Skip to content

Latest commit

 

History

History
6158 lines (6117 loc) · 266 KB

fortios_system_global.rst

File metadata and controls

6158 lines (6117 loc) · 266 KB
source

fortios_system_global.py

orphan

fortios_system_global -- Configure global attributes in Fortinet's FortiOS and FortiGate.

2.0.0

Synopsis

  • This module is able to configure a FortiGate or FortiOS (FOS) device by allowing the user to set and modify system feature and global category. Examples include all parameters and values need to be adjusted to datasources before usage. Tested with FOS v6.0.0

Requirements

The below requirements are needed on the host that executes this module.

  • ansible>=2.15

Tips

Using member operation to add an element to an existing object.

FortiOS Version Compatibility

Supported Version Ranges: v6.0.0 -> 7.4.3

Parameters

  • access_token - Token-based authentication. Generated from GUI of Fortigate. type: str required: false
  • enable_log - Enable/Disable logging for task. type: bool required: false default: False
  • vdom - Virtual domain, among those defined previously. A vdom is a virtual instance of the FortiGate that can be configured and used as a different unit. type: str default: root
  • member_path - Member attribute path to operate on. type: str
  • member_state - Add or delete a member under specified attribute path. type: str choices: present, absent
  • system_global - Configure global attributes. type: dict

