Docs Packages
  1. Packages
  2. Fortios
  3. API Docs
  4. firewall
  5. Proxypolicy
Fortios v0.0.5 published on Tuesday, Apr 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

fortios.firewall.Proxypolicy

Explore with Pulumi AI

fortios logo
Fortios v0.0.5 published on Tuesday, Apr 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

    Configure proxy policies.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as fortios from "@pulumiverse/fortios";

const trname = new fortios.firewall.Proxypolicy("trname", {
    action: "deny",
    disclaimer: "disable",
    dstaddrs: [{
        name: "all",
    }],
    dstaddrNegate: "disable",
    dstintfs: [{
        name: "port4",
    }],
    httpTunnelAuth: "disable",
    internetService: "disable",
    internetServiceNegate: "disable",
    logtraffic: "disable",
    logtrafficStart: "disable",
    policyid: 1,
    profileProtocolOptions: "default",
    profileType: "single",
    proxy: "transparent-web",
    scanBotnetConnections: "disable",
    schedule: "always",
    services: [{
        name: "webproxy",
    }],
    serviceNegate: "disable",
    srcaddrs: [{
        name: "all",
    }],
    srcaddrNegate: "disable",
    srcintfs: [{
        name: "port3",
    }],
    status: "enable",
    transparent: "disable",
    utmStatus: "disable",
    webcache: "disable",
    webcacheHttps: "disable",
});

    import pulumi
import pulumiverse_fortios as fortios

trname = fortios.firewall.Proxypolicy("trname",
    action="deny",
    disclaimer="disable",
    dstaddrs=[fortios.firewall.ProxypolicyDstaddrArgs(
        name="all",
    )],
    dstaddr_negate="disable",
    dstintfs=[fortios.firewall.ProxypolicyDstintfArgs(
        name="port4",
    )],
    http_tunnel_auth="disable",
    internet_service="disable",
    internet_service_negate="disable",
    logtraffic="disable",
    logtraffic_start="disable",
    policyid=1,
    profile_protocol_options="default",
    profile_type="single",
    proxy="transparent-web",
    scan_botnet_connections="disable",
    schedule="always",
    services=[fortios.firewall.ProxypolicyServiceArgs(
        name="webproxy",
    )],
    service_negate="disable",
    srcaddrs=[fortios.firewall.ProxypolicySrcaddrArgs(
        name="all",
    )],
    srcaddr_negate="disable",
    srcintfs=[fortios.firewall.ProxypolicySrcintfArgs(
        name="port3",
    )],
    status="enable",
    transparent="disable",
    utm_status="disable",
    webcache="disable",
    webcache_https="disable")

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-fortios/sdk/go/fortios/firewall"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := firewall.NewProxypolicy(ctx, "trname", &firewall.ProxypolicyArgs{
			Action:     pulumi.String("deny"),
			Disclaimer: pulumi.String("disable"),
			Dstaddrs: firewall.ProxypolicyDstaddrArray{
				&firewall.ProxypolicyDstaddrArgs{
					Name: pulumi.String("all"),
				},
			},
			DstaddrNegate: pulumi.String("disable"),
			Dstintfs: firewall.ProxypolicyDstintfArray{
				&firewall.ProxypolicyDstintfArgs{
					Name: pulumi.String("port4"),
				},
			},
			HttpTunnelAuth:         pulumi.String("disable"),
			InternetService:        pulumi.String("disable"),
			InternetServiceNegate:  pulumi.String("disable"),
			Logtraffic:             pulumi.String("disable"),
			LogtrafficStart:        pulumi.String("disable"),
			Policyid:               pulumi.Int(1),
			ProfileProtocolOptions: pulumi.String("default"),
			ProfileType:            pulumi.String("single"),
			Proxy:                  pulumi.String("transparent-web"),
			ScanBotnetConnections:  pulumi.String("disable"),
			Schedule:               pulumi.String("always"),
			Services: firewall.ProxypolicyServiceArray{
				&firewall.ProxypolicyServiceArgs{
					Name: pulumi.String("webproxy"),
				},
			},
			ServiceNegate: pulumi.String("disable"),
			Srcaddrs: firewall.ProxypolicySrcaddrArray{
				&firewall.ProxypolicySrcaddrArgs{
					Name: pulumi.String("all"),
				},
			},
			SrcaddrNegate: pulumi.String("disable"),
			Srcintfs: firewall.ProxypolicySrcintfArray{
				&firewall.ProxypolicySrcintfArgs{
					Name: pulumi.String("port3"),
				},
			},
			Status:        pulumi.String("enable"),
			Transparent:   pulumi.String("disable"),
			UtmStatus:     pulumi.String("disable"),
			Webcache:      pulumi.String("disable"),
			WebcacheHttps: pulumi.String("disable"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortios = Pulumiverse.Fortios;

return await Deployment.RunAsync(() => 
{
    var trname = new Fortios.Firewall.Proxypolicy("trname", new()
    {
        Action = "deny",
        Disclaimer = "disable",
        Dstaddrs = new[]
        {
            new Fortios.Firewall.Inputs.ProxypolicyDstaddrArgs
            {
                Name = "all",
            },
        },
        DstaddrNegate = "disable",
        Dstintfs = new[]
        {
            new Fortios.Firewall.Inputs.ProxypolicyDstintfArgs
            {
                Name = "port4",
            },
        },
        HttpTunnelAuth = "disable",
        InternetService = "disable",
        InternetServiceNegate = "disable",
        Logtraffic = "disable",
        LogtrafficStart = "disable",
        Policyid = 1,
        ProfileProtocolOptions = "default",
        ProfileType = "single",
        Proxy = "transparent-web",
        ScanBotnetConnections = "disable",
        Schedule = "always",
        Services = new[]
        {
            new Fortios.Firewall.Inputs.ProxypolicyServiceArgs
            {
                Name = "webproxy",
            },
        },
        ServiceNegate = "disable",
        Srcaddrs = new[]
        {
            new Fortios.Firewall.Inputs.ProxypolicySrcaddrArgs
            {
                Name = "all",
            },
        },
        SrcaddrNegate = "disable",
        Srcintfs = new[]
        {
            new Fortios.Firewall.Inputs.ProxypolicySrcintfArgs
            {
                Name = "port3",
            },
        },
        Status = "enable",
        Transparent = "disable",
        UtmStatus = "disable",
        Webcache = "disable",
        WebcacheHttps = "disable",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortios.firewall.Proxypolicy;
import com.pulumi.fortios.firewall.ProxypolicyArgs;
import com.pulumi.fortios.firewall.inputs.ProxypolicyDstaddrArgs;
import com.pulumi.fortios.firewall.inputs.ProxypolicyDstintfArgs;
import com.pulumi.fortios.firewall.inputs.ProxypolicyServiceArgs;
import com.pulumi.fortios.firewall.inputs.ProxypolicySrcaddrArgs;
import com.pulumi.fortios.firewall.inputs.ProxypolicySrcintfArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trname = new Proxypolicy("trname", ProxypolicyArgs.builder()        
            .action("deny")
            .disclaimer("disable")
            .dstaddrs(ProxypolicyDstaddrArgs.builder()
                .name("all")
                .build())
            .dstaddrNegate("disable")
            .dstintfs(ProxypolicyDstintfArgs.builder()
                .name("port4")
                .build())
            .httpTunnelAuth("disable")
            .internetService("disable")
            .internetServiceNegate("disable")
            .logtraffic("disable")
            .logtrafficStart("disable")
            .policyid(1)
            .profileProtocolOptions("default")
            .profileType("single")
            .proxy("transparent-web")
            .scanBotnetConnections("disable")
            .schedule("always")
            .services(ProxypolicyServiceArgs.builder()
                .name("webproxy")
                .build())
            .serviceNegate("disable")
            .srcaddrs(ProxypolicySrcaddrArgs.builder()
                .name("all")
                .build())
            .srcaddrNegate("disable")
            .srcintfs(ProxypolicySrcintfArgs.builder()
                .name("port3")
                .build())
            .status("enable")
            .transparent("disable")
            .utmStatus("disable")
            .webcache("disable")
            .webcacheHttps("disable")
            .build());

    }
}

    resources:
  trname:
    type: fortios:firewall:Proxypolicy
    properties:
      action: deny
      disclaimer: disable
      dstaddrs:
        - name: all
      dstaddrNegate: disable
      dstintfs:
        - name: port4
      httpTunnelAuth: disable
      internetService: disable
      internetServiceNegate: disable
      logtraffic: disable
      logtrafficStart: disable
      policyid: 1
      profileProtocolOptions: default
      profileType: single
      proxy: transparent-web
      scanBotnetConnections: disable
      schedule: always
      services:
        - name: webproxy
      serviceNegate: disable
      srcaddrs:
        - name: all
      srcaddrNegate: disable
      srcintfs:
        - name: port3
      status: enable
      transparent: disable
      utmStatus: disable
      webcache: disable
      webcacheHttps: disable

    Create Proxypolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Proxypolicy(name: string, args: ProxypolicyArgs, opts?: CustomResourceOptions);
    @overload
def Proxypolicy(resource_name: str,
                args: ProxypolicyArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def Proxypolicy(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                dstintfs: Optional[Sequence[ProxypolicyDstintfArgs]] = None,
                proxy: Optional[str] = None,
                schedule: Optional[str] = None,
                access_proxies: Optional[Sequence[ProxypolicyAccessProxyArgs]] = None,
                access_proxy6s: Optional[Sequence[ProxypolicyAccessProxy6Args]] = None,
                action: Optional[str] = None,
                application_list: Optional[str] = None,
                av_profile: Optional[str] = None,
                block_notification: Optional[str] = None,
                casb_profile: Optional[str] = None,
                cifs_profile: Optional[str] = None,
                comments: Optional[str] = None,
                decrypted_traffic_mirror: Optional[str] = None,
                detect_https_in_http_request: Optional[str] = None,
                device_ownership: Optional[str] = None,
                diameter_filter_profile: Optional[str] = None,
                disclaimer: Optional[str] = None,
                dlp_profile: Optional[str] = None,
                dlp_sensor: Optional[str] = None,
                dstaddr6s: Optional[Sequence[ProxypolicyDstaddr6Args]] = None,
                dstaddr_negate: Optional[str] = None,
                dstaddrs: Optional[Sequence[ProxypolicyDstaddrArgs]] = None,
                dynamic_sort_subtable: Optional[str] = None,
                emailfilter_profile: Optional[str] = None,
                file_filter_profile: Optional[str] = None,
                get_all_tables: Optional[str] = None,
                global_label: Optional[str] = None,
                groups: Optional[Sequence[ProxypolicyGroupArgs]] = None,
                http_tunnel_auth: Optional[str] = None,
                icap_profile: Optional[str] = None,
                internet_service: Optional[str] = None,
                internet_service6: Optional[str] = None,
                internet_service6_custom_groups: Optional[Sequence[ProxypolicyInternetService6CustomGroupArgs]] = None,
                internet_service6_customs: Optional[Sequence[ProxypolicyInternetService6CustomArgs]] = None,
                internet_service6_groups: Optional[Sequence[ProxypolicyInternetService6GroupArgs]] = None,
                internet_service6_names: Optional[Sequence[ProxypolicyInternetService6NameArgs]] = None,
                internet_service6_negate: Optional[str] = None,
                internet_service_custom_groups: Optional[Sequence[ProxypolicyInternetServiceCustomGroupArgs]] = None,
                internet_service_customs: Optional[Sequence[ProxypolicyInternetServiceCustomArgs]] = None,
                internet_service_groups: Optional[Sequence[ProxypolicyInternetServiceGroupArgs]] = None,
                internet_service_ids: Optional[Sequence[ProxypolicyInternetServiceIdArgs]] = None,
                internet_service_names: Optional[Sequence[ProxypolicyInternetServiceNameArgs]] = None,
                internet_service_negate: Optional[str] = None,
                ips_sensor: Optional[str] = None,
                ips_voip_filter: Optional[str] = None,
                label: Optional[str] = None,
                logtraffic: Optional[str] = None,
                logtraffic_start: Optional[str] = None,
                name: Optional[str] = None,
                policyid: Optional[int] = None,
                poolnames: Optional[Sequence[ProxypolicyPoolnameArgs]] = None,
                profile_group: Optional[str] = None,
                profile_protocol_options: Optional[str] = None,
                profile_type: Optional[str] = None,
                redirect_url: Optional[str] = None,
                replacemsg_override_group: Optional[str] = None,
                scan_botnet_connections: Optional[str] = None,
                sctp_filter_profile: Optional[str] = None,
                service_negate: Optional[str] = None,
                services: Optional[Sequence[ProxypolicyServiceArgs]] = None,
                session_ttl: Optional[int] = None,
                spamfilter_profile: Optional[str] = None,
                srcaddr6s: Optional[Sequence[ProxypolicySrcaddr6Args]] = None,
                srcaddr_negate: Optional[str] = None,
                srcaddrs: Optional[Sequence[ProxypolicySrcaddrArgs]] = None,
                srcintfs: Optional[Sequence[ProxypolicySrcintfArgs]] = None,
                ssh_filter_profile: Optional[str] = None,
                ssh_policy_redirect: Optional[str] = None,
                ssl_ssh_profile: Optional[str] = None,
                status: Optional[str] = None,
                transparent: Optional[str] = None,
                users: Optional[Sequence[ProxypolicyUserArgs]] = None,
                utm_status: Optional[str] = None,
                uuid: Optional[str] = None,
                vdomparam: Optional[str] = None,
                videofilter_profile: Optional[str] = None,
                virtual_patch_profile: Optional[str] = None,
                voip_profile: Optional[str] = None,
                waf_profile: Optional[str] = None,
                webcache: Optional[str] = None,
                webcache_https: Optional[str] = None,
                webfilter_profile: Optional[str] = None,
                webproxy_forward_server: Optional[str] = None,
                webproxy_profile: Optional[str] = None,
                ztna_ems_tags: Optional[Sequence[ProxypolicyZtnaEmsTagArgs]] = None,
                ztna_tags_match_logic: Optional[str] = None)
    func NewProxypolicy(ctx *Context, name string, args ProxypolicyArgs, opts ...ResourceOption) (*Proxypolicy, error)
    public Proxypolicy(string name, ProxypolicyArgs args, CustomResourceOptions? opts = null)
    public Proxypolicy(String name, ProxypolicyArgs args)
public Proxypolicy(String name, ProxypolicyArgs args, CustomResourceOptions options)

