOT be.
srcaddrs GetPolicy6Srcaddr[]: Source address and address group names. The structure of srcaddr block is documented below.
srcintfs GetPolicy6Srcintf[]: Incoming (ingress) interface. The structure of srcintf block is documented below.
sshFilterProfile string: Name of an existing SSH filter profile.
sshPolicyRedirect string: Redirect SSH traffic to matching transparent proxy policy.
sslMirror string: Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring).
sslMirrorIntfs GetPolicy6SslMirrorIntf[]: SSL mirror interface name. The structure of ssl_mirror_intf block is documented below.
sslSshProfile string: Name of an existing SSL SSH profile.
status string: Enable or disable this policy.
tcpMssReceiver number: Receiver TCP maximum segment size (MSS).
tcpMssSender number: Sender TCP maximum segment size (MSS).
tcpSessionWithoutSyn string: Enable/disable creation of TCP session without SYN flag.
timeoutSendRst string: Enable/disable sending RST packets when TCP sessions expire.
tos string: ToS (Type of Service) value used for comparison.
tosMask string: Non-zero bit positions are used for comparison while zero bit positions are ignored.
tosNegate string: Enable negated TOS match.
trafficShaper string: Reverse traffic shaper.
trafficShaperReverse string: Reverse traffic shaper.
urlCategories GetPolicy6UrlCategory[]: URL category ID list. The structure of url_category block is documented below.
users GetPolicy6User[]: Names of individual users that can authenticate with this policy. The structure of users block is documented below.
utmStatus string: Enable AV/web/ips protection profile.
uuid string: Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlanCosFwd number: VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanCosRev number: VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanFilter string: Set VLAN filters.
voipProfile string: Name of an existing VoIP profile.
vpntunnel string: Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile string: Name of an existing Web application firewall profile.
webcache string: Enable/disable web cache.
webcacheHttps string: Enable/disable web cache for HTTPS.
webfilterProfile string: Name of an existing Web filter profile.
webproxyForwardServer string: Web proxy forward server name.
webproxyProfile string: Webproxy profile name.
vdomparam string