    <a id='label0' href="javascript:ContentClick('label1', 'label0');" onmouseover="ContentPreview('label1');" onmouseout="ContentUnpreview('label1');" title="click to collapse or expand..."> more... </a> <div id="label1" style="display:none"> <table border="1"> <tr> <td></td><td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>system_global</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <ul class="ul-self"> <li> <span class="li-head">admin_concurrent</span> - Enable/disable concurrent administrator logins. Use policy-auth-concurrent for firewall authenticated users. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label2' href="javascript:ContentClick('label3', 'label2');" onmouseover="ContentPreview('label3');" onmouseout="ContentUnpreview('label3');" title="click to collapse or expand..."> more... </a> <div id="label3" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_concurrent</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_console_timeout</span> - Console login timeout that overrides the admin timeout value (15 - 300 seconds). <span class="li-normal">type: int</span> <a id='label4' href="javascript:ContentClick('label5', 'label4');" onmouseover="ContentPreview('label5');" onmouseout="ContentUnpreview('label5');" title="click to collapse or expand..."> more... </a> <div id="label5" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_console_timeout</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_forticloud_sso_default_profile</span> - Override access profile. Source system.accprofile.name. <span class="li-normal">type: str</span> <a id='label6' href="javascript:ContentClick('label7', 'label6');" onmouseover="ContentPreview('label7');" onmouseout="ContentUnpreview('label7');" title="click to collapse or expand..."> more... </a> <div id="label7" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_forticloud_sso_default_profile</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_forticloud_sso_login</span> - Enable/disable FortiCloud admin login via SSO. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label8' href="javascript:ContentClick('label9', 'label8');" onmouseover="ContentPreview('label9');" onmouseout="ContentUnpreview('label9');" title="click to collapse or expand..."> more... </a> <div id="label9" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_forticloud_sso_login</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_host</span> - Administrative host for HTTP and HTTPS. When set, will be used in lieu of the client"s Host header for any redirection. <span class="li-normal">type: str</span> <a id='label10' href="javascript:ContentClick('label11', 'label10');" onmouseover="ContentPreview('label11');" onmouseout="ContentUnpreview('label11');" title="click to collapse or expand..."> more... </a> <div id="label11" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>admin_host</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12 </code></td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_hsts_max_age</span> - HTTPS Strict-Transport-Security header max-age in seconds. A value of 0 will reset any HSTS records in the browser.When admin-https-redirect is disabled the header max-age will be 0. <span class="li-normal">type: int</span> <a id='label12' href="javascript:ContentClick('label13', 'label12');" onmouseover="ContentPreview('label13');" onmouseout="ContentUnpreview('label13');" title="click to collapse or expand..."> more... </a> <div id="label13" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_hsts_max_age</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_https_pki_required</span> - Enable/disable admin login method. Enable to force administrators to provide a valid certificate to log in if PKI is enabled. Disable to allow administrators to log in with a certificate or password. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label14' href="javascript:ContentClick('label15', 'label14');" onmouseover="ContentPreview('label15');" onmouseout="ContentUnpreview('label15');" title="click to collapse or expand..."> more... </a> <div id="label15" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_https_pki_required</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_https_redirect</span> - Enable/disable redirection of HTTP administration access to HTTPS. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label16' href="javascript:ContentClick('label17', 'label16');" onmouseover="ContentPreview('label17');" onmouseout="ContentUnpreview('label17');" title="click to collapse or expand..."> more... </a> <div id="label17" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_https_redirect</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_https_ssl_banned_ciphers</span> - Select one or more cipher technologies that cannot be used in GUI HTTPS negotiations. Only applies to TLS 1.2 and below. <span class="li-normal">type: list</span> <span class="li-normal">choices: RSA, DHE, ECDHE, DSS, ECDSA, AES, AESGCM, CAMELLIA, 3DES, SHA1, SHA256, SHA384, STATIC, CHACHA20, ARIA, AESCCM</span> <a id='label18' href="javascript:ContentClick('label19', 'label18');" onmouseover="ContentPreview('label19');" onmouseout="ContentUnpreview('label19');" title="click to collapse or expand..."> more... </a> <div id="label19" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_https_ssl_banned_ciphers</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3 </code></td> </tr> <tr> <td>[RSA]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[DHE]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[ECDHE]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[DSS]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[ECDSA]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[AES]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[AESGCM]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[CAMELLIA]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[3DES]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[SHA1]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[SHA256]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[SHA384]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[STATIC]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[CHACHA20]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[ARIA]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[AESCCM]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_https_ssl_ciphersuites</span> - Select one or more TLS 1.3 ciphersuites to enable. Does not affect ciphers in TLS 1.2 and below. At least one must be enabled. To disable all, remove TLS1.3 from admin-https-ssl-versions. <span class="li-normal">type: list</span> <span class="li-normal">choices: TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-AES-128-CCM-SHA256, TLS-AES-128-CCM-8-SHA256</span> <a id='label20' href="javascript:ContentClick('label21', 'label20');" onmouseover="ContentPreview('label21');" onmouseout="ContentUnpreview('label21');" title="click to collapse or expand..."> more... </a> <div id="label21" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_https_ssl_ciphersuites</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3 </code></td> </tr> <tr> <td>[TLS-AES-128-GCM-SHA256]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[TLS-AES-256-GCM-SHA384]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[TLS-CHACHA20-POLY1305-SHA256]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[TLS-AES-128-CCM-SHA256]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[TLS-AES-128-CCM-8-SHA256]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_https_ssl_versions</span> - Allowed TLS versions for web administration. <span class="li-normal">type: list</span> <span class="li-normal">choices: tlsv1-1, tlsv1-2, tlsv1-3, tlsv1-0</span> <a id='label22' href="javascript:ContentClick('label23', 'label22');" onmouseover="ContentPreview('label23');" onmouseout="ContentUnpreview('label23');" title="click to collapse or expand..."> more... </a> <div id="label23" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_https_ssl_versions</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[tlsv1-1]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[tlsv1-2]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[tlsv1-3]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> </tr> <tr> <td>[tlsv1-0]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_lockout_duration</span> - Amount of time in seconds that an administrator account is locked out after reaching the admin-lockout-threshold for repeated failed login attempts. <span class="li-normal">type: int</span> <a id='label24' href="javascript:ContentClick('label25', 'label24');" onmouseover="ContentPreview('label25');" onmouseout="ContentUnpreview('label25');" title="click to collapse or expand..."> more... </a> <div id="label25" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_lockout_duration</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_lockout_threshold</span> - Number of failed login attempts before an administrator account is locked out for the admin-lockout-duration. <span class="li-normal">type: int</span> <a id='label26' href="javascript:ContentClick('label27', 'label26');" onmouseover="ContentPreview('label27');" onmouseout="ContentUnpreview('label27');" title="click to collapse or expand..."> more... </a> <div id="label27" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_lockout_threshold</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_login_max</span> - Maximum number of administrators who can be logged in at the same time (1 - 100). <span class="li-normal">type: int</span> <a id='label28' href="javascript:ContentClick('label29', 'label28');" onmouseover="ContentPreview('label29');" onmouseout="ContentUnpreview('label29');" title="click to collapse or expand..."> more... </a> <div id="label29" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_login_max</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_maintainer</span> - Enable/disable maintainer administrator login. When enabled, the maintainer account can be used to log in from the console after a hard reboot. The password is "bcpb" followed by the FortiGate unit serial number. You have limited time to complete this login. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label30' href="javascript:ContentClick('label31', 'label30');" onmouseover="ContentPreview('label31');" onmouseout="ContentUnpreview('label31');" title="click to collapse or expand..."> more... </a> <div id="label31" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_maintainer</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> </table> </div> </li> <li> <span class="li-head">admin_port</span> - Administrative access port for HTTP. (1 - 65535). <span class="li-normal">type: int</span> <a id='label32' href="javascript:ContentClick('label33', 'label32');" onmouseover="ContentPreview('label33');" onmouseout="ContentUnpreview('label33');" title="click to collapse or expand..."> more... </a> <div id="label33" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_port</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_restrict_local</span> - Enable/disable local admin authentication restriction when remote authenticator is up and running . <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label34' href="javascript:ContentClick('label35', 'label34');" onmouseover="ContentPreview('label35');" onmouseout="ContentUnpreview('label35');" title="click to collapse or expand..."> more... </a> <div id="label35" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_restrict_local</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_scp</span> - Enable/disable SCP support for system configuration backup, restore, and firmware file upload. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label36' href="javascript:ContentClick('label37', 'label36');" onmouseover="ContentPreview('label37');" onmouseout="ContentUnpreview('label37');" title="click to collapse or expand..."> more... </a> <div id="label37" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_scp</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_server_cert</span> - Server certificate that the FortiGate uses for HTTPS administrative connections. Source certificate.local.name. <span class="li-normal">type: str</span> <a id='label38' href="javascript:ContentClick('label39', 'label38');" onmouseover="ContentPreview('label39');" onmouseout="ContentUnpreview('label39');" title="click to collapse or expand..."> more... </a> <div id="label39" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_server_cert</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_sport</span> - Administrative access port for HTTPS. (1 - 65535). <span class="li-normal">type: int</span> <a id='label40' href="javascript:ContentClick('label41', 'label40');" onmouseover="ContentPreview('label41');" onmouseout="ContentUnpreview('label41');" title="click to collapse or expand..."> more... </a> <div id="label41" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_sport</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_ssh_grace_time</span> - Maximum time in seconds permitted between making an SSH connection to the FortiGate unit and authenticating (10 - 3600 sec (1 hour)). <span class="li-normal">type: int</span> <a id='label42' href="javascript:ContentClick('label43', 'label42');" onmouseover="ContentPreview('label43');" onmouseout="ContentUnpreview('label43');" title="click to collapse or expand..."> more... </a> <div id="label43" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_ssh_grace_time</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_ssh_password</span> - Enable/disable password authentication for SSH admin access. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label44' href="javascript:ContentClick('label45', 'label44');" onmouseover="ContentPreview('label45');" onmouseout="ContentUnpreview('label45');" title="click to collapse or expand..."> more... </a> <div id="label45" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_ssh_password</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_ssh_port</span> - Administrative access port for SSH. (1 - 65535). <span class="li-normal">type: int</span> <a id='label46' href="javascript:ContentClick('label47', 'label46');" onmouseover="ContentPreview('label47');" onmouseout="ContentUnpreview('label47');" title="click to collapse or expand..."> more... </a> <div id="label47" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_ssh_port</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admin_ssh_v1</span> - Enable/disable SSH v1 compatibility. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label48' href="javascript:ContentClick('label49', 'label48');" onmouseover="ContentPreview('label49');" onmouseout="ContentUnpreview('label49');" title="click to collapse or expand..."> more... </a> <div id="label49" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_ssh_v1</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_telnet</span> - Enable/disable TELNET service. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label50' href="javascript:ContentClick('label51', 'label50');" onmouseover="ContentPreview('label51');" onmouseout="ContentUnpreview('label51');" title="click to collapse or expand..."> more... </a> <div id="label51" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_telnet</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">admin_telnet_port</span> - Administrative access port for TELNET. (1 - 65535). <span class="li-normal">type: int</span> <a id='label52' href="javascript:ContentClick('label53', 'label52');" onmouseover="ContentPreview('label53');" onmouseout="ContentUnpreview('label53');" title="click to collapse or expand..."> more... </a> <div id="label53" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admin_telnet_port</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">admintimeout</span> - Number of minutes before an idle administrator session times out (1 - 480 minutes (8 hours)). A shorter idle timeout is more secure. <span class="li-normal">type: int</span> <a id='label54' href="javascript:ContentClick('label55', 'label54');" onmouseover="ContentPreview('label55');" onmouseout="ContentUnpreview('label55');" title="click to collapse or expand..."> more... </a> <div id="label55" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>admintimeout</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">alias</span> - Alias for your FortiGate unit. <span class="li-normal">type: str</span> <a id='label56' href="javascript:ContentClick('label57', 'label56');" onmouseover="ContentPreview('label57');" onmouseout="ContentUnpreview('label57');" title="click to collapse or expand..."> more... </a> <div id="label57" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>alias</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">allow_traffic_redirect</span> - Disable to prevent traffic with same local ingress and egress interface from being forwarded without policy check. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label58' href="javascript:ContentClick('label59', 'label58');" onmouseover="ContentPreview('label59');" onmouseout="ContentUnpreview('label59');" title="click to collapse or expand..."> more... </a> <div id="label59" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>allow_traffic_redirect</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">anti_replay</span> - Level of checking for packet replay and TCP sequence checking. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, loose, strict</span> <a id='label60' href="javascript:ContentClick('label61', 'label60');" onmouseover="ContentPreview('label61');" onmouseout="ContentUnpreview('label61');" title="click to collapse or expand..."> more... </a> <div id="label61" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>anti_replay</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[loose]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[strict]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">arp_max_entry</span> - Maximum number of dynamically learned MAC addresses that can be added to the ARP table (131072 - 2147483647). <span class="li-normal">type: int</span> <a id='label62' href="javascript:ContentClick('label63', 'label62');" onmouseover="ContentPreview('label63');" onmouseout="ContentUnpreview('label63');" title="click to collapse or expand..."> more... </a> <div id="label63" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>arp_max_entry</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">asymroute</span> - Enable/disable asymmetric route. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label64' href="javascript:ContentClick('label65', 'label64');" onmouseover="ContentPreview('label65');" onmouseout="ContentUnpreview('label65');" title="click to collapse or expand..."> more... </a> <div id="label65" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>asymroute</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </table> </div> </li> <li> <span class="li-head">auth_cert</span> - Server certificate that the FortiGate uses for HTTPS firewall authentication connections. Source certificate.local.name. <span class="li-normal">type: str</span> <a id='label66' href="javascript:ContentClick('label67', 'label66');" onmouseover="ContentPreview('label67');" onmouseout="ContentUnpreview('label67');" title="click to collapse or expand..."> more... </a> <div id="label67" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>auth_cert</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">auth_http_port</span> - User authentication HTTP port. (1 - 65535). <span class="li-normal">type: int</span> <a id='label68' href="javascript:ContentClick('label69', 'label68');" onmouseover="ContentPreview('label69');" onmouseout="ContentUnpreview('label69');" title="click to collapse or expand..."> more... </a> <div id="label69" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>auth_http_port</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">auth_https_port</span> - User authentication HTTPS port. (1 - 65535). <span class="li-normal">type: int</span> <a id='label70' href="javascript:ContentClick('label71', 'label70');" onmouseover="ContentPreview('label71');" onmouseout="ContentUnpreview('label71');" title="click to collapse or expand..."