    type: fortios:firewall:Proxypolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ProxypolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ProxypolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ProxypolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ProxypolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ProxypolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var proxypolicyResource = new Fortios.Firewall.Proxypolicy("proxypolicyResource", new()
{
    Dstintfs = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyDstintfArgs
        {
            Name = "string",
        },
    },
    Proxy = "string",
    Schedule = "string",
    AccessProxies = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyAccessProxyArgs
        {
            Name = "string",
        },
    },
    AccessProxy6s = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyAccessProxy6Args
        {
            Name = "string",
        },
    },
    Action = "string",
    ApplicationList = "string",
    AvProfile = "string",
    BlockNotification = "string",
    CasbProfile = "string",
    CifsProfile = "string",
    Comments = "string",
    DecryptedTrafficMirror = "string",
    DetectHttpsInHttpRequest = "string",
    DeviceOwnership = "string",
    DiameterFilterProfile = "string",
    Disclaimer = "string",
    DlpProfile = "string",
    DlpSensor = "string",
    Dstaddr6s = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyDstaddr6Args
        {
            Name = "string",
        },
    },
    DstaddrNegate = "string",
    Dstaddrs = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyDstaddrArgs
        {
            Name = "string",
        },
    },
    DynamicSortSubtable = "string",
    EmailfilterProfile = "string",
    FileFilterProfile = "string",
    GetAllTables = "string",
    GlobalLabel = "string",
    Groups = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyGroupArgs
        {
            Name = "string",
        },
    },
    HttpTunnelAuth = "string",
    IcapProfile = "string",
    InternetService = "string",
    InternetService6 = "string",
    InternetService6CustomGroups = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyInternetService6CustomGroupArgs
        {
            Name = "string",
        },
    },
    InternetService6Customs = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyInternetService6CustomArgs
        {
            Name = "string",
        },
    },
    InternetService6Groups = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyInternetService6GroupArgs
        {
            Name = "string",
        },
    },
    InternetService6Names = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyInternetService6NameArgs
        {
            Name = "string",
        },
    },
    InternetService6Negate = "string",
    InternetServiceCustomGroups = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyInternetServiceCustomGroupArgs
        {
            Name = "string",
        },
    },
    InternetServiceCustoms = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyInternetServiceCustomArgs
        {
            Name = "string",
        },
    },
    InternetServiceGroups = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyInternetServiceGroupArgs
        {
            Name = "string",
        },
    },
    InternetServiceIds = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyInternetServiceIdArgs
        {
            Id = 0,
        },
    },
    InternetServiceNames = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyInternetServiceNameArgs
        {
            Name = "string",
        },
    },
    InternetServiceNegate = "string",
    IpsSensor = "string",
    IpsVoipFilter = "string",
    Label = "string",
    Logtraffic = "string",
    LogtrafficStart = "string",
    Name = "string",
    Policyid = 0,
    Poolnames = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyPoolnameArgs
        {
            Name = "string",
        },
    },
    ProfileGroup = "string",
    ProfileProtocolOptions = "string",
    ProfileType = "string",
    RedirectUrl = "string",
    ReplacemsgOverrideGroup = "string",
    ScanBotnetConnections = "string",
    SctpFilterProfile = "string",
    ServiceNegate = "string",
    Services = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyServiceArgs
        {
            Name = "string",
        },
    },
    SessionTtl = 0,
    SpamfilterProfile = "string",
    Srcaddr6s = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicySrcaddr6Args
        {
            Name = "string",
        },
    },
    SrcaddrNegate = "string",
    Srcaddrs = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicySrcaddrArgs
        {
            Name = "string",
        },
    },
    Srcintfs = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicySrcintfArgs
        {
            Name = "string",
        },
    },
    SshFilterProfile = "string",
    SshPolicyRedirect = "string",
    SslSshProfile = "string",
    Status = "string",
    Transparent = "string",
    Users = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyUserArgs
        {
            Name = "string",
        },
    },
    UtmStatus = "string",
    Uuid = "string",
    Vdomparam = "string",
    VideofilterProfile = "string",
    VirtualPatchProfile = "string",
    VoipProfile = "string",
    WafProfile = "string",
    Webcache = "string",
    WebcacheHttps = "string",
    WebfilterProfile = "string",
    WebproxyForwardServer = "string",
    WebproxyProfile = "string",
    ZtnaEmsTags = new[]
    {
        new Fortios.Firewall.Inputs.ProxypolicyZtnaEmsTagArgs
        {
            Name = "string",
        },
    },
    ZtnaTagsMatchLogic = "string",
});

    example, err := firewall.NewProxypolicy(ctx, "proxypolicyResource", &firewall.ProxypolicyArgs{
	Dstintfs: firewall.ProxypolicyDstintfArray{
		&firewall.ProxypolicyDstintfArgs{
			Name: pulumi.String("string"),
		},
	},
	Proxy:    pulumi.String("string"),
	Schedule: pulumi.String("string"),
	AccessProxies: firewall.ProxypolicyAccessProxyArray{
		&firewall.ProxypolicyAccessProxyArgs{
			Name: pulumi.String("string"),
		},
	},
	AccessProxy6s: firewall.ProxypolicyAccessProxy6Array{
		&firewall.ProxypolicyAccessProxy6Args{
			Name: pulumi.String("string"),
		},
	},
	Action:                   pulumi.String("string"),
	ApplicationList:          pulumi.String("string"),
	AvProfile:                pulumi.String("string"),
	BlockNotification:        pulumi.String("string"),
	CasbProfile:              pulumi.String("string"),
	CifsProfile:              pulumi.String("string"),
	Comments:                 pulumi.String("string"),
	DecryptedTrafficMirror:   pulumi.String("string"),
	DetectHttpsInHttpRequest: pulumi.String("string"),
	DeviceOwnership:          pulumi.String("string"),
	DiameterFilterProfile:    pulumi.String("string"),
	Disclaimer:               pulumi.String("string"),
	DlpProfile:               pulumi.String("string"),
	DlpSensor:                pulumi.String("string"),
	Dstaddr6s: firewall.ProxypolicyDstaddr6Array{
		&firewall.ProxypolicyDstaddr6Args{
			Name: pulumi.String("string"),
		},
	},
	DstaddrNegate: pulumi.String("string"),
	Dstaddrs: firewall.ProxypolicyDstaddrArray{
		&firewall.ProxypolicyDstaddrArgs{
			Name: pulumi.String("string"),
		},
	},
	DynamicSortSubtable: pulumi.String("string"),
	EmailfilterProfile:  pulumi.String("string"),
	FileFilterProfile:   pulumi.String("string"),
	GetAllTables:        pulumi.String("string"),
	GlobalLabel:         pulumi.String("string"),
	Groups: firewall.ProxypolicyGroupArray{
		&firewall.ProxypolicyGroupArgs{
			Name: pulumi.String("string"),
		},
	},
	HttpTunnelAuth:   pulumi.String("string"),
	IcapProfile:      pulumi.String("string"),
	InternetService:  pulumi.String("string"),
	InternetService6: pulumi.String("string"),
	InternetService6CustomGroups: firewall.ProxypolicyInternetService6CustomGroupArray{
		&firewall.ProxypolicyInternetService6CustomGroupArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetService6Customs: firewall.ProxypolicyInternetService6CustomArray{
		&firewall.ProxypolicyInternetService6CustomArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetService6Groups: firewall.ProxypolicyInternetService6GroupArray{
		&firewall.ProxypolicyInternetService6GroupArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetService6Names: firewall.ProxypolicyInternetService6NameArray{
		&firewall.ProxypolicyInternetService6NameArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetService6Negate: pulumi.String("string"),
	InternetServiceCustomGroups: firewall.ProxypolicyInternetServiceCustomGroupArray{
		&firewall.ProxypolicyInternetServiceCustomGroupArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetServiceCustoms: firewall.ProxypolicyInternetServiceCustomArray{
		&firewall.ProxypolicyInternetServiceCustomArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetServiceGroups: firewall.ProxypolicyInternetServiceGroupArray{
		&firewall.ProxypolicyInternetServiceGroupArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetServiceIds: firewall.ProxypolicyInternetServiceIdArray{
		&firewall.ProxypolicyInternetServiceIdArgs{
			Id: pulumi.Int(0),
		},
	},
	InternetServiceNames: firewall.ProxypolicyInternetServiceNameArray{
		&firewall.ProxypolicyInternetServiceNameArgs{
			Name: pulumi.String("string"),
		},
	},
	InternetServiceNegate: pulumi.String("string"),
	IpsSensor:             pulumi.String("string"),
	IpsVoipFilter:         pulumi.String("string"),
	Label:                 pulumi.String("string"),
	Logtraffic:            pulumi.String("string"),
	LogtrafficStart:       pulumi.String("string"),
	Name:                  pulumi.String("string"),
	Policyid:              pulumi.Int(0),
	Poolnames: firewall.ProxypolicyPoolnameArray{
		&firewall.ProxypolicyPoolnameArgs{
			Name: pulumi.String("string"),
		},
	},
	ProfileGroup:            pulumi.String("string"),
	ProfileProtocolOptions:  pulumi.String("string"),
	ProfileType:             pulumi.String("string"),
	RedirectUrl:             pulumi.String("string"),
	ReplacemsgOverrideGroup: pulumi.String("string"),
	ScanBotnetConnections:   pulumi.String("string"),
	SctpFilterProfile:       pulumi.String("string"),
	ServiceNegate:           pulumi.String("string"),
	Services: firewall.ProxypolicyServiceArray{
		&firewall.ProxypolicyServiceArgs{
			Name: pulumi.String("string"),
		},
	},
	SessionTtl:        pulumi.Int(0),
	SpamfilterProfile: pulumi.String("string"),
	Srcaddr6s: firewall.ProxypolicySrcaddr6Array{
		&firewall.ProxypolicySrcaddr6Args{
			Name: pulumi.String("string"),
		},
	},
	SrcaddrNegate: pulumi.String("string"),
	Srcaddrs: firewall.ProxypolicySrcaddrArray{
		&firewall.ProxypolicySrcaddrArgs{
			Name: pulumi.String("string"),
		},
	},
	Srcintfs: firewall.ProxypolicySrcintfArray{
		&firewall.ProxypolicySrcintfArgs{
			Name: pulumi.String("string"),
		},
	},
	SshFilterProfile:  pulumi.String("string"),
	SshPolicyRedirect: pulumi.String("string"),
	SslSshProfile:     pulumi.String("string"),
	Status:            pulumi.String("string"),
	Transparent:       pulumi.String("string"),
	Users: firewall.ProxypolicyUserArray{
		&firewall.ProxypolicyUserArgs{
			Name: pulumi.String("string"),
		},
	},
	UtmStatus:             pulumi.String("string"),
	Uuid:                  pulumi.String("string"),
	Vdomparam:             pulumi.String("string"),
	VideofilterProfile:    pulumi.String("string"),
	VirtualPatchProfile:   pulumi.String("string"),
	VoipProfile:           pulumi.String("string"),
	WafProfile:            pulumi.String("string"),
	Webcache:              pulumi.String("string"),
	WebcacheHttps:         pulumi.String("string"),
	WebfilterProfile:      pulumi.String("string"),
	WebproxyForwardServer: pulumi.String("string"),
	WebproxyProfile:       pulumi.String("string"),
	ZtnaEmsTags: firewall.ProxypolicyZtnaEmsTagArray{
		&firewall.ProxypolicyZtnaEmsTagArgs{
			Name: pulumi.String("string"),
		},
	},
	ZtnaTagsMatchLogic: pulumi.String("string"),
})

    var proxypolicyResource = new Proxypolicy("proxypolicyResource", ProxypolicyArgs.builder()
    .dstintfs(ProxypolicyDstintfArgs.builder()
        .name("string")
        .build())
    .proxy("string")
    .schedule("string")
    .accessProxies(ProxypolicyAccessProxyArgs.builder()
        .name("string")
        .build())
    .accessProxy6s(ProxypolicyAccessProxy6Args.builder()
        .name("string")
        .build())
    .action("string")
    .applicationList("string")
    .avProfile("string")
    .blockNotification("string")
    .casbProfile("string")
    .cifsProfile("string")
    .comments("string")
    .decryptedTrafficMirror("string")
    .detectHttpsInHttpRequest("string")
    .deviceOwnership("string")
    .diameterFilterProfile("string")
    .disclaimer("string")
    .dlpProfile("string")
    .dlpSensor("string")
    .dstaddr6s(ProxypolicyDstaddr6Args.builder()
        .name("string")
        .build())
    .dstaddrNegate("string")
    .dstaddrs(ProxypolicyDstaddrArgs.builder()
        .name("string")
        .build())
    .dynamicSortSubtable("string")
    .emailfilterProfile("string")
    .fileFilterProfile("string")
    .getAllTables("string")
    .globalLabel("string")
    .groups(ProxypolicyGroupArgs.builder()
        .name("string")
        .build())
    .httpTunnelAuth("string")
    .icapProfile("string")
    .internetService("string")
    .internetService6("string")
    .internetService6CustomGroups(ProxypolicyInternetService6CustomGroupArgs.builder()
        .name("string")
        .build())
    .internetService6Customs(ProxypolicyInternetService6CustomArgs.builder()
        .name("string")
        .build())
    .internetService6Groups(ProxypolicyInternetService6GroupArgs.builder()
        .name("string")
        .build())
    .internetService6Names(ProxypolicyInternetService6NameArgs.builder()
        .name("string")
        .build())
    .internetService6Negate("string")
    .internetServiceCustomGroups(ProxypolicyInternetServiceCustomGroupArgs.builder()
        .name("string")
        .build())
    .internetServiceCustoms(ProxypolicyInternetServiceCustomArgs.builder()
        .name("string")
        .build())
    .internetServiceGroups(ProxypolicyInternetServiceGroupArgs.builder()
        .name("string")
        .build())
    .internetServiceIds(ProxypolicyInternetServiceIdArgs.builder()
        .id(0)
        .build())
    .internetServiceNames(ProxypolicyInternetServiceNameArgs.builder()
        .name("string")
        .build())
    .internetServiceNegate("string")
    .ipsSensor("string")
    .ipsVoipFilter("string")
    .label("string")
    .logtraffic("string")
    .logtrafficStart("string")
    .name("string")
    .policyid(0)
    .poolnames(ProxypolicyPoolnameArgs.builder()
        .name("string")
        .build())
    .profileGroup("string")
    .profileProtocolOptions("string")
    .profileType("string")
    .redirectUrl("string")
    .replacemsgOverrideGroup("string")
    .scanBotnetConnections("string")
    .sctpFilterProfile("string")
    .serviceNegate("string")
    .services(ProxypolicyServiceArgs.builder()
        .name("string")
        .build())
    .sessionTtl(0)
    .spamfilterProfile("string")
    .srcaddr6s(ProxypolicySrcaddr6Args.builder()
        .name("string")
        .build())
    .srcaddrNegate("string")
    .srcaddrs(ProxypolicySrcaddrArgs.builder()
        .name("string")
        .build())
    .srcintfs(ProxypolicySrcintfArgs.builder()
        .name("string")
        .build())
    .sshFilterProfile("string")
    .sshPolicyRedirect("string")
    .sslSshProfile("string")
    .status("string")
    .transparent("string")
    .users(ProxypolicyUserArgs.builder()
        .name("string")
        .build())
    .utmStatus("string")
    .uuid("string")
    .vdomparam("string")
    .videofilterProfile("string")
    .virtualPatchProfile("string")
    .voipProfile("string")
    .wafProfile("string")
    .webcache("string")
    .webcacheHttps("string")
    .webfilterProfile("string")
    .webproxyForwardServer("string")
    .webproxyProfile("string")
    .ztnaEmsTags(ProxypolicyZtnaEmsTagArgs.builder()
        .name("string")
        .build())
    .ztnaTagsMatchLogic("string")
    .build());