action str: Policy action (allow/deny/ipsec).
anti_replay str: Enable/disable anti-replay check.
app_categories Sequence[GetPolicy6AppCategory]: Application category ID list. The structure of app_category block is documented below.
app_groups Sequence[GetPolicy6AppGroup]: Application group names. The structure of app_group block is documented below.
application_list str: Name of an existing Application list.
applications Sequence[GetPolicy6Application]: Application ID list. The structure of application block is documented below.
auto_asic_offload str: Enable/disable policy traffic ASIC offloading.
av_profile str: Name of an existing Antivirus profile.
cifs_profile str: Name of an existing CIFS profile.
comments str: Comment.
custom_log_fields Sequence[GetPolicy6CustomLogField]: Log field index numbers to append custom log fields to log messages for this policy. The structure of custom_log_fields block is documented below.
decrypted_traffic_mirror str: Decrypted traffic mirror.
devices Sequence[GetPolicy6Device]: Names of devices or device groups that can be matched by the policy. The structure of devices block is documented below.
diffserv_forward str: Enable to change packet's DiffServ values to the specified diffservcode-forward value.
diffserv_reverse str: Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
diffservcode_forward str: Change packet's DiffServ to this value.
diffservcode_rev str: Change packet's reverse (reply) DiffServ to this value.
dlp_sensor str: Name of an existing DLP sensor.
dnsfilter_profile str: Name of an existing DNS filter profile.
dsri str: Enable DSRI to ignore HTTP server responses.
dstaddr_negate str: When enabled dstaddr specifies what the destination address must NOT be.
dstaddrs Sequence[GetPolicy6Dstaddr]: Destination address and address group names. The structure of dstaddr block is documented below.
dstintfs Sequence[GetPolicy6Dstintf]: Outgoing (egress) interface. The structure of dstintf block is documented below.
emailfilter_profile str: Name of an existing email filter profile.
firewall_session_dirty str: How to handle sessions if the configuration of this firewall policy changes.
fixedport str: Enable to prevent source NAT from changing a session's source port.
fsso_groups Sequence[GetPolicy6FssoGroup]: Names of FSSO groups. The structure of fsso_groups block is documented below.
global_label str: Label for the policy that appears when the GUI is in Global View mode.
groups Sequence[GetPolicy6Group]: Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
http_policy_redirect str: Redirect HTTP(S) traffic to matching transparent web proxy policy.
icap_profile str: Name of an existing ICAP profile.
id str: The provider-assigned unique ID for this managed resource.
inbound str: Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
inspection_mode str: Policy inspection mode (Flow/proxy). Default is Flow mode.
ippool str: Enable to use IP Pools for source NAT.
ips_sensor str: Name of an existing IPS sensor.
label str: Label for the policy that appears when the GUI is in Section View mode.
logtraffic str: Enable or disable logging. Log all sessions or security profile sessions.
logtraffic_start str: Record logs when a session starts.
name str: Names of FSSO groups.
nat str: Enable/disable source NAT.
natinbound str: Policy-based IPsec VPN: apply destination NAT to inbound traffic.
natoutbound str: Policy-based IPsec VPN: apply source NAT to outbound traffic.
outbound str: Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
per_ip_shaper str: Per-IP traffic shaper.
policyid int: Policy ID.
poolnames Sequence[GetPolicy6Poolname]: IP Pool names. The structure of poolname block is documented below.
profile_group str: Name of profile group.
profile_protocol_options str: Name of an existing Protocol options profile.
profile_type str: Determine whether the firewall policy allows security profile groups or single profiles only.
replacemsg_override_group str: Override the default replacement message group for this policy.
rsso str: Enable/disable RADIUS single sign-on (RSSO).
schedule str: Schedule name.
send_deny_packet str: Enable/disable return of deny-packet.
service_negate str: When enabled service specifies what the service must NOT be.
services Sequence[GetPolicy6Service]: Service and service group names. The structure of service block is documented below.
session_ttl int: Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilter_profile str: Name of an existing Spam filter profile.
srcaddr_negate str: When enabled srcaddr specifies what the source address must NOT be.
srcaddrs Sequence[GetPolicy6Srcaddr]: Source address and address group names. The structure of srcaddr block is documented below.
srcintfs Sequence[GetPolicy6Srcintf]: Incoming (ingress) interface. The structure of srcintf block is documented below.
ssh_filter_profile str: Name of an existing SSH filter profile.
ssh_policy_redirect str: Redirect SSH traffic to matching transparent proxy policy.
ssl_mirror str: Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring).
ssl_mirror_intfs Sequence[GetPolicy6SslMirrorIntf]: SSL mirror interface name. The structure of ssl_mirror_intf block is documented below.
ssl_ssh_profile str: Name of an existing SSL SSH profile.
status str: Enable or disable this policy.
tcp_mss_receiver int: Receiver TCP maximum segment size (MSS).
tcp_mss_sender int: Sender TCP maximum segment size (MSS).
tcp_session_without_syn str: Enable/disable creation of TCP session without SYN flag.
timeout_send_rst str: Enable/disable sending RST packets when TCP sessions expire.
tos str: ToS (Type of Service) value used for comparison.
tos_mask str: Non-zero bit positions are used for comparison while zero bit positions are ignored.
tos_negate str: Enable negated TOS match.
traffic_shaper str: Reverse traffic shaper.
traffic_shaper_reverse str: Reverse traffic shaper.
url_categories Sequence[GetPolicy6UrlCategory]: URL category ID list. The structure of url_category block is documented below.
users Sequence[GetPolicy6User]: Names of individual users that can authenticate with this policy. The structure of users block is documented below.
utm_status str: Enable AV/web/ips protection profile.
uuid str: Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlan_cos_fwd int: VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlan_cos_rev int: VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlan_filter str: Set VLAN filters.
voip_profile str: Name of an existing VoIP profile.
vpntunnel str: Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
waf_profile str: Name of an existing Web application firewall profile.
webcache str: Enable/disable web cache.
webcache_https str: Enable/disable web cache for HTTPS.
webfilter_profile str: Name of an existing Web filter profile.
webproxy_forward_server str: Web proxy forward server name.
webproxy_profile str: Webproxy profile name.
vdomparam str