> more... </a> <div id="label71" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>auth_https_port</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">auth_ike_saml_port</span> - User IKE SAML authentication port (0 - 65535). <span class="li-normal">type: int</span> <a id='label72' href="javascript:ContentClick('label73', 'label72');" onmouseover="ContentPreview('label73');" onmouseout="ContentUnpreview('label73');" title="click to collapse or expand..."> more... </a> <div id="label73" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>auth_ike_saml_port</td> <td><code class="docutils literal notranslate">v7.2.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">auth_keepalive</span> - Enable to prevent user authentication sessions from timing out when idle. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label74' href="javascript:ContentClick('label75', 'label74');" onmouseover="ContentPreview('label75');" onmouseout="ContentUnpreview('label75');" title="click to collapse or expand..."> more... </a> <div id="label75" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>auth_keepalive</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">auth_session_limit</span> - Action to take when the number of allowed user authenticated sessions is reached. <span class="li-normal">type: str</span> <span class="li-normal">choices: block-new, logout-inactive</span> <a id='label76' href="javascript:ContentClick('label77', 'label76');" onmouseover="ContentPreview('label77');" onmouseout="ContentUnpreview('label77');" title="click to collapse or expand..."> more... </a> <div id="label77" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>auth_session_limit</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[block-new]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[logout-inactive]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">auto_auth_extension_device</span> - Enable/disable automatic authorization of dedicated Fortinet extension devices. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label78' href="javascript:ContentClick('label79', 'label78');" onmouseover="ContentPreview('label79');" onmouseout="ContentUnpreview('label79');" title="click to collapse or expand..."> more... </a> <div id="label79" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>auto_auth_extension_device</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">autorun_log_fsck</span> - Enable/disable automatic log partition check after ungraceful shutdown. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label80' href="javascript:ContentClick('label81', 'label80');" onmouseover="ContentPreview('label81');" onmouseout="ContentUnpreview('label81');" title="click to collapse or expand..."> more... </a> <div id="label81" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>autorun_log_fsck</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">av_affinity</span> - Affinity setting for AV scanning (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). <span class="li-normal">type: str</span> <a id='label82' href="javascript:ContentClick('label83', 'label82');" onmouseover="ContentPreview('label83');" onmouseout="ContentUnpreview('label83');" title="click to collapse or expand..."> more... </a> <div id="label83" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>av_affinity</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">av_failopen</span> - Set the action to take if the FortiGate is running low on memory or the proxy connection limit has been reached. <span class="li-normal">type: str</span> <span class="li-normal">choices: pass, off, one-shot</span> <a id='label84' href="javascript:ContentClick('label85', 'label84');" onmouseover="ContentPreview('label85');" onmouseout="ContentUnpreview('label85');" title="click to collapse or expand..."> more... </a> <div id="label85" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>av_failopen</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[pass]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[off]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[one-shot]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">av_failopen_session</span> - When enabled and a proxy for a protocol runs out of room in its session table, that protocol goes into failopen mode and enacts the action specified by av-failopen. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label86' href="javascript:ContentClick('label87', 'label86');" onmouseover="ContentPreview('label87');" onmouseout="ContentUnpreview('label87');" title="click to collapse or expand..."> more... </a> <div id="label87" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>av_failopen_session</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">batch_cmdb</span> - Enable/disable batch mode, allowing you to enter a series of CLI commands that will execute as a group once they are loaded. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label88' href="javascript:ContentClick('label89', 'label88');" onmouseover="ContentPreview('label89');" onmouseout="ContentUnpreview('label89');" title="click to collapse or expand..."> more... </a> <div id="label89" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>batch_cmdb</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">bfd_affinity</span> - Affinity setting for BFD daemon (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). <span class="li-normal">type: str</span> <a id='label90' href="javascript:ContentClick('label91', 'label90');" onmouseover="ContentPreview('label91');" onmouseout="ContentUnpreview('label91');" title="click to collapse or expand..."> more... </a> <div id="label91" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>bfd_affinity</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">block_session_timer</span> - Duration in seconds for blocked sessions (1 - 300 sec (5 minutes)). <span class="li-normal">type: int</span> <a id='label92' href="javascript:ContentClick('label93', 'label92');" onmouseover="ContentPreview('label93');" onmouseout="ContentUnpreview('label93');" title="click to collapse or expand..."> more... </a> <div id="label93" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>block_session_timer</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">br_fdb_max_entry</span> - Maximum number of bridge forwarding database (FDB) entries. <span class="li-normal">type: int</span> <a id='label94' href="javascript:ContentClick('label95', 'label94');" onmouseover="ContentPreview('label95');" onmouseout="ContentUnpreview('label95');" title="click to collapse or expand..."> more... </a> <div id="label95" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>br_fdb_max_entry</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">cert_chain_max</span> - Maximum number of certificates that can be traversed in a certificate chain. <span class="li-normal">type: int</span> <a id='label96' href="javascript:ContentClick('label97', 'label96');" onmouseover="ContentPreview('label97');" onmouseout="ContentUnpreview('label97');" title="click to collapse or expand..."> more... </a> <div id="label97" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>cert_chain_max</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">cfg_revert_timeout</span> - Time-out for reverting to the last saved configuration. (10 - 4294967295 seconds). <span class="li-normal">type: int</span> <a id='label98' href="javascript:ContentClick('label99', 'label98');" onmouseover="ContentPreview('label99');" onmouseout="ContentUnpreview('label99');" title="click to collapse or expand..."> more... </a> <div id="label99" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>cfg_revert_timeout</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">cfg_save</span> - Configuration file save mode for CLI changes. <span class="li-normal">type: str</span> <span class="li-normal">choices: automatic, manual, revert</span> <a id='label100' href="javascript:ContentClick('label101', 'label100');" onmouseover="ContentPreview('label101');" onmouseout="ContentUnpreview('label101');" title="click to collapse or expand..."> more... </a> <div id="label101" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>cfg_save</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[automatic]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[manual]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[revert]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">check_protocol_header</span> - Level of checking performed on protocol headers. Strict checking is more thorough but may affect performance. Loose checking is OK in most cases. <span class="li-normal">type: str</span> <span class="li-normal">choices: loose, strict</span> <a id='label102' href="javascript:ContentClick('label103', 'label102');" onmouseover="ContentPreview('label103');" onmouseout="ContentUnpreview('label103');" title="click to collapse or expand..."> more... </a> <div id="label103" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>check_protocol_header</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[loose]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[strict]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">check_reset_range</span> - Configure ICMP error message verification. You can either apply strict RST range checking or disable it. <span class="li-normal">type: str</span> <span class="li-normal">choices: strict, disable</span> <a id='label104' href="javascript:ContentClick('label105', 'label104');" onmouseover="ContentPreview('label105');" onmouseout="ContentUnpreview('label105');" title="click to collapse or expand..."> more... </a> <div id="label105" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>check_reset_range</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[strict]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">cli_audit_log</span> - Enable/disable CLI audit log. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label106' href="javascript:ContentClick('label107', 'label106');" onmouseover="ContentPreview('label107');" onmouseout="ContentUnpreview('label107');" title="click to collapse or expand..."