    proxypolicy_resource = fortios.firewall.Proxypolicy("proxypolicyResource",
    dstintfs=[fortios.firewall.ProxypolicyDstintfArgs(
        name="string",
    )],
    proxy="string",
    schedule="string",
    access_proxies=[fortios.firewall.ProxypolicyAccessProxyArgs(
        name="string",
    )],
    access_proxy6s=[fortios.firewall.ProxypolicyAccessProxy6Args(
        name="string",
    )],
    action="string",
    application_list="string",
    av_profile="string",
    block_notification="string",
    casb_profile="string",
    cifs_profile="string",
    comments="string",
    decrypted_traffic_mirror="string",
    detect_https_in_http_request="string",
    device_ownership="string",
    diameter_filter_profile="string",
    disclaimer="string",
    dlp_profile="string",
    dlp_sensor="string",
    dstaddr6s=[fortios.firewall.ProxypolicyDstaddr6Args(
        name="string",
    )],
    dstaddr_negate="string",
    dstaddrs=[fortios.firewall.ProxypolicyDstaddrArgs(
        name="string",
    )],
    dynamic_sort_subtable="string",
    emailfilter_profile="string",
    file_filter_profile="string",
    get_all_tables="string",
    global_label="string",
    groups=[fortios.firewall.ProxypolicyGroupArgs(
        name="string",
    )],
    http_tunnel_auth="string",
    icap_profile="string",
    internet_service="string",
    internet_service6="string",
    internet_service6_custom_groups=[fortios.firewall.ProxypolicyInternetService6CustomGroupArgs(
        name="string",
    )],
    internet_service6_customs=[fortios.firewall.ProxypolicyInternetService6CustomArgs(
        name="string",
    )],
    internet_service6_groups=[fortios.firewall.ProxypolicyInternetService6GroupArgs(
        name="string",
    )],
    internet_service6_names=[fortios.firewall.ProxypolicyInternetService6NameArgs(
        name="string",
    )],
    internet_service6_negate="string",
    internet_service_custom_groups=[fortios.firewall.ProxypolicyInternetServiceCustomGroupArgs(
        name="string",
    )],
    internet_service_customs=[fortios.firewall.ProxypolicyInternetServiceCustomArgs(
        name="string",
    )],
    internet_service_groups=[fortios.firewall.ProxypolicyInternetServiceGroupArgs(
        name="string",
    )],
    internet_service_ids=[fortios.firewall.ProxypolicyInternetServiceIdArgs(
        id=0,
    )],
    internet_service_names=[fortios.firewall.ProxypolicyInternetServiceNameArgs(
        name="string",
    )],
    internet_service_negate="string",
    ips_sensor="string",
    ips_voip_filter="string",
    label="string",
    logtraffic="string",
    logtraffic_start="string",
    name="string",
    policyid=0,
    poolnames=[fortios.firewall.ProxypolicyPoolnameArgs(
        name="string",
    )],
    profile_group="string",
    profile_protocol_options="string",
    profile_type="string",
    redirect_url="string",
    replacemsg_override_group="string",
    scan_botnet_connections="string",
    sctp_filter_profile="string",
    service_negate="string",
    services=[fortios.firewall.ProxypolicyServiceArgs(
        name="string",
    )],
    session_ttl=0,
    spamfilter_profile="string",
    srcaddr6s=[fortios.firewall.ProxypolicySrcaddr6Args(
        name="string",
    )],
    srcaddr_negate="string",
    srcaddrs=[fortios.firewall.ProxypolicySrcaddrArgs(
        name="string",
    )],
    srcintfs=[fortios.firewall.ProxypolicySrcintfArgs(
        name="string",
    )],
    ssh_filter_profile="string",
    ssh_policy_redirect="string",
    ssl_ssh_profile="string",
    status="string",
    transparent="string",
    users=[fortios.firewall.ProxypolicyUserArgs(
        name="string",
    )],
    utm_status="string",
    uuid="string",
    vdomparam="string",
    videofilter_profile="string",
    virtual_patch_profile="string",
    voip_profile="string",
    waf_profile="string",
    webcache="string",
    webcache_https="string",
    webfilter_profile="string",
    webproxy_forward_server="string",
    webproxy_profile="string",
    ztna_ems_tags=[fortios.firewall.ProxypolicyZtnaEmsTagArgs(
        name="string",
    )],
    ztna_tags_match_logic="string")

    const proxypolicyResource = new fortios.firewall.Proxypolicy("proxypolicyResource", {
    dstintfs: [{
        name: "string",
    }],
    proxy: "string",
    schedule: "string",
    accessProxies: [{
        name: "string",
    }],
    accessProxy6s: [{
        name: "string",
    }],
    action: "string",
    applicationList: "string",
    avProfile: "string",
    blockNotification: "string",
    casbProfile: "string",
    cifsProfile: "string",
    comments: "string",
    decryptedTrafficMirror: "string",
    detectHttpsInHttpRequest: "string",
    deviceOwnership: "string",
    diameterFilterProfile: "string",
    disclaimer: "string",
    dlpProfile: "string",
    dlpSensor: "string",
    dstaddr6s: [{
        name: "string",
    }],
    dstaddrNegate: "string",
    dstaddrs: [{
        name: "string",
    }],
    dynamicSortSubtable: "string",
    emailfilterProfile: "string",
    fileFilterProfile: "string",
    getAllTables: "string",
    globalLabel: "string",
    groups: [{
        name: "string",
    }],
    httpTunnelAuth: "string",
    icapProfile: "string",
    internetService: "string",
    internetService6: "string",
    internetService6CustomGroups: [{
        name: "string",
    }],
    internetService6Customs: [{
        name: "string",
    }],
    internetService6Groups: [{
        name: "string",
    }],
    internetService6Names: [{
        name: "string",
    }],
    internetService6Negate: "string",
    internetServiceCustomGroups: [{
        name: "string",
    }],
    internetServiceCustoms: [{
        name: "string",
    }],
    internetServiceGroups: [{
        name: "string",
    }],
    internetServiceIds: [{
        id: 0,
    }],
    internetServiceNames: [{
        name: "string",
    }],
    internetServiceNegate: "string",
    ipsSensor: "string",
    ipsVoipFilter: "string",
    label: "string",
    logtraffic: "string",
    logtrafficStart: "string",
    name: "string",
    policyid: 0,
    poolnames: [{
        name: "string",
    }],
    profileGroup: "string",
    profileProtocolOptions: "string",
    profileType: "string",
    redirectUrl: "string",
    replacemsgOverrideGroup: "string",
    scanBotnetConnections: "string",
    sctpFilterProfile: "string",
    serviceNegate: "string",
    services: [{
        name: "string",
    }],
    sessionTtl: 0,
    spamfilterProfile: "string",
    srcaddr6s: [{
        name: "string",
    }],
    srcaddrNegate: "string",
    srcaddrs: [{
        name: "string",
    }],
    srcintfs: [{
        name: "string",
    }],
    sshFilterProfile: "string",
    sshPolicyRedirect: "string",
    sslSshProfile: "string",
    status: "string",
    transparent: "string",
    users: [{
        name: "string",
    }],
    utmStatus: "string",
    uuid: "string",
    vdomparam: "string",
    videofilterProfile: "string",
    virtualPatchProfile: "string",
    voipProfile: "string",
    wafProfile: "string",
    webcache: "string",
    webcacheHttps: "string",
    webfilterProfile: "string",
    webproxyForwardServer: "string",
    webproxyProfile: "string",
    ztnaEmsTags: [{
        name: "string",
    }],
    ztnaTagsMatchLogic: "string",
});

    type: fortios:firewall:Proxypolicy
properties:
    accessProxies:
        - name: string
    accessProxy6s:
        - name: string
    action: string
    applicationList: string
    avProfile: string
    blockNotification: string
    casbProfile: string
    cifsProfile: string
    comments: string
    decryptedTrafficMirror: string
    detectHttpsInHttpRequest: string
    deviceOwnership: string
    diameterFilterProfile: string
    disclaimer: string
    dlpProfile: string
    dlpSensor: string
    dstaddr6s:
        - name: string
    dstaddrNegate: string
    dstaddrs:
        - name: string
    dstintfs:
        - name: string
    dynamicSortSubtable: string
    emailfilterProfile: string
    fileFilterProfile: string
    getAllTables: string
    globalLabel: string
    groups:
        - name: string
    httpTunnelAuth: string
    icapProfile: string
    internetService: string
    internetService6: string
    internetService6CustomGroups:
        - name: string
    internetService6Customs:
        - name: string
    internetService6Groups:
        - name: string
    internetService6Names:
        - name: string
    internetService6Negate: string
    internetServiceCustomGroups:
        - name: string
    internetServiceCustoms:
        - name: string
    internetServiceGroups:
        - name: string
    internetServiceIds:
        - id: 0
    internetServiceNames:
        - name: string
    internetServiceNegate: string
    ipsSensor: string
    ipsVoipFilter: string
    label: string
    logtraffic: string
    logtrafficStart: string
    name: string
    policyid: 0
    poolnames:
        - name: string
    profileGroup: string
    profileProtocolOptions: string
    profileType: string
    proxy: string
    redirectUrl: string
    replacemsgOverrideGroup: string
    scanBotnetConnections: string
    schedule: string
    sctpFilterProfile: string
    serviceNegate: string
    services:
        - name: string
    sessionTtl: 0
    spamfilterProfile: string
    srcaddr6s:
        - name: string
    srcaddrNegate: string
    srcaddrs:
        - name: string
    srcintfs:
        - name: string
    sshFilterProfile: string
    sshPolicyRedirect: string
    sslSshProfile: string
    status: string
    transparent: string
    users:
        - name: string
    utmStatus: string
    uuid: string
    vdomparam: string
    videofilterProfile: string
    virtualPatchProfile: string
    voipProfile: string
    wafProfile: string
    webcache: string
    webcacheHttps: string
    webfilterProfile: string
    webproxyForwardServer: string
    webproxyProfile: string
    ztnaEmsTags:
        - name: string
    ztnaTagsMatchLogic: string

    Proxypolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Proxypolicy resource accepts the following input properties:

    Dstintfs List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyDstintf>
    Destination interface names. The structure of dstintf block is documented below.
    Proxy string
    Type of explicit proxy.
    Schedule string
    Name of schedule object.
    AccessProxies List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyAccessProxy>
    IPv4 access proxy. The structure of access_proxy block is documented below.
    AccessProxy6s List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyAccessProxy6>
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    Action string
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    ApplicationList string
    Name of an existing Application list.
    AvProfile string
    Name of an existing Antivirus profile.
    BlockNotification string
    Enable/disable block notification. Valid values: enable, disable.
    CasbProfile string
    Name of an existing CASB profile.
    CifsProfile string
    Name of an existing CIFS profile.
    Comments string
    Optional comments.
    DecryptedTrafficMirror string
    Decrypted traffic mirror.
    DetectHttpsInHttpRequest string
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    DeviceOwnership string
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    DiameterFilterProfile string
    Name of an existing Diameter filter profile.
    Disclaimer string
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    DlpProfile string
    Name of an existing DLP profile.
    DlpSensor string
    Name of an existing DLP sensor.
    Dstaddr6s List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyDstaddr6>
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    DstaddrNegate string
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    Dstaddrs List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyDstaddr>
    Destination address objects. The structure of dstaddr block is documented below.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    EmailfilterProfile string
    Name of an existing email filter profile.
    FileFilterProfile string
    Name of an existing file-filter profile.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    GlobalLabel string
    Global web-based manager visible label.
    Groups List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyGroup>
    Names of group objects. The structure of groups block is documented below.
    HttpTunnelAuth string
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    IcapProfile string
    Name of an existing ICAP profile.
    InternetService string
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    InternetService6 string
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    InternetService6CustomGroups List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetService6CustomGroup>
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    InternetService6Customs List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetService6Custom>
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    InternetService6Groups List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetService6Group>
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    InternetService6Names List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetService6Name>
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    InternetService6Negate string
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    InternetServiceCustomGroups List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetServiceCustomGroup>
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    InternetServiceCustoms List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetServiceCustom>
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    InternetServiceGroups List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetServiceGroup>
    Internet Service group name. The structure of internet_service_group block is documented below.
    InternetServiceIds List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetServiceId>
    Internet Service ID. The structure of internet_service_id block is documented below.
    InternetServiceNames List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetServiceName>
    Internet Service name. The structure of internet_service_name block is documented below.
    InternetServiceNegate string
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    IpsSensor string
    Name of an existing IPS sensor.
    IpsVoipFilter string
    Name of an existing VoIP (ips) profile.
    Label string
    VDOM-specific GUI visible label.
    Logtraffic string
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    LogtrafficStart string
    Enable/disable policy log traffic start. Valid values: enable, disable.
    Name string
    Policy name.
    Policyid int
    Policy ID.
    Poolnames List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyPoolname>
    Name of IP pool object. The structure of poolname block is documented below.
    ProfileGroup string
    Name of profile group.
    ProfileProtocolOptions string
    Name of an existing Protocol options profile.
    ProfileType string
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    RedirectUrl string
    Redirect URL for further explicit web proxy processing.
    ReplacemsgOverrideGroup string
    Authentication replacement message override group.
    ScanBotnetConnections string
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    SctpFilterProfile string
    Name of an existing SCTP filter profile.
    ServiceNegate string
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    Services List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyService>
    Name of service objects. The structure of service block is documented below.
    SessionTtl int
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    SpamfilterProfile string
    Name of an existing Spam filter profile.
    Srcaddr6s List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicySrcaddr6>
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    SrcaddrNegate string
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    Srcaddrs List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicySrcaddr>
    Source address objects. The structure of srcaddr block is documented below.
    Srcintfs List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicySrcintf>
    Source interface names. The structure of srcintf block is documented below.
    SshFilterProfile string
    Name of an existing SSH filter profile.
    SshPolicyRedirect string
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    SslSshProfile string
    Name of an existing SSL SSH profile.
    Status string
    Enable/disable the active status of the policy. Valid values: enable, disable.
    Transparent string
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    Users List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyUser>
    Names of user objects. The structure of users block is documented below.
    UtmStatus string
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    VideofilterProfile string
    Name of an existing VideoFilter profile.
    VirtualPatchProfile string
    Name of an existing virtual-patch profile.
    VoipProfile string
    Name of an existing VoIP profile.
    WafProfile string
    Name of an existing Web application firewall profile.
    Webcache string
    Enable/disable web caching. Valid values: enable, disable.
    WebcacheHttps string
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    WebfilterProfile string
    Name of an existing Web filter profile.
    WebproxyForwardServer string
    Web proxy forward server name.
    WebproxyProfile string
    Name of web proxy profile.
    ZtnaEmsTags List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyZtnaEmsTag>
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ZtnaTagsMatchLogic string
    ZTNA tag matching logic. Valid values: or, and.
    Dstintfs []ProxypolicyDstintfArgs
    Destination interface names. The structure of dstintf block is documented below.
    Proxy string
    Type of explicit proxy.
    Schedule string
    Name of schedule object.
    AccessProxies []ProxypolicyAccessProxyArgs
    IPv4 access proxy. The structure of access_proxy block is documented below.
    AccessProxy6s []ProxypolicyAccessProxy6Args
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    Action string
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    ApplicationList string
    Name of an existing Application list.
    AvProfile string
    Name of an existing Antivirus profile.
    BlockNotification string
    Enable/disable block notification. Valid values: enable, disable.
    CasbProfile string
    Name of an existing CASB profile.
    CifsProfile string
    Name of an existing CIFS profile.
    Comments string
    Optional comments.
    DecryptedTrafficMirror string
    Decrypted traffic mirror.
    DetectHttpsInHttpRequest string
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    DeviceOwnership string
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    DiameterFilterProfile string
    Name of an existing Diameter filter profile.
    Disclaimer string
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    DlpProfile string
    Name of an existing DLP profile.
    DlpSensor string
    Name of an existing DLP sensor.
    Dstaddr6s []ProxypolicyDstaddr6Args
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    DstaddrNegate string
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    Dstaddrs []ProxypolicyDstaddrArgs
    Destination address objects. The structure of dstaddr block is documented below.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    EmailfilterProfile string
    Name of an existing email filter profile.
    FileFilterProfile string
    Name of an existing file-filter profile.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    GlobalLabel string
    Global web-based manager visible label.
    Groups []ProxypolicyGroupArgs
    Names of group objects. The structure of groups block is documented below.
    HttpTunnelAuth string
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    IcapProfile string
    Name of an existing ICAP profile.
    InternetService string
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    InternetService6 string
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    InternetService6CustomGroups []ProxypolicyInternetService6CustomGroupArgs
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    InternetService6Customs []ProxypolicyInternetService6CustomArgs
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    InternetService6Groups []ProxypolicyInternetService6GroupArgs
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    InternetService6Names []ProxypolicyInternetService6NameArgs
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    InternetService6Negate string
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    InternetServiceCustomGroups []ProxypolicyInternetServiceCustomGroupArgs
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    InternetServiceCustoms []ProxypolicyInternetServiceCustomArgs
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    InternetServiceGroups []ProxypolicyInternetServiceGroupArgs
    Internet Service group name. The structure of internet_service_group block is documented below.
    InternetServiceIds []ProxypolicyInternetServiceIdArgs
    Internet Service ID. The structure of internet_service_id block is documented below.
    InternetServiceNames []ProxypolicyInternetServiceNameArgs
    Internet Service name. The structure of internet_service_name block is documented below.
    InternetServiceNegate string
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    IpsSensor string
    Name of an existing IPS sensor.
    IpsVoipFilter string
    Name of an existing VoIP (ips) profile.
    Label string
    VDOM-specific GUI visible label.
    Logtraffic string
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    LogtrafficStart string
    Enable/disable policy log traffic start. Valid values: enable, disable.
    Name string
    Policy name.
    Policyid int
    Policy ID.
    Poolnames []ProxypolicyPoolnameArgs
    Name of IP pool object. The structure of poolname block is documented below.
    ProfileGroup string
    Name of profile group.
    ProfileProtocolOptions string
    Name of an existing Protocol options profile.
    ProfileType string
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    RedirectUrl string
    Redirect URL for further explicit web proxy processing.
    ReplacemsgOverrideGroup string
    Authentication replacement message override group.
    ScanBotnetConnections string
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    SctpFilterProfile string
    Name of an existing SCTP filter profile.
    ServiceNegate string
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    Services []ProxypolicyServiceArgs
    Name of service objects. The structure of service block is documented below.
    SessionTtl int
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    SpamfilterProfile string
    Name of an existing Spam filter profile.
    Srcaddr6s []ProxypolicySrcaddr6Args
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    SrcaddrNegate string
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    Srcaddrs []ProxypolicySrcaddrArgs
    Source address objects. The structure of srcaddr block is documented below.
    Srcintfs []ProxypolicySrcintfArgs
    Source interface names. The structure of srcintf block is documented below.
    SshFilterProfile string
    Name of an existing SSH filter profile.
    SshPolicyRedirect string
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    SslSshProfile string
    Name of an existing SSL SSH profile.
    Status string
    Enable/disable the active status of the policy. Valid values: enable, disable.
    Transparent string
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    Users []ProxypolicyUserArgs
    Names of user objects. The structure of users block is documented below.
    UtmStatus string
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    VideofilterProfile string
    Name of an existing VideoFilter profile.
    VirtualPatchProfile string
    Name of an existing virtual-patch profile.
    VoipProfile string
    Name of an existing VoIP profile.
    WafProfile string
    Name of an existing Web application firewall profile.
    Webcache string
    Enable/disable web caching. Valid values: enable, disable.
    WebcacheHttps string
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    WebfilterProfile string
    Name of an existing Web filter profile.
    WebproxyForwardServer string
    Web proxy forward server name.
    WebproxyProfile string
    Name of web proxy profile.
    ZtnaEmsTags []ProxypolicyZtnaEmsTagArgs
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ZtnaTagsMatchLogic string
    ZTNA tag matching logic. Valid values: or, and.
    dstintfs List<ProxypolicyDstintf>
    Destination interface names. The structure of dstintf block is documented below.
    proxy String
    Type of explicit proxy.
    schedule String
    Name of schedule object.
    accessProxies List<ProxypolicyAccessProxy>
    IPv4 access proxy. The structure of access_proxy block is documented below.
    accessProxy6s List<ProxypolicyAccessProxy6>
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    action String
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    applicationList String
    Name of an existing Application list.
    avProfile String
    Name of an existing Antivirus profile.
    blockNotification String
    Enable/disable block notification. Valid values: enable, disable.
    casbProfile String
    Name of an existing CASB profile.
    cifsProfile String
    Name of an existing CIFS profile.
    comments String
    Optional comments.
    decryptedTrafficMirror String
    Decrypted traffic mirror.
    detectHttpsInHttpRequest String
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    deviceOwnership String
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    diameterFilterProfile String
    Name of an existing Diameter filter profile.
    disclaimer String
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    dlpProfile String
    Name of an existing DLP profile.
    dlpSensor String
    Name of an existing DLP sensor.
    dstaddr6s List<ProxypolicyDstaddr6>
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    dstaddrNegate String
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    dstaddrs List<ProxypolicyDstaddr>
    Destination address objects. The structure of dstaddr block is documented below.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    emailfilterProfile String
    Name of an existing email filter profile.
    fileFilterProfile String
    Name of an existing file-filter profile.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    globalLabel String
    Global web-based manager visible label.
    groups List<ProxypolicyGroup>
    Names of group objects. The structure of groups block is documented below.
    httpTunnelAuth String
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    icapProfile String
    Name of an existing ICAP profile.
    internetService String
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    internetService6 String
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    internetService6CustomGroups List<ProxypolicyInternetService6CustomGroup>
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    internetService6Customs List<ProxypolicyInternetService6Custom>
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    internetService6Groups List<ProxypolicyInternetService6Group>
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    internetService6Names List<ProxypolicyInternetService6Name>
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    internetService6Negate String
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    internetServiceCustomGroups List<ProxypolicyInternetServiceCustomGroup>
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internetServiceCustoms List<ProxypolicyInternetServiceCustom>
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internetServiceGroups List<ProxypolicyInternetServiceGroup>
    Internet Service group name. The structure of internet_service_group block is documented below.
    internetServiceIds List<ProxypolicyInternetServiceId>
    Internet Service ID. The structure of internet_service_id block is documented below.
    internetServiceNames List<ProxypolicyInternetServiceName>
    Internet Service name. The structure of internet_service_name block is documented below.
    internetServiceNegate String
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    ipsSensor String
    Name of an existing IPS sensor.
    ipsVoipFilter String
    Name of an existing VoIP (ips) profile.
    label String
    VDOM-specific GUI visible label.
    logtraffic String
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    logtrafficStart String
    Enable/disable policy log traffic start. Valid values: enable, disable.
    name String
    Policy name.
    policyid Integer
    Policy ID.
    poolnames List<ProxypolicyPoolname>
    Name of IP pool object. The structure of poolname block is documented below.
    profileGroup String
    Name of profile group.
    profileProtocolOptions String
    Name of an existing Protocol options profile.
    profileType String
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    redirectUrl String
    Redirect URL for further explicit web proxy processing.
    replacemsgOverrideGroup String
    Authentication replacement message override group.
    scanBotnetConnections String
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    sctpFilterProfile String
    Name of an existing SCTP filter profile.
    serviceNegate String
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    services List<ProxypolicyService>
    Name of service objects. The structure of service block is documented below.
    sessionTtl Integer
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilterProfile String
    Name of an existing Spam filter profile.
    srcaddr6s List<ProxypolicySrcaddr6>
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    srcaddrNegate String
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    srcaddrs List<ProxypolicySrcaddr>
    Source address objects. The structure of srcaddr block is documented below.
    srcintfs List<ProxypolicySrcintf>
    Source interface names. The structure of srcintf block is documented below.
    sshFilterProfile String
    Name of an existing SSH filter profile.
    sshPolicyRedirect String
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    sslSshProfile String
    Name of an existing SSL SSH profile.
    status String
    Enable/disable the active status of the policy. Valid values: enable, disable.
    transparent String
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    users List<ProxypolicyUser>
    Names of user objects. The structure of users block is documented below.
    utmStatus String
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    videofilterProfile String
    Name of an existing VideoFilter profile.
    virtualPatchProfile String
    Name of an existing virtual-patch profile.
    voipProfile String
    Name of an existing VoIP profile.
    wafProfile String
    Name of an existing Web application firewall profile.
    webcache String
    Enable/disable web caching. Valid values: enable, disable.
    webcacheHttps String