action String: Policy action (allow/deny/ipsec).
antiReplay String: Enable/disable anti-replay check.
appCategories List<Property Map>: Application category ID list. The structure of app_category block is documented below.
appGroups List<Property Map>: Application group names. The structure of app_group block is documented below.
applicationList String: Name of an existing Application list.
applications List<Property Map>: Application ID list. The structure of application block is documented below.
autoAsicOffload String: Enable/disable policy traffic ASIC offloading.
avProfile String: Name of an existing Antivirus profile.
cifsProfile String: Name of an existing CIFS profile.
comments String: Comment.
customLogFields List<Property Map>: Log field index numbers to append custom log fields to log messages for this policy. The structure of custom_log_fields block is documented below.
decryptedTrafficMirror String: Decrypted traffic mirror.
devices List<Property Map>: Names of devices or device groups that can be matched by the policy. The structure of devices block is documented below.
diffservForward String: Enable to change packet's DiffServ values to the specified diffservcode-forward value.
diffservReverse String: Enable to change packet's reverse (reply) DiffServ values to the specified diffservcode-rev value.
diffservcodeForward String: Change packet's DiffServ to this value.
diffservcodeRev String: Change packet's reverse (reply) DiffServ to this value.
dlpSensor String: Name of an existing DLP sensor.
dnsfilterProfile String: Name of an existing DNS filter profile.
dsri String: Enable DSRI to ignore HTTP server responses.
dstaddrNegate String: When enabled dstaddr specifies what the destination address must NOT be.
dstaddrs List<Property Map>: Destination address and address group names. The structure of dstaddr block is documented below.
dstintfs List<Property Map>: Outgoing (egress) interface. The structure of dstintf block is documented below.
emailfilterProfile String: Name of an existing email filter profile.
firewallSessionDirty String: How to handle sessions if the configuration of this firewall policy changes.
fixedport String: Enable to prevent source NAT from changing a session's source port.
fssoGroups List<Property Map>: Names of FSSO groups. The structure of fsso_groups block is documented below.
globalLabel String: Label for the policy that appears when the GUI is in Global View mode.
groups List<Property Map>: Names of user groups that can authenticate with this policy. The structure of groups block is documented below.
httpPolicyRedirect String: Redirect HTTP(S) traffic to matching transparent web proxy policy.
icapProfile String: Name of an existing ICAP profile.
id String: The provider-assigned unique ID for this managed resource.
inbound String: Policy-based IPsec VPN: only traffic from the remote network can initiate a VPN.
inspectionMode String: Policy inspection mode (Flow/proxy). Default is Flow mode.
ippool String: Enable to use IP Pools for source NAT.
ipsSensor String: Name of an existing IPS sensor.
label String: Label for the policy that appears when the GUI is in Section View mode.
logtraffic String: Enable or disable logging. Log all sessions or security profile sessions.
logtrafficStart String: Record logs when a session starts.
name String: Names of FSSO groups.
nat String: Enable/disable source NAT.
natinbound String: Policy-based IPsec VPN: apply destination NAT to inbound traffic.
natoutbound String: Policy-based IPsec VPN: apply source NAT to outbound traffic.
outbound String: Policy-based IPsec VPN: only traffic from the internal network can initiate a VPN.
perIpShaper String: Per-IP traffic shaper.
policyid Number: Policy ID.
poolnames List<Property Map>: IP Pool names. The structure of poolname block is documented below.
profileGroup String: Name of profile group.
profileProtocolOptions String: Name of an existing Protocol options profile.
profileType String: Determine whether the firewall policy allows security profile groups or single profiles only.
replacemsgOverrideGroup String: Override the default replacement message group for this policy.
rsso String: Enable/disable RADIUS single sign-on (RSSO).
schedule String: Schedule name.
sendDenyPacket String: Enable/disable return of deny-packet.
serviceNegate String: When enabled service specifies what the service must NOT be.
services List<Property Map>: Service and service group names. The structure of service block is documented below.
sessionTtl Number: Session TTL in seconds for sessions accepted by this policy. 0 means use the system default session TTL.
spamfilterProfile String: Name of an existing Spam filter profile.
srcaddrNegate String: When enabled srcaddr specifies what the source address must NOT be.
srcaddrs List<Property Map>: Source address and address group names. The structure of srcaddr block is documented below.
srcintfs List<Property Map>: Incoming (ingress) interface. The structure of srcintf block is documented below.
sshFilterProfile String: Name of an existing SSH filter profile.
sshPolicyRedirect String: Redirect SSH traffic to matching transparent proxy policy.
sslMirror String: Enable to copy decrypted SSL traffic to a FortiGate interface (called SSL mirroring).
sslMirrorIntfs List<Property Map>: SSL mirror interface name. The structure of ssl_mirror_intf block is documented below.
sslSshProfile String: Name of an existing SSL SSH profile.
status String: Enable or disable this policy.
tcpMssReceiver Number: Receiver TCP maximum segment size (MSS).
tcpMssSender Number: Sender TCP maximum segment size (MSS).
tcpSessionWithoutSyn String: Enable/disable creation of TCP session without SYN flag.
timeoutSendRst String: Enable/disable sending RST packets when TCP sessions expire.
tos String: ToS (Type of Service) value used for comparison.
tosMask String: Non-zero bit positions are used for comparison while zero bit positions are ignored.
tosNegate String: Enable negated TOS match.
trafficShaper String: Reverse traffic shaper.
trafficShaperReverse String: Reverse traffic shaper.
urlCategories List<Property Map>: URL category ID list. The structure of url_category block is documented below.
users List<Property Map>: Names of individual users that can authenticate with this policy. The structure of users block is documented below.
utmStatus String: Enable AV/web/ips protection profile.
uuid String: Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
vlanCosFwd Number: VLAN forward direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanCosRev Number: VLAN reverse direction user priority: 255 passthrough, 0 lowest, 7 highest
vlanFilter String: Set VLAN filters.
voipProfile String: Name of an existing VoIP profile.
vpntunnel String: Policy-based IPsec VPN: name of the IPsec VPN Phase 1.
wafProfile String: Name of an existing Web application firewall profile.
webcache String: Enable/disable web cache.
webcacheHttps String: Enable/disable web cache for HTTPS.
webfilterProfile String: Name of an existing Web filter profile.
webproxyForwardServer String: Web proxy forward server name.
webproxyProfile String: Webproxy profile name.
vdomparam String