> more... </a> <div id="label107" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>cli_audit_log</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">cloud_communication</span> - Enable/disable all cloud communication. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label108' href="javascript:ContentClick('label109', 'label108');" onmouseover="ContentPreview('label109');" onmouseout="ContentUnpreview('label109');" title="click to collapse or expand..."> more... </a> <div id="label109" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>cloud_communication</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">clt_cert_req</span> - Enable/disable requiring administrators to have a client certificate to log into the GUI using HTTPS. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label110' href="javascript:ContentClick('label111', 'label110');" onmouseover="ContentPreview('label111');" onmouseout="ContentUnpreview('label111');" title="click to collapse or expand..."> more... </a> <div id="label111" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>clt_cert_req</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">cmdbsvr_affinity</span> - Affinity setting for cmdbsvr (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). <span class="li-normal">type: str</span> <a id='label112' href="javascript:ContentClick('label113', 'label112');" onmouseover="ContentPreview('label113');" onmouseout="ContentUnpreview('label113');" title="click to collapse or expand..."> more... </a> <div id="label113" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>cmdbsvr_affinity</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">compliance_check</span> - Enable/disable global PCI DSS compliance check. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label114' href="javascript:ContentClick('label115', 'label114');" onmouseover="ContentPreview('label115');" onmouseout="ContentUnpreview('label115');" title="click to collapse or expand..."> more... </a> <div id="label115" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>compliance_check</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </table> </div> </li> <li> <span class="li-head">compliance_check_time</span> - Time of day to run scheduled PCI DSS compliance checks. <span class="li-normal">type: str</span> <a id='label116' href="javascript:ContentClick('label117', 'label116');" onmouseover="ContentPreview('label117');" onmouseout="ContentUnpreview('label117');" title="click to collapse or expand..."> more... </a> <div id="label117" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>compliance_check_time</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">cpu_use_threshold</span> - Threshold at which CPU usage is reported (% of total CPU). <span class="li-normal">type: int</span> <a id='label118' href="javascript:ContentClick('label119', 'label118');" onmouseover="ContentPreview('label119');" onmouseout="ContentUnpreview('label119');" title="click to collapse or expand..."> more... </a> <div id="label119" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>cpu_use_threshold</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">csr_ca_attribute</span> - Enable/disable the CA attribute in certificates. Some CA servers reject CSRs that have the CA attribute. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label120' href="javascript:ContentClick('label121', 'label120');" onmouseover="ContentPreview('label121');" onmouseout="ContentUnpreview('label121');" title="click to collapse or expand..."> more... </a> <div id="label121" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>csr_ca_attribute</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">daily_restart</span> - Enable/disable daily restart of FortiGate unit. Use the restart-time option to set the time of day for the restart. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label122' href="javascript:ContentClick('label123', 'label122');" onmouseover="ContentPreview('label123');" onmouseout="ContentUnpreview('label123');" title="click to collapse or expand..."> more... </a> <div id="label123" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>daily_restart</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">default_service_source_port</span> - Default service source port range . <span class="li-normal">type: str</span> <a id='label124' href="javascript:ContentClick('label125', 'label124');" onmouseover="ContentPreview('label125');" onmouseout="ContentUnpreview('label125');" title="click to collapse or expand..."> more... </a> <div id="label125" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>default_service_source_port</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">device_identification_active_scan_delay</span> - Number of seconds to passively scan a device before performing an active scan. (20 - 3600 sec, (20 sec to 1 hour)). <span class="li-normal">type: int</span> <a id='label126' href="javascript:ContentClick('label127', 'label126');" onmouseover="ContentPreview('label127');" onmouseout="ContentUnpreview('label127');" title="click to collapse or expand..."> more... </a> <div id="label127" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>device_identification_active_scan_delay</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.2.7 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">device_idle_timeout</span> - Time in seconds that a device must be idle to automatically log the device user out. (30 - 31536000 sec (30 sec to 1 year)). <span class="li-normal">type: int</span> <a id='label128' href="javascript:ContentClick('label129', 'label128');" onmouseover="ContentPreview('label129');" onmouseout="ContentUnpreview('label129');" title="click to collapse or expand..."> more... </a> <div id="label129" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>device_idle_timeout</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">dh_params</span> - Number of bits to use in the Diffie-Hellman exchange for HTTPS/SSH protocols. <span class="li-normal">type: str</span> <span class="li-normal">choices: 1024, 1536, 2048, 3072, 4096, 6144, 8192</span> <a id='label130' href="javascript:ContentClick('label131', 'label130');" onmouseover="ContentPreview('label131');" onmouseout="ContentUnpreview('label131');" title="click to collapse or expand..."> more... </a> <div id="label131" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>dh_params</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[1024]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[1536]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[2048]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[3072]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[4096]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[6144]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[8192]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">dnsproxy_worker_count</span> - DNS proxy worker count. For a FortiGate with multiple logical CPUs, you can set the DNS process number from 1 to the number of logical CPUs. <span class="li-normal">type: int</span> <a id='label132' href="javascript:ContentClick('label133', 'label132');" onmouseover="ContentPreview('label133');" onmouseout="ContentUnpreview('label133');" title="click to collapse or expand..."> more... </a> <div id="label133" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>dnsproxy_worker_count</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">dst</span> - Enable/disable daylight saving time. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label134' href="javascript:ContentClick('label135', 'label134');" onmouseover="ContentPreview('label135');" onmouseout="ContentUnpreview('label135');" title="click to collapse or expand..."> more... </a> <div id="label135" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>dst</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.0 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.0</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.0</code></td> </table> </div> </li> <li> <span class="li-head">early_tcp_npu_session</span> - Enable/disable early TCP NPU session. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label136' href="javascript:ContentClick('label137', 'label136');" onmouseover="ContentPreview('label137');" onmouseout="ContentUnpreview('label137');" title="click to collapse or expand..."> more... </a> <div id="label137" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>early_tcp_npu_session</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12 </code></td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12</code></td> </table> </div> </li> <li> <span class="li-head">edit_vdom_prompt</span> - Enable/disable edit new VDOM prompt. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label138' href="javascript:ContentClick('label139', 'label138');" onmouseover="ContentPreview('label139');" onmouseout="ContentUnpreview('label139');" title="click to collapse or expand..."> more... </a> <div id="label139" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>edit_vdom_prompt</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">endpoint_control_fds_access</span> - Enable/disable access to the FortiGuard network for non-compliant endpoints. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label140' href="javascript:ContentClick('label141', 'label140');" onmouseover="ContentPreview('label141');" onmouseout="ContentUnpreview('label141');" title="click to collapse or expand..."> more... </a> <div id="label141" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>endpoint_control_fds_access</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </table> </div> </li> <li> <span class="li-head">endpoint_control_portal_port</span> - Endpoint control portal port (1 - 65535). <span class="li-normal">type: int</span> <a id='label142' href="javascript:ContentClick('label143', 'label142');" onmouseover="ContentPreview('label143');" onmouseout="ContentUnpreview('label143');" title="click to collapse or expand..."