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    webfilterProfile String
    Name of an existing Web filter profile.
    webproxyForwardServer String
    Web proxy forward server name.
    webproxyProfile String
    Name of web proxy profile.
    ztnaEmsTags List<ProxypolicyZtnaEmsTag>
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ztnaTagsMatchLogic String
    ZTNA tag matching logic. Valid values: or, and.
    dstintfs ProxypolicyDstintf[]
    Destination interface names. The structure of dstintf block is documented below.
    proxy string
    Type of explicit proxy.
    schedule string
    Name of schedule object.
    accessProxies ProxypolicyAccessProxy[]
    IPv4 access proxy. The structure of access_proxy block is documented below.
    accessProxy6s ProxypolicyAccessProxy6[]
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    action string
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    applicationList string
    Name of an existing Application list.
    avProfile string
    Name of an existing Antivirus profile.
    blockNotification string
    Enable/disable block notification. Valid values: enable, disable.
    casbProfile string
    Name of an existing CASB profile.
    cifsProfile string
    Name of an existing CIFS profile.
    comments string
    Optional comments.
    decryptedTrafficMirror string
    Decrypted traffic mirror.
    detectHttpsInHttpRequest string
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    deviceOwnership string
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    diameterFilterProfile string
    Name of an existing Diameter filter profile.
    disclaimer string
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    dlpProfile string
    Name of an existing DLP profile.
    dlpSensor string
    Name of an existing DLP sensor.
    dstaddr6s ProxypolicyDstaddr6[]
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    dstaddrNegate string
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    dstaddrs ProxypolicyDstaddr[]
    Destination address objects. The structure of dstaddr block is documented below.
    dynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    emailfilterProfile string
    Name of an existing email filter profile.
    fileFilterProfile string
    Name of an existing file-filter profile.
    getAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    globalLabel string
    Global web-based manager visible label.
    groups ProxypolicyGroup[]
    Names of group objects. The structure of groups block is documented below.
    httpTunnelAuth string
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    icapProfile string
    Name of an existing ICAP profile.
    internetService string
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    internetService6 string
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    internetService6CustomGroups ProxypolicyInternetService6CustomGroup[]
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    internetService6Customs ProxypolicyInternetService6Custom[]
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    internetService6Groups ProxypolicyInternetService6Group[]
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    internetService6Names ProxypolicyInternetService6Name[]
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    internetService6Negate string
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    internetServiceCustomGroups ProxypolicyInternetServiceCustomGroup[]
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internetServiceCustoms ProxypolicyInternetServiceCustom[]
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internetServiceGroups ProxypolicyInternetServiceGroup[]
    Internet Service group name. The structure of internet_service_group block is documented below.
    internetServiceIds ProxypolicyInternetServiceId[]
    Internet Service ID. The structure of internet_service_id block is documented below.
    internetServiceNames ProxypolicyInternetServiceName[]
    Internet Service name. The structure of internet_service_name block is documented below.
    internetServiceNegate string
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    ipsSensor string
    Name of an existing IPS sensor.
    ipsVoipFilter string
    Name of an existing VoIP (ips) profile.
    label string
    VDOM-specific GUI visible label.
    logtraffic string
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    logtrafficStart string
    Enable/disable policy log traffic start. Valid values: enable, disable.
    name string
    Policy name.
    policyid number
    Policy ID.
    poolnames ProxypolicyPoolname[]
    Name of IP pool object. The structure of poolname block is documented below.
    profileGroup string
    Name of profile group.
    profileProtocolOptions string
    Name of an existing Protocol options profile.
    profileType string
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    redirectUrl string
    Redirect URL for further explicit web proxy processing.
    replacemsgOverrideGroup string
    Authentication replacement message override group.
    scanBotnetConnections string
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    sctpFilterProfile string
    Name of an existing SCTP filter profile.
    serviceNegate string
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    services ProxypolicyService[]
    Name of service objects. The structure of service block is documented below.
    sessionTtl number
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilterProfile string
    Name of an existing Spam filter profile.
    srcaddr6s ProxypolicySrcaddr6[]
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    srcaddrNegate string
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    srcaddrs ProxypolicySrcaddr[]
    Source address objects. The structure of srcaddr block is documented below.
    srcintfs ProxypolicySrcintf[]
    Source interface names. The structure of srcintf block is documented below.
    sshFilterProfile string
    Name of an existing SSH filter profile.
    sshPolicyRedirect string
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    sslSshProfile string
    Name of an existing SSL SSH profile.
    status string
    Enable/disable the active status of the policy. Valid values: enable, disable.
    transparent string
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    users ProxypolicyUser[]
    Names of user objects. The structure of users block is documented below.
    utmStatus string
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    videofilterProfile string
    Name of an existing VideoFilter profile.
    virtualPatchProfile string
    Name of an existing virtual-patch profile.
    voipProfile string
    Name of an existing VoIP profile.
    wafProfile string
    Name of an existing Web application firewall profile.
    webcache string
    Enable/disable web caching. Valid values: enable, disable.
    webcacheHttps string
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    webfilterProfile string
    Name of an existing Web filter profile.
    webproxyForwardServer string
    Web proxy forward server name.
    webproxyProfile string
    Name of web proxy profile.
    ztnaEmsTags ProxypolicyZtnaEmsTag[]
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ztnaTagsMatchLogic string
    ZTNA tag matching logic. Valid values: or, and.
    dstintfs Sequence[ProxypolicyDstintfArgs]
    Destination interface names. The structure of dstintf block is documented below.
    proxy str
    Type of explicit proxy.
    schedule str
    Name of schedule object.
    access_proxies Sequence[ProxypolicyAccessProxyArgs]
    IPv4 access proxy. The structure of access_proxy block is documented below.
    access_proxy6s Sequence[ProxypolicyAccessProxy6Args]
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    action str
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    application_list str
    Name of an existing Application list.
    av_profile str
    Name of an existing Antivirus profile.
    block_notification str
    Enable/disable block notification. Valid values: enable, disable.
    casb_profile str
    Name of an existing CASB profile.
    cifs_profile str
    Name of an existing CIFS profile.
    comments str
    Optional comments.
    decrypted_traffic_mirror str
    Decrypted traffic mirror.
    detect_https_in_http_request str
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    device_ownership str
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    diameter_filter_profile str
    Name of an existing Diameter filter profile.
    disclaimer str
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    dlp_profile str
    Name of an existing DLP profile.
    dlp_sensor str
    Name of an existing DLP sensor.
    dstaddr6s Sequence[ProxypolicyDstaddr6Args]
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    dstaddr_negate str
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    dstaddrs Sequence[ProxypolicyDstaddrArgs]
    Destination address objects. The structure of dstaddr block is documented below.
    dynamic_sort_subtable str
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    emailfilter_profile str
    Name of an existing email filter profile.
    file_filter_profile str
    Name of an existing file-filter profile.
    get_all_tables str
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    global_label str
    Global web-based manager visible label.
    groups Sequence[ProxypolicyGroupArgs]
    Names of group objects. The structure of groups block is documented below.
    http_tunnel_auth str
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    icap_profile str
    Name of an existing ICAP profile.
    internet_service str
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    internet_service6 str
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    internet_service6_custom_groups Sequence[ProxypolicyInternetService6CustomGroupArgs]
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    internet_service6_customs Sequence[ProxypolicyInternetService6CustomArgs]
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    internet_service6_groups Sequence[ProxypolicyInternetService6GroupArgs]
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    internet_service6_names Sequence[ProxypolicyInternetService6NameArgs]
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    internet_service6_negate str
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    internet_service_custom_groups Sequence[ProxypolicyInternetServiceCustomGroupArgs]
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internet_service_customs Sequence[ProxypolicyInternetServiceCustomArgs]
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internet_service_groups Sequence[ProxypolicyInternetServiceGroupArgs]
    Internet Service group name. The structure of internet_service_group block is documented below.
    internet_service_ids Sequence[ProxypolicyInternetServiceIdArgs]
    Internet Service ID. The structure of internet_service_id block is documented below.
    internet_service_names Sequence[ProxypolicyInternetServiceNameArgs]
    Internet Service name. The structure of internet_service_name block is documented below.
    internet_service_negate str
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    ips_sensor str
    Name of an existing IPS sensor.
    ips_voip_filter str
    Name of an existing VoIP (ips) profile.
    label str
    VDOM-specific GUI visible label.
    logtraffic str
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    logtraffic_start str
    Enable/disable policy log traffic start. Valid values: enable, disable.
    name str
    Policy name.
    policyid int
    Policy ID.
    poolnames Sequence[ProxypolicyPoolnameArgs]
    Name of IP pool object. The structure of poolname block is documented below.
    profile_group str
    Name of profile group.
    profile_protocol_options str
    Name of an existing Protocol options profile.
    profile_type str
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    redirect_url str
    Redirect URL for further explicit web proxy processing.
    replacemsg_override_group str
    Authentication replacement message override group.
    scan_botnet_connections str
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    sctp_filter_profile str
    Name of an existing SCTP filter profile.
    service_negate str
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    services Sequence[ProxypolicyServiceArgs]
    Name of service objects. The structure of service block is documented below.
    session_ttl int
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilter_profile str
    Name of an existing Spam filter profile.
    srcaddr6s Sequence[ProxypolicySrcaddr6Args]
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    srcaddr_negate str
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    srcaddrs Sequence[ProxypolicySrcaddrArgs]
    Source address objects. The structure of srcaddr block is documented below.
    srcintfs Sequence[ProxypolicySrcintfArgs]
    Source interface names. The structure of srcintf block is documented below.
    ssh_filter_profile str
    Name of an existing SSH filter profile.
    ssh_policy_redirect str
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    ssl_ssh_profile str
    Name of an existing SSL SSH profile.
    status str
    Enable/disable the active status of the policy. Valid values: enable, disable.
    transparent str
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    users Sequence[ProxypolicyUserArgs]
    Names of user objects. The structure of users block is documented below.
    utm_status str
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    uuid str
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    vdomparam str
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    videofilter_profile str
    Name of an existing VideoFilter profile.
    virtual_patch_profile str
    Name of an existing virtual-patch profile.
    voip_profile str
    Name of an existing VoIP profile.
    waf_profile str
    Name of an existing Web application firewall profile.
    webcache str
    Enable/disable web caching. Valid values: enable, disable.
    webcache_https str
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    webfilter_profile str
    Name of an existing Web filter profile.
    webproxy_forward_server str
    Web proxy forward server name.
    webproxy_profile str
    Name of web proxy profile.
    ztna_ems_tags Sequence[ProxypolicyZtnaEmsTagArgs]
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ztna_tags_match_logic str
    ZTNA tag matching logic. Valid values: or, and.
    dstintfs List<Property Map>
    Destination interface names. The structure of dstintf block is documented below.
    proxy String
    Type of explicit proxy.
    schedule String
    Name of schedule object.
    accessProxies List<Property Map>
    IPv4 access proxy. The structure of access_proxy block is documented below.
    accessProxy6s List<Property Map>
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    action String
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    applicationList String
    Name of an existing Application list.
    avProfile String
    Name of an existing Antivirus profile.
    blockNotification String
    Enable/disable block notification. Valid values: enable, disable.
    casbProfile String
    Name of an existing CASB profile.
    cifsProfile String
    Name of an existing CIFS profile.
    comments String
    Optional comments.
    decryptedTrafficMirror String
    Decrypted traffic mirror.
    detectHttpsInHttpRequest String
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    deviceOwnership String
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    diameterFilterProfile String
    Name of an existing Diameter filter profile.
    disclaimer String
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    dlpProfile String
    Name of an existing DLP profile.
    dlpSensor String
    Name of an existing DLP sensor.
    dstaddr6s List<Property Map>
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    dstaddrNegate String
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    dstaddrs List<Property Map>
    Destination address objects. The structure of dstaddr block is documented below.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    emailfilterProfile String
    Name of an existing email filter profile.
    fileFilterProfile String
    Name of an existing file-filter profile.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    globalLabel String
    Global web-based manager visible label.
    groups List<Property Map>
    Names of group objects. The structure of groups block is documented below.
    httpTunnelAuth String
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    icapProfile String
    Name of an existing ICAP profile.
    internetService String
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    internetService6 String
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    internetService6CustomGroups List<Property Map>
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    internetService6Customs List<Property Map>
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    internetService6Groups List<Property Map>
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    internetService6Names List<Property Map>
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    internetService6Negate String
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    internetServiceCustomGroups List<Property Map>
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internetServiceCustoms List<Property Map>
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internetServiceGroups List<Property Map>
    Internet Service group name. The structure of internet_service_group block is documented below.
    internetServiceIds List<Property Map>
    Internet Service ID. The structure of internet_service_id block is documented below.
    internetServiceNames List<Property Map>
    Internet Service name. The structure of internet_service_name block is documented below.
    internetServiceNegate String
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    ipsSensor String
    Name of an existing IPS sensor.
    ipsVoipFilter String
    Name of an existing VoIP (ips) profile.
    label String
    VDOM-specific GUI visible label.
    logtraffic String
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    logtrafficStart String
    Enable/disable policy log traffic start. Valid values: enable, disable.
    name String
    Policy name.
    policyid Number
    Policy ID.
    poolnames List<Property Map>
    Name of IP pool object. The structure of poolname block is documented below.
    profileGroup String
    Name of profile group.
    profileProtocolOptions String
    Name of an existing Protocol options profile.
    profileType String
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    redirectUrl String
    Redirect URL for further explicit web proxy processing.
    replacemsgOverrideGroup String
    Authentication replacement message override group.
    scanBotnetConnections String
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    sctpFilterProfile String
    Name of an existing SCTP filter profile.
    serviceNegate String
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    services List<Property Map>
    Name of service objects. The structure of service block is documented below.
    sessionTtl Number
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilterProfile String
    Name of an existing Spam filter profile.
    srcaddr6s List<Property Map>
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    srcaddrNegate String
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    srcaddrs List<Property Map>
    Source address objects. The structure of srcaddr block is documented below.
    srcintfs List<Property Map>
    Source interface names. The structure of srcintf block is documented below.
    sshFilterProfile String
    Name of an existing SSH filter profile.
    sshPolicyRedirect String
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    sslSshProfile String
    Name of an existing SSL SSH profile.
    status String
    Enable/disable the active status of the policy. Valid values: enable, disable.
    transparent String
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    users List<Property Map>
    Names of user objects. The structure of users block is documented below.
    utmStatus String
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    videofilterProfile String
    Name of an existing VideoFilter profile.
    virtualPatchProfile String
    Name of an existing virtual-patch profile.
    voipProfile String
    Name of an existing VoIP profile.
    wafProfile String
    Name of an existing Web application firewall profile.
    webcache String
    Enable/disable web caching. Valid values: enable, disable.
    webcacheHttps String
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    webfilterProfile String
    Name of an existing Web filter profile.
    webproxyForwardServer String
    Web proxy forward server name.
    webproxyProfile String
    Name of web proxy profile.
    ztnaEmsTags List<Property Map>
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ztnaTagsMatchLogic String
    ZTNA tag matching logic. Valid values: or, and.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Proxypolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Proxypolicy Resource