Supporting Types

GetPolicy6AppCategory

Id int: URL category ID.

Id int: URL category ID.

id Integer: URL category ID.

id number: URL category ID.

id int: URL category ID.

id Number: URL category ID.

GetPolicy6AppGroup

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6Application

Id int: URL category ID.

Id int: URL category ID.

id Integer: URL category ID.

id number: URL category ID.

id int: URL category ID.

id Number: URL category ID.

GetPolicy6CustomLogField

FieldId string: Custom log field.

FieldId string: Custom log field.

fieldId String: Custom log field.

fieldId string: Custom log field.

field_id str: Custom log field.

fieldId String: Custom log field.

GetPolicy6Device

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6Dstaddr

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6Dstintf

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6FssoGroup

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6Group

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6Poolname

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6Service

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6Srcaddr

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6Srcintf

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6SslMirrorIntf

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

GetPolicy6UrlCategory

Id int: URL category ID.

Id int: URL category ID.

id Integer: URL category ID.

id number: URL category ID.

id int: URL category ID.

id Number: URL category ID.

GetPolicy6User

Name string: Names of FSSO groups.

Name string: Names of FSSO groups.

name String: Names of FSSO groups.

name string: Names of FSSO groups.

name str: Names of FSSO groups.

name String: Names of FSSO groups.

Package Details

Repository: fortios pulumiverse/pulumi-fortios
License: Apache-2.0
Notes: This Pulumi package is based on the fortios Terraform Provider.

Fortios v0.0.5 published on Tuesday, Apr 9, 2024 by pulumiverse

pulumiverse/pulumi-fortios

fortios.firewall.getPolicy6

On this page

On this page

Using getPolicy6

getPolicy6 Result

Supporting Types

GetPolicy6AppCategory

GetPolicy6AppGroup

GetPolicy6Application

GetPolicy6CustomLogField

GetPolicy6Device

GetPolicy6Dstaddr

GetPolicy6Dstintf

GetPolicy6FssoGroup

GetPolicy6Group

GetPolicy6Poolname

GetPolicy6Service

GetPolicy6Srcaddr

GetPolicy6Srcintf

GetPolicy6SslMirrorIntf

GetPolicy6UrlCategory

GetPolicy6User

Package Details

On this page

On this page