> more... </a> <div id="label143" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>endpoint_control_portal_port</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">extender_controller_reserved_network</span> - Configure reserved network subnet for managed LAN extension FortiExtender units. This is available when the FortiExtender daemon is running. <span class="li-normal">type: str</span> <a id='label144' href="javascript:ContentClick('label145', 'label144');" onmouseover="ContentPreview('label145');" onmouseout="ContentUnpreview('label145');" title="click to collapse or expand..."> more... </a> <div id="label145" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>extender_controller_reserved_network</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">failtime</span> - Fail-time for server lost. <span class="li-normal">type: int</span> <a id='label146' href="javascript:ContentClick('label147', 'label146');" onmouseover="ContentPreview('label147');" onmouseout="ContentUnpreview('label147');" title="click to collapse or expand..."> more... </a> <div id="label147" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>failtime</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">faz_disk_buffer_size</span> - Maximum disk buffer size to temporarily store logs destined for FortiAnalyzer. To be used in the event that FortiAnalyzer is unavailable. <span class="li-normal">type: int</span> <a id='label148' href="javascript:ContentClick('label149', 'label148');" onmouseover="ContentPreview('label149');" onmouseout="ContentUnpreview('label149');" title="click to collapse or expand..."> more... </a> <div id="label149" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>faz_disk_buffer_size</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">fds_statistics</span> - Enable/disable sending IPS, Application Control, and AntiVirus data to FortiGuard. This data is used to improve FortiGuard services and is not shared with external parties and is protected by Fortinet"s privacy policy. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label150' href="javascript:ContentClick('label151', 'label150');" onmouseover="ContentPreview('label151');" onmouseout="ContentUnpreview('label151');" title="click to collapse or expand..."> more... </a> <div id="label151" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fds_statistics</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">fds_statistics_period</span> - FortiGuard statistics collection period in minutes. (1 - 1440 min (1 min to 24 hours)). <span class="li-normal">type: int</span> <a id='label152' href="javascript:ContentClick('label153', 'label152');" onmouseover="ContentPreview('label153');" onmouseout="ContentUnpreview('label153');" title="click to collapse or expand..."> more... </a> <div id="label153" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fds_statistics_period</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">fec_port</span> - Local UDP port for Forward Error Correction (49152 - 65535). <span class="li-normal">type: int</span> <a id='label154' href="javascript:ContentClick('label155', 'label154');" onmouseover="ContentPreview('label155');" onmouseout="ContentUnpreview('label155');" title="click to collapse or expand..."> more... </a> <div id="label155" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fec_port</td> <td><code class="docutils literal notranslate">v6.2.0 -> v7.0.1 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">fgd_alert_subscription</span> - Type of alert to retrieve from FortiGuard. <span class="li-normal">type: list</span> <span class="li-normal">choices: advisory, latest-threat, latest-virus, latest-attack, new-antivirus-db, new-attack-db</span> <a id='label156' href="javascript:ContentClick('label157', 'label156');" onmouseover="ContentPreview('label157');" onmouseout="ContentUnpreview('label157');" title="click to collapse or expand..."> more... </a> <div id="label157" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fgd_alert_subscription</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[advisory]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[latest-threat]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[latest-virus]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[latest-attack]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[new-antivirus-db]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[new-attack-db]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">forticarrier_bypass</span> - Enable/disable forticarrier-bypass. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label158' href="javascript:ContentClick('label159', 'label158');" onmouseover="ContentPreview('label159');" onmouseout="ContentUnpreview('label159');" title="click to collapse or expand..."> more... </a> <div id="label159" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>forticarrier_bypass</td> <td><code class="docutils literal notranslate">v7.0.4 -> v7.0.5 </code></td> <td><code class="docutils literal notranslate">v7.2.0 -> v7.2.0 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.4 -> v7.0.5</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.4 -> v7.0.5</code></td> </table> </div> </li> <li> <span class="li-head">forticonverter_config_upload</span> - Enable/disable config upload to FortiConverter. <span class="li-normal">type: str</span> <span class="li-normal">choices: once, disable</span> <a id='label160' href="javascript:ContentClick('label161', 'label160');" onmouseover="ContentPreview('label161');" onmouseout="ContentUnpreview('label161');" title="click to collapse or expand..."> more... </a> <div id="label161" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>forticonverter_config_upload</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3 </code></td> </tr> <tr> <td>[once]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">forticonverter_integration</span> - Enable/disable FortiConverter integration service. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label162' href="javascript:ContentClick('label163', 'label162');" onmouseover="ContentPreview('label163');" onmouseout="ContentUnpreview('label163');" title="click to collapse or expand..."> more... </a> <div id="label163" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>forticonverter_integration</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">fortiextender</span> - Enable/disable FortiExtender. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label164' href="javascript:ContentClick('label165', 'label164');" onmouseover="ContentPreview('label165');" onmouseout="ContentUnpreview('label165');" title="click to collapse or expand..."> more... </a> <div id="label165" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortiextender</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">fortiextender_data_port</span> - FortiExtender data port (1024 - 49150). <span class="li-normal">type: int</span> <a id='label166' href="javascript:ContentClick('label167', 'label166');" onmouseover="ContentPreview('label167');" onmouseout="ContentUnpreview('label167');" title="click to collapse or expand..."> more... </a> <div id="label167" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortiextender_data_port</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">fortiextender_discovery_lockdown</span> - Enable/disable FortiExtender CAPWAP lockdown. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label168' href="javascript:ContentClick('label169', 'label168');" onmouseover="ContentPreview('label169');" onmouseout="ContentUnpreview('label169');" title="click to collapse or expand..."> more... </a> <div id="label169" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortiextender_discovery_lockdown</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">fortiextender_provision_on_authorization</span> - Enable/disable automatic provisioning of latest FortiExtender firmware on authorization. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label170' href="javascript:ContentClick('label171', 'label170');" onmouseover="ContentPreview('label171');" onmouseout="ContentUnpreview('label171');" title="click to collapse or expand..."> more... </a> <div id="label171" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortiextender_provision_on_authorization</td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">fortiextender_vlan_mode</span> - Enable/disable FortiExtender VLAN mode. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label172' href="javascript:ContentClick('label173', 'label172');" onmouseover="ContentPreview('label173');" onmouseout="ContentUnpreview('label173');" title="click to collapse or expand..."> more... </a> <div id="label173" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortiextender_vlan_mode</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">fortigslb_integration</span> - Enable/disable integration with the FortiGSLB cloud service. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label174' href="javascript:ContentClick('label175', 'label174');" onmouseover="ContentPreview('label175');" onmouseout="ContentUnpreview('label175');" title="click to collapse or expand..."> more... </a> <div id="label175" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortigslb_integration</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">fortiipam_integration</span> - Enable/disable integration with the FortiIPAM cloud service. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label176' href="javascript:ContentClick('label177', 'label176');" onmouseover="ContentPreview('label177');" onmouseout="ContentUnpreview('label177');" title="click to collapse or expand..."> more... </a> <div id="label177" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortiipam_integration</td> <td><code class="docutils literal notranslate">v6.4.4 -> v7.0.1 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.4.4 -> v7.0.1</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.4.4 -> v7.0.1</code></td> </table> </div> </li> <li> <span class="li-head">fortiservice_port</span> - FortiService port (1 - 65535). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port. <span class="li-normal">type: int</span> <a id='label178' href="javascript:ContentClick('label179', 'label178');" onmouseover="ContentPreview('label179');" onmouseout="ContentUnpreview('label179');" title="click to collapse or expand..."