    Get an existing Proxypolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ProxypolicyState, opts?: CustomResourceOptions): Proxypolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        access_proxies: Optional[Sequence[ProxypolicyAccessProxyArgs]] = None,
        access_proxy6s: Optional[Sequence[ProxypolicyAccessProxy6Args]] = None,
        action: Optional[str] = None,
        application_list: Optional[str] = None,
        av_profile: Optional[str] = None,
        block_notification: Optional[str] = None,
        casb_profile: Optional[str] = None,
        cifs_profile: Optional[str] = None,
        comments: Optional[str] = None,
        decrypted_traffic_mirror: Optional[str] = None,
        detect_https_in_http_request: Optional[str] = None,
        device_ownership: Optional[str] = None,
        diameter_filter_profile: Optional[str] = None,
        disclaimer: Optional[str] = None,
        dlp_profile: Optional[str] = None,
        dlp_sensor: Optional[str] = None,
        dstaddr6s: Optional[Sequence[ProxypolicyDstaddr6Args]] = None,
        dstaddr_negate: Optional[str] = None,
        dstaddrs: Optional[Sequence[ProxypolicyDstaddrArgs]] = None,
        dstintfs: Optional[Sequence[ProxypolicyDstintfArgs]] = None,
        dynamic_sort_subtable: Optional[str] = None,
        emailfilter_profile: Optional[str] = None,
        file_filter_profile: Optional[str] = None,
        get_all_tables: Optional[str] = None,
        global_label: Optional[str] = None,
        groups: Optional[Sequence[ProxypolicyGroupArgs]] = None,
        http_tunnel_auth: Optional[str] = None,
        icap_profile: Optional[str] = None,
        internet_service: Optional[str] = None,
        internet_service6: Optional[str] = None,
        internet_service6_custom_groups: Optional[Sequence[ProxypolicyInternetService6CustomGroupArgs]] = None,
        internet_service6_customs: Optional[Sequence[ProxypolicyInternetService6CustomArgs]] = None,
        internet_service6_groups: Optional[Sequence[ProxypolicyInternetService6GroupArgs]] = None,
        internet_service6_names: Optional[Sequence[ProxypolicyInternetService6NameArgs]] = None,
        internet_service6_negate: Optional[str] = None,
        internet_service_custom_groups: Optional[Sequence[ProxypolicyInternetServiceCustomGroupArgs]] = None,
        internet_service_customs: Optional[Sequence[ProxypolicyInternetServiceCustomArgs]] = None,
        internet_service_groups: Optional[Sequence[ProxypolicyInternetServiceGroupArgs]] = None,
        internet_service_ids: Optional[Sequence[ProxypolicyInternetServiceIdArgs]] = None,
        internet_service_names: Optional[Sequence[ProxypolicyInternetServiceNameArgs]] = None,
        internet_service_negate: Optional[str] = None,
        ips_sensor: Optional[str] = None,
        ips_voip_filter: Optional[str] = None,
        label: Optional[str] = None,
        logtraffic: Optional[str] = None,
        logtraffic_start: Optional[str] = None,
        name: Optional[str] = None,
        policyid: Optional[int] = None,
        poolnames: Optional[Sequence[ProxypolicyPoolnameArgs]] = None,
        profile_group: Optional[str] = None,
        profile_protocol_options: Optional[str] = None,
        profile_type: Optional[str] = None,
        proxy: Optional[str] = None,
        redirect_url: Optional[str] = None,
        replacemsg_override_group: Optional[str] = None,
        scan_botnet_connections: Optional[str] = None,
        schedule: Optional[str] = None,
        sctp_filter_profile: Optional[str] = None,
        service_negate: Optional[str] = None,
        services: Optional[Sequence[ProxypolicyServiceArgs]] = None,
        session_ttl: Optional[int] = None,
        spamfilter_profile: Optional[str] = None,
        srcaddr6s: Optional[Sequence[ProxypolicySrcaddr6Args]] = None,
        srcaddr_negate: Optional[str] = None,
        srcaddrs: Optional[Sequence[ProxypolicySrcaddrArgs]] = None,
        srcintfs: Optional[Sequence[ProxypolicySrcintfArgs]] = None,
        ssh_filter_profile: Optional[str] = None,
        ssh_policy_redirect: Optional[str] = None,
        ssl_ssh_profile: Optional[str] = None,
        status: Optional[str] = None,
        transparent: Optional[str] = None,
        users: Optional[Sequence[ProxypolicyUserArgs]] = None,
        utm_status: Optional[str] = None,
        uuid: Optional[str] = None,
        vdomparam: Optional[str] = None,
        videofilter_profile: Optional[str] = None,
        virtual_patch_profile: Optional[str] = None,
        voip_profile: Optional[str] = None,
        waf_profile: Optional[str] = None,
        webcache: Optional[str] = None,
        webcache_https: Optional[str] = None,
        webfilter_profile: Optional[str] = None,
        webproxy_forward_server: Optional[str] = None,
        webproxy_profile: Optional[str] = None,
        ztna_ems_tags: Optional[Sequence[ProxypolicyZtnaEmsTagArgs]] = None,
        ztna_tags_match_logic: Optional[str] = None) -> Proxypolicy
    func GetProxypolicy(ctx *Context, name string, id IDInput, state *ProxypolicyState, opts ...ResourceOption) (*Proxypolicy, error)
    public static Proxypolicy Get(string name, Input<string> id, ProxypolicyState? state, CustomResourceOptions? opts = null)
    public static Proxypolicy get(String name, Output<String> id, ProxypolicyState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccessProxies List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyAccessProxy>
    IPv4 access proxy. The structure of access_proxy block is documented below.
    AccessProxy6s List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyAccessProxy6>
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    Action string
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    ApplicationList string
    Name of an existing Application list.
    AvProfile string
    Name of an existing Antivirus profile.
    BlockNotification string
    Enable/disable block notification. Valid values: enable, disable.
    CasbProfile string
    Name of an existing CASB profile.
    CifsProfile string
    Name of an existing CIFS profile.
    Comments string
    Optional comments.
    DecryptedTrafficMirror string
    Decrypted traffic mirror.
    DetectHttpsInHttpRequest string
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    DeviceOwnership string
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    DiameterFilterProfile string
    Name of an existing Diameter filter profile.
    Disclaimer string
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    DlpProfile string
    Name of an existing DLP profile.
    DlpSensor string
    Name of an existing DLP sensor.
    Dstaddr6s List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyDstaddr6>
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    DstaddrNegate string
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    Dstaddrs List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyDstaddr>
    Destination address objects. The structure of dstaddr block is documented below.
    Dstintfs List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyDstintf>
    Destination interface names. The structure of dstintf block is documented below.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    EmailfilterProfile string
    Name of an existing email filter profile.
    FileFilterProfile string
    Name of an existing file-filter profile.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    GlobalLabel string
    Global web-based manager visible label.
    Groups List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyGroup>
    Names of group objects. The structure of groups block is documented below.
    HttpTunnelAuth string
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    IcapProfile string
    Name of an existing ICAP profile.
    InternetService string
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    InternetService6 string
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    InternetService6CustomGroups List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetService6CustomGroup>
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    InternetService6Customs List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetService6Custom>
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    InternetService6Groups List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetService6Group>
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    InternetService6Names List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetService6Name>
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    InternetService6Negate string
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    InternetServiceCustomGroups List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetServiceCustomGroup>
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    InternetServiceCustoms List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetServiceCustom>
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    InternetServiceGroups List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetServiceGroup>
    Internet Service group name. The structure of internet_service_group block is documented below.
    InternetServiceIds List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetServiceId>
    Internet Service ID. The structure of internet_service_id block is documented below.
    InternetServiceNames List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyInternetServiceName>
    Internet Service name. The structure of internet_service_name block is documented below.
    InternetServiceNegate string
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    IpsSensor string
    Name of an existing IPS sensor.
    IpsVoipFilter string
    Name of an existing VoIP (ips) profile.
    Label string
    VDOM-specific GUI visible label.
    Logtraffic string
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    LogtrafficStart string
    Enable/disable policy log traffic start. Valid values: enable, disable.
    Name string
    Policy name.
    Policyid int
    Policy ID.
    Poolnames List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyPoolname>
    Name of IP pool object. The structure of poolname block is documented below.
    ProfileGroup string
    Name of profile group.
    ProfileProtocolOptions string
    Name of an existing Protocol options profile.
    ProfileType string
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    Proxy string
    Type of explicit proxy.
    RedirectUrl string
    Redirect URL for further explicit web proxy processing.
    ReplacemsgOverrideGroup string
    Authentication replacement message override group.
    ScanBotnetConnections string
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    Schedule string
    Name of schedule object.
    SctpFilterProfile string
    Name of an existing SCTP filter profile.
    ServiceNegate string
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    Services List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyService>
    Name of service objects. The structure of service block is documented below.
    SessionTtl int
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    SpamfilterProfile string
    Name of an existing Spam filter profile.
    Srcaddr6s List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicySrcaddr6>
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    SrcaddrNegate string
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    Srcaddrs List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicySrcaddr>
    Source address objects. The structure of srcaddr block is documented below.
    Srcintfs List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicySrcintf>
    Source interface names. The structure of srcintf block is documented below.
    SshFilterProfile string
    Name of an existing SSH filter profile.
    SshPolicyRedirect string
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    SslSshProfile string
    Name of an existing SSL SSH profile.
    Status string
    Enable/disable the active status of the policy. Valid values: enable, disable.
    Transparent string
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    Users List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyUser>
    Names of user objects. The structure of users block is documented below.
    UtmStatus string
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    VideofilterProfile string
    Name of an existing VideoFilter profile.
    VirtualPatchProfile string
    Name of an existing virtual-patch profile.
    VoipProfile string
    Name of an existing VoIP profile.
    WafProfile string
    Name of an existing Web application firewall profile.
    Webcache string
    Enable/disable web caching. Valid values: enable, disable.
    WebcacheHttps string
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    WebfilterProfile string
    Name of an existing Web filter profile.
    WebproxyForwardServer string
    Web proxy forward server name.
    WebproxyProfile string
    Name of web proxy profile.
    ZtnaEmsTags List<Pulumiverse.Fortios.Firewall.Inputs.ProxypolicyZtnaEmsTag>
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ZtnaTagsMatchLogic string
    ZTNA tag matching logic. Valid values: or, and.
    AccessProxies []ProxypolicyAccessProxyArgs
    IPv4 access proxy. The structure of access_proxy block is documented below.
    AccessProxy6s []ProxypolicyAccessProxy6Args
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    Action string
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    ApplicationList string
    Name of an existing Application list.
    AvProfile string
    Name of an existing Antivirus profile.
    BlockNotification string
    Enable/disable block notification. Valid values: enable, disable.
    CasbProfile string
    Name of an existing CASB profile.
    CifsProfile string
    Name of an existing CIFS profile.
    Comments string
    Optional comments.
    DecryptedTrafficMirror string
    Decrypted traffic mirror.
    DetectHttpsInHttpRequest string
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    DeviceOwnership string
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    DiameterFilterProfile string
    Name of an existing Diameter filter profile.
    Disclaimer string
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    DlpProfile string
    Name of an existing DLP profile.
    DlpSensor string
    Name of an existing DLP sensor.
    Dstaddr6s []ProxypolicyDstaddr6Args
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    DstaddrNegate string
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    Dstaddrs []ProxypolicyDstaddrArgs
    Destination address objects. The structure of dstaddr block is documented below.
    Dstintfs []ProxypolicyDstintfArgs
    Destination interface names. The structure of dstintf block is documented below.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    EmailfilterProfile string
    Name of an existing email filter profile.
    FileFilterProfile string
    Name of an existing file-filter profile.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    GlobalLabel string
    Global web-based manager visible label.
    Groups []ProxypolicyGroupArgs
    Names of group objects. The structure of groups block is documented below.
    HttpTunnelAuth string
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    IcapProfile string
    Name of an existing ICAP profile.
    InternetService string
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    InternetService6 string
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    InternetService6CustomGroups []ProxypolicyInternetService6CustomGroupArgs
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    InternetService6Customs []ProxypolicyInternetService6CustomArgs
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    InternetService6Groups []ProxypolicyInternetService6GroupArgs
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    InternetService6Names []ProxypolicyInternetService6NameArgs
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    InternetService6Negate string
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    InternetServiceCustomGroups []ProxypolicyInternetServiceCustomGroupArgs
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    InternetServiceCustoms []ProxypolicyInternetServiceCustomArgs
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    InternetServiceGroups []ProxypolicyInternetServiceGroupArgs
    Internet Service group name. The structure of internet_service_group block is documented below.
    InternetServiceIds []ProxypolicyInternetServiceIdArgs
    Internet Service ID. The structure of internet_service_id block is documented below.
    InternetServiceNames []ProxypolicyInternetServiceNameArgs
    Internet Service name. The structure of internet_service_name block is documented below.
    InternetServiceNegate string
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    IpsSensor string
    Name of an existing IPS sensor.
    IpsVoipFilter string
    Name of an existing VoIP (ips) profile.
    Label string
    VDOM-specific GUI visible label.
    Logtraffic string
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    LogtrafficStart string
    Enable/disable policy log traffic start. Valid values: enable, disable.
    Name string
    Policy name.
    Policyid int
    Policy ID.
    Poolnames []ProxypolicyPoolnameArgs
    Name of IP pool object. The structure of poolname block is documented below.
    ProfileGroup string
    Name of profile group.
    ProfileProtocolOptions string
    Name of an existing Protocol options profile.
    ProfileType string
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    Proxy string
    Type of explicit proxy.
    RedirectUrl string
    Redirect URL for further explicit web proxy processing.
    ReplacemsgOverrideGroup string
    Authentication replacement message override group.
    ScanBotnetConnections string
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    Schedule string
    Name of schedule object.
    SctpFilterProfile string
    Name of an existing SCTP filter profile.
    ServiceNegate string
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    Services []ProxypolicyServiceArgs
    Name of service objects. The structure of service block is documented below.
    SessionTtl int
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    SpamfilterProfile string
    Name of an existing Spam filter profile.
    Srcaddr6s []ProxypolicySrcaddr6Args
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    SrcaddrNegate string
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    Srcaddrs []ProxypolicySrcaddrArgs
    Source address objects. The structure of srcaddr block is documented below.
    Srcintfs []ProxypolicySrcintfArgs
    Source interface names. The structure of srcintf block is documented below.
    SshFilterProfile string
    Name of an existing SSH filter profile.
    SshPolicyRedirect string
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    SslSshProfile string
    Name of an existing SSL SSH profile.
    Status string
    Enable/disable the active status of the policy. Valid values: enable, disable.
    Transparent string
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    Users []ProxypolicyUserArgs
    Names of user objects. The structure of users block is documented below.
    UtmStatus string
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    VideofilterProfile string
    Name of an existing VideoFilter profile.
    VirtualPatchProfile string
    Name of an existing virtual-patch profile.
    VoipProfile string
    Name of an existing VoIP profile.
    WafProfile string
    Name of an existing Web application firewall profile.
    Webcache string
    Enable/disable web caching. Valid values: enable, disable.
    WebcacheHttps string
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    WebfilterProfile string
    Name of an existing Web filter profile.
    WebproxyForwardServer string
    Web proxy forward server name.
    WebproxyProfile string
    Name of web proxy profile.
    ZtnaEmsTags []ProxypolicyZtnaEmsTagArgs
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ZtnaTagsMatchLogic string
    ZTNA tag matching logic. Valid values: or, and.
    accessProxies List<ProxypolicyAccessProxy>
    IPv4 access proxy. The structure of access_proxy block is documented below.
    accessProxy6s List<ProxypolicyAccessProxy6>
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    action String
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    applicationList String
    Name of an existing Application list.
    avProfile String
    Name of an existing Antivirus profile.
    blockNotification String
    Enable/disable block notification. Valid values: enable, disable.
    casbProfile String
    Name of an existing CASB profile.
    cifsProfile String
    Name of an existing CIFS profile.
    comments String
    Optional comments.
    decryptedTrafficMirror String
    Decrypted traffic mirror.
    detectHttpsInHttpRequest String
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    deviceOwnership String
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    diameterFilterProfile String
    Name of an existing Diameter filter profile.
    disclaimer String
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    dlpProfile String
    Name of an existing DLP profile.
    dlpSensor String
    Name of an existing DLP sensor.
    dstaddr6s List<ProxypolicyDstaddr6>
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    dstaddrNegate String
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    dstaddrs List<ProxypolicyDstaddr>
    Destination address objects. The structure of dstaddr block is documented below.
    dstintfs List<ProxypolicyDstintf>
    Destination interface names. The structure of dstintf block is documented below.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    emailfilterProfile String
    Name of an existing email filter profile.
    fileFilterProfile String
    Name of an existing file-filter profile.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    globalLabel String
    Global web-based manager visible label.
    groups List<ProxypolicyGroup>
    Names of group objects. The structure of groups block is documented below.
    httpTunnelAuth String
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    icapProfile String
    Name of an existing ICAP profile.
    internetService String
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    internetService6 String
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    internetService6CustomGroups List<ProxypolicyInternetService6CustomGroup>
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    internetService6Customs List<ProxypolicyInternetService6Custom>
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    internetService6Groups List<ProxypolicyInternetService6Group>
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    internetService6Names List<ProxypolicyInternetService6Name>
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    internetService6Negate String
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    internetServiceCustomGroups List<ProxypolicyInternetServiceCustomGroup>
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internetServiceCustoms List<ProxypolicyInternetServiceCustom>
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internetServiceGroups List<ProxypolicyInternetServiceGroup>
    Internet Service group name. The structure of internet_service_group block is documented below.
    internetServiceIds List<ProxypolicyInternetServiceId>
    Internet Service ID. The structure of internet_service_id block is documented below.
    internetServiceNames List<ProxypolicyInternetServiceName>
    Internet Service name. The structure of internet_service_name block is documented below.
    internetServiceNegate String
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    ipsSensor String
    Name of an existing IPS sensor.
    ipsVoipFilter String
    Name of an existing VoIP (ips) profile.
    label String
    VDOM-specific GUI visible label.
    logtraffic String
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    logtrafficStart String
    Enable/disable policy log traffic start. Valid values: enable, disable.
    name String
    Policy name.
    policyid Integer
    Policy ID.
    poolnames List<ProxypolicyPoolname>
    Name of IP pool object. The structure of poolname block is documented below.
    profileGroup String
    Name of profile group.
    profileProtocolOptions String
    Name of an existing Protocol options profile.
    profileType String
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    proxy String
    Type of explicit proxy.
    redirectUrl String
    Redirect URL for further explicit web proxy processing.
    replacemsgOverrideGroup String
    Authentication replacement message override group.
    scanBotnetConnections String
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    schedule String