> more... </a> <div id="label179" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortiservice_port</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">fortitoken_cloud</span> - Enable/disable FortiToken Cloud service. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label180' href="javascript:ContentClick('label181', 'label180');" onmouseover="ContentPreview('label181');" onmouseout="ContentUnpreview('label181');" title="click to collapse or expand..."> more... </a> <div id="label181" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortitoken_cloud</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">fortitoken_cloud_push_status</span> - Enable/disable FTM push service of FortiToken Cloud. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label182' href="javascript:ContentClick('label183', 'label182');" onmouseover="ContentPreview('label183');" onmouseout="ContentUnpreview('label183');" title="click to collapse or expand..."> more... </a> <div id="label183" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortitoken_cloud_push_status</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">fortitoken_cloud_sync_interval</span> - Interval in which to clean up remote users in FortiToken Cloud (0 - 336 hours (14 days)). <span class="li-normal">type: int</span> <a id='label184' href="javascript:ContentClick('label185', 'label184');" onmouseover="ContentPreview('label185');" onmouseout="ContentUnpreview('label185');" title="click to collapse or expand..."> more... </a> <div id="label185" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>fortitoken_cloud_sync_interval</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">gui_allow_default_hostname</span> - Enable/disable the factory default hostname warning on the GUI setup wizard. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label186' href="javascript:ContentClick('label187', 'label186');" onmouseover="ContentPreview('label187');" onmouseout="ContentUnpreview('label187');" title="click to collapse or expand..."> more... </a> <div id="label187" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_allow_default_hostname</td> <td><code class="docutils literal notranslate">v6.2.0 -> v7.4.0 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> v7.4.0</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> v7.4.0</code></td> </table> </div> </li> <li> <span class="li-head">gui_allow_incompatible_fabric_fgt</span> - Enable/disable Allow FGT with incompatible firmware to be treated as compatible in security fabric on the GUI. May cause unexpected error. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label188' href="javascript:ContentClick('label189', 'label188');" onmouseover="ContentPreview('label189');" onmouseout="ContentUnpreview('label189');" title="click to collapse or expand..."> more... </a> <div id="label189" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>gui_allow_incompatible_fabric_fgt</td> <td><code class="docutils literal notranslate">v7.0.12 -> v7.0.12 </code></td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.12 -> v7.0.12</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.12 -> v7.0.12</code></td> </table> </div> </li> <li> <span class="li-head">gui_app_detection_sdwan</span> - Enable/disable Allow app-detection based SD-WAN. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label190' href="javascript:ContentClick('label191', 'label190');" onmouseover="ContentPreview('label191');" onmouseout="ContentUnpreview('label191');" title="click to collapse or expand..."> more... </a> <div id="label191" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_app_detection_sdwan</td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_auto_upgrade_setup_warning</span> - Enable/disable the automatic patch upgrade setup prompt on the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label192' href="javascript:ContentClick('label193', 'label192');" onmouseover="ContentPreview('label193');" onmouseout="ContentUnpreview('label193');" title="click to collapse or expand..."> more... </a> <div id="label193" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_auto_upgrade_setup_warning</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_cdn_domain_override</span> - Domain of CDN server. <span class="li-normal">type: str</span> <a id='label194' href="javascript:ContentClick('label195', 'label194');" onmouseover="ContentPreview('label195');" onmouseout="ContentUnpreview('label195');" title="click to collapse or expand..."> more... </a> <div id="label195" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>gui_cdn_domain_override</td> <td><code class="docutils literal notranslate">v7.0.12 -> v7.0.12 </code></td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">gui_cdn_usage</span> - Enable/disable Load GUI static files from a CDN. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label196' href="javascript:ContentClick('label197', 'label196');" onmouseover="ContentPreview('label197');" onmouseout="ContentUnpreview('label197');" title="click to collapse or expand..."> more... </a> <div id="label197" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_cdn_usage</td> <td><code class="docutils literal notranslate">v7.0.4 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.4 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.4 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_certificates</span> - Enable/disable the System > Certificate GUI page, allowing you to add and configure certificates from the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label198' href="javascript:ContentClick('label199', 'label198');" onmouseover="ContentPreview('label199');" onmouseout="ContentUnpreview('label199');" title="click to collapse or expand..."> more... </a> <div id="label199" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_certificates</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_custom_language</span> - Enable/disable custom languages in GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label200' href="javascript:ContentClick('label201', 'label200');" onmouseover="ContentPreview('label201');" onmouseout="ContentUnpreview('label201');" title="click to collapse or expand..."> more... </a> <div id="label201" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_custom_language</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_date_format</span> - Default date format used throughout GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: yyyy/MM/dd, dd/MM/yyyy, MM/dd/yyyy, yyyy-MM-dd, dd-MM-yyyy, MM-dd-yyyy</span> <a id='label202' href="javascript:ContentClick('label203', 'label202');" onmouseover="ContentPreview('label203');" onmouseout="ContentUnpreview('label203');" title="click to collapse or expand..."> more... </a> <div id="label203" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_date_format</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[yyyy/MM/dd]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[dd/MM/yyyy]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[MM/dd/yyyy]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[yyyy-MM-dd]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[dd-MM-yyyy]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[MM-dd-yyyy]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_date_time_source</span> - Source from which the FortiGate GUI uses to display date and time entries. <span class="li-normal">type: str</span> <span class="li-normal">choices: system, browser</span> <a id='label204' href="javascript:ContentClick('label205', 'label204');" onmouseover="ContentPreview('label205');" onmouseout="ContentUnpreview('label205');" title="click to collapse or expand..."> more... </a> <div id="label205" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_date_time_source</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> <tr> <td>[system]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> <tr> <td>[browser]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_device_latitude</span> - Add the latitude of the location of this FortiGate to position it on the Threat Map. <span class="li-normal">type: str</span> <a id='label206' href="javascript:ContentClick('label207', 'label206');" onmouseover="ContentPreview('label207');" onmouseout="ContentUnpreview('label207');" title="click to collapse or expand..."> more... </a> <div id="label207" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_device_latitude</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">gui_device_longitude</span> - Add the longitude of the location of this FortiGate to position it on the Threat Map. <span class="li-normal">type: str</span> <a id='label208' href="javascript:ContentClick('label209', 'label208');" onmouseover="ContentPreview('label209');" onmouseout="ContentUnpreview('label209');" title="click to collapse or expand..."> more... </a> <div id="label209" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_device_longitude</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">gui_display_hostname</span> - Enable/disable displaying the FortiGate"s hostname on the GUI login page. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label210' href="javascript:ContentClick('label211', 'label210');" onmouseover="ContentPreview('label211');" onmouseout="ContentUnpreview('label211');" title="click to collapse or expand..."> more... </a> <div id="label211" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_display_hostname</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_firmware_upgrade_warning</span> - Enable/disable the firmware upgrade warning on the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label212' href="javascript:ContentClick('label213', 'label212');" onmouseover="ContentPreview('label213');" onmouseout="ContentUnpreview('label213');" title="click to collapse or expand..."> more... </a> <div id="label213" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_firmware_upgrade_warning</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_forticare_registration_setup_warning</span> - Enable/disable the FortiCare registration setup warning on the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label214' href="javascript:ContentClick('label215', 'label214');" onmouseover="ContentPreview('label215');" onmouseout="ContentUnpreview('label215');" title="click to collapse or expand..."