    Name of schedule object.
    sctpFilterProfile String
    Name of an existing SCTP filter profile.
    serviceNegate String
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    services List<ProxypolicyService>
    Name of service objects. The structure of service block is documented below.
    sessionTtl Integer
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilterProfile String
    Name of an existing Spam filter profile.
    srcaddr6s List<ProxypolicySrcaddr6>
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    srcaddrNegate String
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    srcaddrs List<ProxypolicySrcaddr>
    Source address objects. The structure of srcaddr block is documented below.
    srcintfs List<ProxypolicySrcintf>
    Source interface names. The structure of srcintf block is documented below.
    sshFilterProfile String
    Name of an existing SSH filter profile.
    sshPolicyRedirect String
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    sslSshProfile String
    Name of an existing SSL SSH profile.
    status String
    Enable/disable the active status of the policy. Valid values: enable, disable.
    transparent String
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    users List<ProxypolicyUser>
    Names of user objects. The structure of users block is documented below.
    utmStatus String
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    videofilterProfile String
    Name of an existing VideoFilter profile.
    virtualPatchProfile String
    Name of an existing virtual-patch profile.
    voipProfile String
    Name of an existing VoIP profile.
    wafProfile String
    Name of an existing Web application firewall profile.
    webcache String
    Enable/disable web caching. Valid values: enable, disable.
    webcacheHttps String
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    webfilterProfile String
    Name of an existing Web filter profile.
    webproxyForwardServer String
    Web proxy forward server name.
    webproxyProfile String
    Name of web proxy profile.
    ztnaEmsTags List<ProxypolicyZtnaEmsTag>
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ztnaTagsMatchLogic String
    ZTNA tag matching logic. Valid values: or, and.
    accessProxies ProxypolicyAccessProxy[]
    IPv4 access proxy. The structure of access_proxy block is documented below.
    accessProxy6s ProxypolicyAccessProxy6[]
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    action string
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    applicationList string
    Name of an existing Application list.
    avProfile string
    Name of an existing Antivirus profile.
    blockNotification string
    Enable/disable block notification. Valid values: enable, disable.
    casbProfile string
    Name of an existing CASB profile.
    cifsProfile string
    Name of an existing CIFS profile.
    comments string
    Optional comments.
    decryptedTrafficMirror string
    Decrypted traffic mirror.
    detectHttpsInHttpRequest string
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    deviceOwnership string
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    diameterFilterProfile string
    Name of an existing Diameter filter profile.
    disclaimer string
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    dlpProfile string
    Name of an existing DLP profile.
    dlpSensor string
    Name of an existing DLP sensor.
    dstaddr6s ProxypolicyDstaddr6[]
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    dstaddrNegate string
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    dstaddrs ProxypolicyDstaddr[]
    Destination address objects. The structure of dstaddr block is documented below.
    dstintfs ProxypolicyDstintf[]
    Destination interface names. The structure of dstintf block is documented below.
    dynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    emailfilterProfile string
    Name of an existing email filter profile.
    fileFilterProfile string
    Name of an existing file-filter profile.
    getAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    globalLabel string
    Global web-based manager visible label.
    groups ProxypolicyGroup[]
    Names of group objects. The structure of groups block is documented below.
    httpTunnelAuth string
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    icapProfile string
    Name of an existing ICAP profile.
    internetService string
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    internetService6 string
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    internetService6CustomGroups ProxypolicyInternetService6CustomGroup[]
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    internetService6Customs ProxypolicyInternetService6Custom[]
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    internetService6Groups ProxypolicyInternetService6Group[]
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    internetService6Names ProxypolicyInternetService6Name[]
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    internetService6Negate string
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    internetServiceCustomGroups ProxypolicyInternetServiceCustomGroup[]
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internetServiceCustoms ProxypolicyInternetServiceCustom[]
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internetServiceGroups ProxypolicyInternetServiceGroup[]
    Internet Service group name. The structure of internet_service_group block is documented below.
    internetServiceIds ProxypolicyInternetServiceId[]
    Internet Service ID. The structure of internet_service_id block is documented below.
    internetServiceNames ProxypolicyInternetServiceName[]
    Internet Service name. The structure of internet_service_name block is documented below.
    internetServiceNegate string
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    ipsSensor string
    Name of an existing IPS sensor.
    ipsVoipFilter string
    Name of an existing VoIP (ips) profile.
    label string
    VDOM-specific GUI visible label.
    logtraffic string
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    logtrafficStart string
    Enable/disable policy log traffic start. Valid values: enable, disable.
    name string
    Policy name.
    policyid number
    Policy ID.
    poolnames ProxypolicyPoolname[]
    Name of IP pool object. The structure of poolname block is documented below.
    profileGroup string
    Name of profile group.
    profileProtocolOptions string
    Name of an existing Protocol options profile.
    profileType string
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    proxy string
    Type of explicit proxy.
    redirectUrl string
    Redirect URL for further explicit web proxy processing.
    replacemsgOverrideGroup string
    Authentication replacement message override group.
    scanBotnetConnections string
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    schedule string
    Name of schedule object.
    sctpFilterProfile string
    Name of an existing SCTP filter profile.
    serviceNegate string
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    services ProxypolicyService[]
    Name of service objects. The structure of service block is documented below.
    sessionTtl number
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilterProfile string
    Name of an existing Spam filter profile.
    srcaddr6s ProxypolicySrcaddr6[]
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    srcaddrNegate string
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    srcaddrs ProxypolicySrcaddr[]
    Source address objects. The structure of srcaddr block is documented below.
    srcintfs ProxypolicySrcintf[]
    Source interface names. The structure of srcintf block is documented below.
    sshFilterProfile string
    Name of an existing SSH filter profile.
    sshPolicyRedirect string
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    sslSshProfile string
    Name of an existing SSL SSH profile.
    status string
    Enable/disable the active status of the policy. Valid values: enable, disable.
    transparent string
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    users ProxypolicyUser[]
    Names of user objects. The structure of users block is documented below.
    utmStatus string
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    videofilterProfile string
    Name of an existing VideoFilter profile.
    virtualPatchProfile string
    Name of an existing virtual-patch profile.
    voipProfile string
    Name of an existing VoIP profile.
    wafProfile string
    Name of an existing Web application firewall profile.
    webcache string
    Enable/disable web caching. Valid values: enable, disable.
    webcacheHttps string
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    webfilterProfile string
    Name of an existing Web filter profile.
    webproxyForwardServer string
    Web proxy forward server name.
    webproxyProfile string
    Name of web proxy profile.
    ztnaEmsTags ProxypolicyZtnaEmsTag[]
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ztnaTagsMatchLogic string
    ZTNA tag matching logic. Valid values: or, and.
    access_proxies Sequence[ProxypolicyAccessProxyArgs]
    IPv4 access proxy. The structure of access_proxy block is documented below.
    access_proxy6s Sequence[ProxypolicyAccessProxy6Args]
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    action str
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    application_list str
    Name of an existing Application list.
    av_profile str
    Name of an existing Antivirus profile.
    block_notification str
    Enable/disable block notification. Valid values: enable, disable.
    casb_profile str
    Name of an existing CASB profile.
    cifs_profile str
    Name of an existing CIFS profile.
    comments str
    Optional comments.
    decrypted_traffic_mirror str
    Decrypted traffic mirror.
    detect_https_in_http_request str
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    device_ownership str
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    diameter_filter_profile str
    Name of an existing Diameter filter profile.
    disclaimer str
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    dlp_profile str
    Name of an existing DLP profile.
    dlp_sensor str
    Name of an existing DLP sensor.
    dstaddr6s Sequence[ProxypolicyDstaddr6Args]
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    dstaddr_negate str
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    dstaddrs Sequence[ProxypolicyDstaddrArgs]
    Destination address objects. The structure of dstaddr block is documented below.
    dstintfs Sequence[ProxypolicyDstintfArgs]
    Destination interface names. The structure of dstintf block is documented below.
    dynamic_sort_subtable str
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    emailfilter_profile str
    Name of an existing email filter profile.
    file_filter_profile str
    Name of an existing file-filter profile.
    get_all_tables str
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    global_label str
    Global web-based manager visible label.
    groups Sequence[ProxypolicyGroupArgs]
    Names of group objects. The structure of groups block is documented below.
    http_tunnel_auth str
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    icap_profile str
    Name of an existing ICAP profile.
    internet_service str
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    internet_service6 str
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    internet_service6_custom_groups Sequence[ProxypolicyInternetService6CustomGroupArgs]
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    internet_service6_customs Sequence[ProxypolicyInternetService6CustomArgs]
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    internet_service6_groups Sequence[ProxypolicyInternetService6GroupArgs]
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    internet_service6_names Sequence[ProxypolicyInternetService6NameArgs]
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    internet_service6_negate str
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    internet_service_custom_groups Sequence[ProxypolicyInternetServiceCustomGroupArgs]
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internet_service_customs Sequence[ProxypolicyInternetServiceCustomArgs]
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internet_service_groups Sequence[ProxypolicyInternetServiceGroupArgs]
    Internet Service group name. The structure of internet_service_group block is documented below.
    internet_service_ids Sequence[ProxypolicyInternetServiceIdArgs]
    Internet Service ID. The structure of internet_service_id block is documented below.
    internet_service_names Sequence[ProxypolicyInternetServiceNameArgs]
    Internet Service name. The structure of internet_service_name block is documented below.
    internet_service_negate str
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    ips_sensor str
    Name of an existing IPS sensor.
    ips_voip_filter str
    Name of an existing VoIP (ips) profile.
    label str
    VDOM-specific GUI visible label.
    logtraffic str
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    logtraffic_start str
    Enable/disable policy log traffic start. Valid values: enable, disable.
    name str
    Policy name.
    policyid int
    Policy ID.
    poolnames Sequence[ProxypolicyPoolnameArgs]
    Name of IP pool object. The structure of poolname block is documented below.
    profile_group str
    Name of profile group.
    profile_protocol_options str
    Name of an existing Protocol options profile.
    profile_type str
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    proxy str
    Type of explicit proxy.
    redirect_url str
    Redirect URL for further explicit web proxy processing.
    replacemsg_override_group str
    Authentication replacement message override group.
    scan_botnet_connections str
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    schedule str
    Name of schedule object.
    sctp_filter_profile str
    Name of an existing SCTP filter profile.
    service_negate str
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    services Sequence[ProxypolicyServiceArgs]
    Name of service objects. The structure of service block is documented below.
    session_ttl int
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilter_profile str
    Name of an existing Spam filter profile.
    srcaddr6s Sequence[ProxypolicySrcaddr6Args]
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    srcaddr_negate str
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    srcaddrs Sequence[ProxypolicySrcaddrArgs]
    Source address objects. The structure of srcaddr block is documented below.
    srcintfs Sequence[ProxypolicySrcintfArgs]
    Source interface names. The structure of srcintf block is documented below.
    ssh_filter_profile str
    Name of an existing SSH filter profile.
    ssh_policy_redirect str
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    ssl_ssh_profile str
    Name of an existing SSL SSH profile.
    status str
    Enable/disable the active status of the policy. Valid values: enable, disable.
    transparent str
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    users Sequence[ProxypolicyUserArgs]
    Names of user objects. The structure of users block is documented below.
    utm_status str
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    uuid str
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    vdomparam str
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    videofilter_profile str
    Name of an existing VideoFilter profile.
    virtual_patch_profile str
    Name of an existing virtual-patch profile.
    voip_profile str
    Name of an existing VoIP profile.
    waf_profile str
    Name of an existing Web application firewall profile.
    webcache str
    Enable/disable web caching. Valid values: enable, disable.
    webcache_https str
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    webfilter_profile str
    Name of an existing Web filter profile.
    webproxy_forward_server str
    Web proxy forward server name.
    webproxy_profile str
    Name of web proxy profile.
    ztna_ems_tags Sequence[ProxypolicyZtnaEmsTagArgs]
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ztna_tags_match_logic str
    ZTNA tag matching logic. Valid values: or, and.
    accessProxies List<Property Map>
    IPv4 access proxy. The structure of access_proxy block is documented below.
    accessProxy6s List<Property Map>
    IPv6 access proxy. The structure of access_proxy6 block is documented below.
    action String
    Accept or deny traffic matching the policy parameters. Valid values: accept, deny, redirect.
    applicationList String
    Name of an existing Application list.
    avProfile String
    Name of an existing Antivirus profile.
    blockNotification String
    Enable/disable block notification. Valid values: enable, disable.
    casbProfile String
    Name of an existing CASB profile.
    cifsProfile String
    Name of an existing CIFS profile.
    comments String
    Optional comments.
    decryptedTrafficMirror String
    Decrypted traffic mirror.
    detectHttpsInHttpRequest String
    Enable/disable detection of HTTPS in HTTP request. Valid values: enable, disable.
    deviceOwnership String
    When enabled, the ownership enforcement will be done at policy level. Valid values: enable, disable.
    diameterFilterProfile String
    Name of an existing Diameter filter profile.
    disclaimer String
    Web proxy disclaimer setting: by domain, policy, or user. Valid values: disable, domain, policy, user.
    dlpProfile String
    Name of an existing DLP profile.
    dlpSensor String
    Name of an existing DLP sensor.
    dstaddr6s List<Property Map>
    IPv6 destination address objects. The structure of dstaddr6 block is documented below.
    dstaddrNegate String
    When enabled, destination addresses match against any address EXCEPT the specified destination addresses. Valid values: enable, disable.
    dstaddrs List<Property Map>
    Destination address objects. The structure of dstaddr block is documented below.
    dstintfs List<Property Map>
    Destination interface names. The structure of dstintf block is documented below.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    emailfilterProfile String
    Name of an existing email filter profile.
    fileFilterProfile String
    Name of an existing file-filter profile.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwish conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    globalLabel String
    Global web-based manager visible label.
    groups List<Property Map>
    Names of group objects. The structure of groups block is documented below.
    httpTunnelAuth String
    Enable/disable HTTP tunnel authentication. Valid values: enable, disable.
    icapProfile String
    Name of an existing ICAP profile.
    internetService String
    Enable/disable use of Internet Services for this policy. If enabled, destination address and service are not used. Valid values: enable, disable.
    internetService6 String
    Enable/disable use of Internet Services IPv6 for this policy. If enabled, destination IPv6 address and service are not used. Valid values: enable, disable.
    internetService6CustomGroups List<Property Map>
    Custom Internet Service IPv6 group name. The structure of internet_service6_custom_group block is documented below.
    internetService6Customs List<Property Map>
    Custom Internet Service IPv6 name. The structure of internet_service6_custom block is documented below.
    internetService6Groups List<Property Map>
    Internet Service IPv6 group name. The structure of internet_service6_group block is documented below.
    internetService6Names List<Property Map>
    Internet Service IPv6 name. The structure of internet_service6_name block is documented below.
    internetService6Negate String
    When enabled, Internet Services match against any internet service IPv6 EXCEPT the selected Internet Service IPv6. Valid values: enable, disable.
    internetServiceCustomGroups List<Property Map>
    Custom Internet Service group name. The structure of internet_service_custom_group block is documented below.
    internetServiceCustoms List<Property Map>
    Custom Internet Service name. The structure of internet_service_custom block is documented below.
    internetServiceGroups List<Property Map>
    Internet Service group name. The structure of internet_service_group block is documented below.
    internetServiceIds List<Property Map>
    Internet Service ID. The structure of internet_service_id block is documented below.
    internetServiceNames List<Property Map>
    Internet Service name. The structure of internet_service_name block is documented below.
    internetServiceNegate String
    When enabled, Internet Services match against any internet service EXCEPT the selected Internet Service. Valid values: enable, disable.
    ipsSensor String
    Name of an existing IPS sensor.
    ipsVoipFilter String
    Name of an existing VoIP (ips) profile.
    label String
    VDOM-specific GUI visible label.
    logtraffic String
    Enable/disable logging traffic through the policy. Valid values: all, utm, disable.
    logtrafficStart String
    Enable/disable policy log traffic start. Valid values: enable, disable.
    name String
    Policy name.
    policyid Number
    Policy ID.
    poolnames List<Property Map>
    Name of IP pool object. The structure of poolname block is documented below.
    profileGroup String
    Name of profile group.
    profileProtocolOptions String
    Name of an existing Protocol options profile.
    profileType String
    Determine whether the firewall policy allows security profile groups or single profiles only. Valid values: single, group.
    proxy String
    Type of explicit proxy.
    redirectUrl String
    Redirect URL for further explicit web proxy processing.
    replacemsgOverrideGroup String
    Authentication replacement message override group.
    scanBotnetConnections String
    Enable/disable scanning of connections to Botnet servers. Valid values: disable, block, monitor.
    schedule String
    Name of schedule object.
    sctpFilterProfile String
    Name of an existing SCTP filter profile.
    serviceNegate String
    When enabled, services match against any service EXCEPT the specified destination services. Valid values: enable, disable.
    services List<Property Map>
    Name of service objects. The structure of service block is documented below.
    sessionTtl Number
    TTL in seconds for sessions accepted by this policy (0 means use the system default session TTL).
    spamfilterProfile String
    Name of an existing Spam filter profile.
    srcaddr6s List<Property Map>
    IPv6 source address objects. The structure of srcaddr6 block is documented below.
    srcaddrNegate String
    When enabled, source addresses match against any address EXCEPT the specified source addresses. Valid values: enable, disable.
    srcaddrs List<Property Map>
    Source address objects. The structure of srcaddr block is documented below.
    srcintfs List<Property Map>
    Source interface names. The structure of srcintf block is documented below.
    sshFilterProfile String
    Name of an existing SSH filter profile.
    sshPolicyRedirect String
    Redirect SSH traffic to matching transparent proxy policy. Valid values: enable, disable.
    sslSshProfile String
    Name of an existing SSL SSH profile.
    status String
    Enable/disable the active status of the policy. Valid values: enable, disable.
    transparent String
    Enable to use the IP address of the client to connect to the server. Valid values: enable, disable.
    users List<Property Map>
    Names of user objects. The structure of users block is documented below.
    utmStatus String
    Enable the use of UTM profiles/sensors/lists. Valid values: enable, disable.
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    videofilterProfile String
    Name of an existing VideoFilter profile.
    virtualPatchProfile String
    Name of an existing virtual-patch profile.
    voipProfile String
    Name of an existing VoIP profile.
    wafProfile String
    Name of an existing Web application firewall profile.
    webcache String
    Enable/disable web caching. Valid values: enable, disable.
    webcacheHttps String
    Enable/disable web caching for HTTPS (Requires deep-inspection enabled in ssl-ssh-profile). Valid values: disable, enable.
    webfilterProfile String
    Name of an existing Web filter profile.
    webproxyForwardServer String
    Web proxy forward server name.
    webproxyProfile String
    Name of web proxy profile.
    ztnaEmsTags List<Property Map>
    ZTNA EMS Tag names. The structure of ztna_ems_tag block is documented below.
    ztnaTagsMatchLogic String
    ZTNA tag matching logic. Valid values: or, and.

    Supporting Types

    ProxypolicyAccessProxy, ProxypolicyAccessProxyArgs

    Name string
    Access proxy name.
    Name string
    Access proxy name.
    name String
    Access proxy name.
    name string
    Access proxy name.
    name str
    Access proxy name.
    name String
    Access proxy name.

    ProxypolicyAccessProxy6, ProxypolicyAccessProxy6Args

    Name string
    Policy name.
    Name string
    Policy name.
    name String
    Policy name.
    name string
    Policy name.
    name str
    Policy name.
    name String
    Policy name.

    ProxypolicyDstaddr, ProxypolicyDstaddrArgs

    Name string
    Address name.
    Name string
    Address name.
    name String
    Address name.
    name string
    Address name.
    name str
    Address name.
    name String
    Address name.

    ProxypolicyDstaddr6, ProxypolicyDstaddr6Args

    Name string
    Policy name.
    Name string
    Policy name.
    name String
    Policy name.
    name string
    Policy name.
    name str
    Policy name.
    name String
    Policy name.

    ProxypolicyDstintf, ProxypolicyDstintfArgs

    Name string
    Interface name.
    Name string
    Interface name.
    name String
    Interface name.
    name string
    Interface name.
    name str
    Interface name.
    name String
    Interface name.

    ProxypolicyGroup, ProxypolicyGroupArgs

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    ProxypolicyInternetService6Custom, ProxypolicyInternetService6CustomArgs

    Name string
    Policy name.
    Name string
    Policy name.
    name String
    Policy name.
    name string
    Policy name.
    name str
    Policy name.
    name String
    Policy name.

    ProxypolicyInternetService6CustomGroup, ProxypolicyInternetService6CustomGroupArgs

    Name string
    Policy name.
    Name string
    Policy name.
    name String
    Policy name.
    name string
    Policy name.
    name str
    Policy name.
    name String
    Policy name.

    ProxypolicyInternetService6Group, ProxypolicyInternetService6GroupArgs

    Name string
    Policy name.
    Name string
    Policy name.
    name String
    Policy name.
    name string
    Policy name.
    name str
    Policy name.
    name String
    Policy name.

    ProxypolicyInternetService6Name, ProxypolicyInternetService6NameArgs

    Name string
    Policy name.
    Name string
    Policy name.
    name String
    Policy name.
    name string
    Policy name.
    name str
    Policy name.
    name String
    Policy name.

    ProxypolicyInternetServiceCustom, ProxypolicyInternetServiceCustomArgs

    Name string
    Custom name.
    Name string
    Custom name.
    name String
    Custom name.
    name string
    Custom name.
    name str
    Custom name.
    name String
    Custom name.

    ProxypolicyInternetServiceCustomGroup, ProxypolicyInternetServiceCustomGroupArgs

    Name string
    Custom Internet Service IPv6 group name.
    Name string
    Custom Internet Service IPv6 group name.
    name String
    Custom Internet Service IPv6 group name.
    name string
    Custom Internet Service IPv6 group name.
    name str
    Custom Internet Service IPv6 group name.
    name String
    Custom Internet Service IPv6 group name.

    ProxypolicyInternetServiceGroup, ProxypolicyInternetServiceGroupArgs

    Name string
    Internet Service group name.
    Name string
    Internet Service group name.
    name String
    Internet Service group name.
    name string
    Internet Service group name.
    name str
    Internet Service group name.
    name String
    Internet Service group name.

    ProxypolicyInternetServiceId, ProxypolicyInternetServiceIdArgs

    Id int
    Internet Service ID.
    Id int
    Internet Service ID.
    id Integer
    Internet Service ID.
    id number
    Internet Service ID.
    id int
    Internet Service ID.
    id Number
    Internet Service ID.

    ProxypolicyInternetServiceName, ProxypolicyInternetServiceNameArgs

    Name string
    Internet Service name.
    Name string
    Internet Service name.
    name String
    Internet Service name.
    name string
    Internet Service name.
    name str
    Internet Service name.
    name String
    Internet Service name.

    ProxypolicyPoolname, ProxypolicyPoolnameArgs

    Name string
    IP pool name.
    Name string
    IP pool name.
    name String
    IP pool name.
    name string
    IP pool name.
    name str
    IP pool name.
    name String
    IP pool name.

    ProxypolicyService, ProxypolicyServiceArgs

    Name string
    Address name.
    Name string
    Address name.
    name String
    Address name.
    name string
    Address name.
    name str
    Address name.
    name String
    Address name.

    ProxypolicySrcaddr, ProxypolicySrcaddrArgs

    Name string
    Address name.
    Name string
    Address name.
    name String
    Address name.
    name string
    Address name.
    name str
    Address name.
    name String
    Address name.

    ProxypolicySrcaddr6, ProxypolicySrcaddr6Args

    Name string
    Policy name.
    Name string
    Policy name.
    name String
    Policy name.
    name string
    Policy name.
    name str
    Policy name.
    name String
    Policy name.

    ProxypolicySrcintf, ProxypolicySrcintfArgs

    Name string
    Interface name.
    Name string
    Interface name.
    name String
    Interface name.
    name string
    Interface name.
    name str
    Interface name.
    name String
    Interface name.

    ProxypolicyUser, ProxypolicyUserArgs

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    ProxypolicyZtnaEmsTag, ProxypolicyZtnaEmsTagArgs

    Name string
    EMS Tag name.
    Name string
    EMS Tag name.
    name String
    EMS Tag name.
    name string
    EMS Tag name.
    name str
    EMS Tag name.
    name String
    EMS Tag name.

    Import

    Firewall ProxyPolicy can be imported using any of these accepted formats:

    $ pulumi import fortios:firewall/proxypolicy:Proxypolicy labelname {{policyid}}

    If you do not want to import arguments of block:

    $ export “FORTIOS_IMPORT_TABLE”=“false”

    $ pulumi import fortios:firewall/proxypolicy:Proxypolicy labelname {{policyid}}

    $ unset “FORTIOS_IMPORT_TABLE”

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortios pulumiverse/pulumi-fortios
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the fortios Terraform Provider.
    fortios logo
    Fortios v0.0.5 published on Tuesday, Apr 9, 2024 by pulumiverse
    pulumiverse/pulumi-fortios