> more... </a> <div id="label215" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_forticare_registration_setup_warning</td> <td><code class="docutils literal notranslate">v6.4.4 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.4.4 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.4.4 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_fortigate_cloud_sandbox</span> - Enable/disable displaying FortiGate Cloud Sandbox on the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label216' href="javascript:ContentClick('label217', 'label216');" onmouseover="ContentPreview('label217');" onmouseout="ContentUnpreview('label217');" title="click to collapse or expand..."> more... </a> <div id="label217" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_fortigate_cloud_sandbox</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_fortiguard_resource_fetch</span> - Enable/disable retrieving static GUI resources from FortiGuard. Disabling it will improve GUI load time for air-gapped environments. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label218' href="javascript:ContentClick('label219', 'label218');" onmouseover="ContentPreview('label219');" onmouseout="ContentUnpreview('label219');" title="click to collapse or expand..."> more... </a> <div id="label219" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_fortiguard_resource_fetch</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12</code></td> </table> </div> </li> <li> <span class="li-head">gui_fortisandbox_cloud</span> - Enable/disable displaying FortiSandbox Cloud on the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label220' href="javascript:ContentClick('label221', 'label220');" onmouseover="ContentPreview('label221');" onmouseout="ContentUnpreview('label221');" title="click to collapse or expand..."> more... </a> <div id="label221" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_fortisandbox_cloud</td> <td><code class="docutils literal notranslate">v6.2.0 -> v6.4.4 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> v6.4.4</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> v6.4.4</code></td> </table> </div> </li> <li> <span class="li-head">gui_ipv6</span> - Enable/disable IPv6 settings on the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label222' href="javascript:ContentClick('label223', 'label222');" onmouseover="ContentPreview('label223');" onmouseout="ContentUnpreview('label223');" title="click to collapse or expand..."> more... </a> <div id="label223" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_ipv6</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_lines_per_page</span> - Number of lines to display per page for web administration. <span class="li-normal">type: int</span> <a id='label224' href="javascript:ContentClick('label225', 'label224');" onmouseover="ContentPreview('label225');" onmouseout="ContentUnpreview('label225');" title="click to collapse or expand..."> more... </a> <div id="label225" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>gui_lines_per_page</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.2.7 </code></td> <td><code class="docutils literal notranslate">v6.4.1 -> v6.4.1 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">gui_local_out</span> - Enable/disable Local-out traffic on the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label226' href="javascript:ContentClick('label227', 'label226');" onmouseover="ContentPreview('label227');" onmouseout="ContentUnpreview('label227');" title="click to collapse or expand..."> more... </a> <div id="label227" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_local_out</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_replacement_message_groups</span> - Enable/disable replacement message groups on the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label228' href="javascript:ContentClick('label229', 'label228');" onmouseover="ContentPreview('label229');" onmouseout="ContentUnpreview('label229');" title="click to collapse or expand..."> more... </a> <div id="label229" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_replacement_message_groups</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_rest_api_cache</span> - Enable/disable REST API result caching on FortiGate. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label230' href="javascript:ContentClick('label231', 'label230');" onmouseover="ContentPreview('label231');" onmouseout="ContentUnpreview('label231');" title="click to collapse or expand..."> more... </a> <div id="label231" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_rest_api_cache</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_theme</span> - Color scheme for the administration GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: jade, neutrino, mariner, graphite, melongene, jet-stream, security-fabric, retro, dark-matter, onyx, eclipse, green, blue, red</span> <a id='label232' href="javascript:ContentClick('label233', 'label232');" onmouseover="ContentPreview('label233');" onmouseout="ContentUnpreview('label233');" title="click to collapse or expand..."> more... </a> <div id="label233" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_theme</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[jade]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[neutrino]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> </tr> <tr> <td>[mariner]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[graphite]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[melongene]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[jet-stream]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> </tr> <tr> <td>[security-fabric]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> </tr> <tr> <td>[retro]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[dark-matter]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[onyx]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[eclipse]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[green]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.4.4</code></td> </tr> <tr> <td>[blue]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.4.4</code></td> </tr> <tr> <td>[red]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </tr> </table> </div> </li> <li> <span class="li-head">gui_wireless_opensecurity</span> - Enable/disable wireless open security option on the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label234' href="javascript:ContentClick('label235', 'label234');" onmouseover="ContentPreview('label235');" onmouseout="ContentUnpreview('label235');" title="click to collapse or expand..."> more... </a> <div id="label235" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_wireless_opensecurity</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">gui_workflow_management</span> - Enable/disable Workflow management features on the GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label236' href="javascript:ContentClick('label237', 'label236');" onmouseover="ContentPreview('label237');" onmouseout="ContentUnpreview('label237');" title="click to collapse or expand..."> more... </a> <div id="label237" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>gui_workflow_management</td> <td><code class="docutils literal notranslate">v7.2.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.2.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.2.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">ha_affinity</span> - Affinity setting for HA daemons (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). <span class="li-normal">type: str</span> <a id='label238' href="javascript:ContentClick('label239', 'label238');" onmouseover="ContentPreview('label239');" onmouseout="ContentUnpreview('label239');" title="click to collapse or expand..."> more... </a> <div id="label239" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ha_affinity</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">honor_df</span> - Enable/disable honoring of Don"t-Fragment (DF) flag. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label240' href="javascript:ContentClick('label241', 'label240');" onmouseover="ContentPreview('label241');" onmouseout="ContentUnpreview('label241');" title="click to collapse or expand..."> more... </a> <div id="label241" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>honor_df</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">hostname</span> - FortiGate unit"s hostname. Most models will truncate names longer than 24 characters. Some models support hostnames up to 35 characters. <span class="li-normal">type: str</span> <a id='label242' href="javascript:ContentClick('label243', 'label242');" onmouseover="ContentPreview('label243');" onmouseout="ContentUnpreview('label243');" title="click to collapse or expand..."> more... </a> <div id="label243" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>hostname</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">igmp_state_limit</span> - Maximum number of IGMP memberships (96 - 64000). <span class="li-normal">type: int</span> <a id='label244' href="javascript:ContentClick('label245', 'label244');" onmouseover="ContentPreview('label245');" onmouseout="ContentUnpreview('label245');" title="click to collapse or expand..."> more... </a> <div id="label245" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>igmp_state_limit</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">interface_subnet_usage</span> - Enable/disable allowing use of interface-subnet setting in firewall addresses . <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label246' href="javascript:ContentClick('label247', 'label246');" onmouseover="ContentPreview('label247');" onmouseout="ContentUnpreview('label247');" title="click to collapse or expand..."> more... </a> <div id="label247" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>interface_subnet_usage</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">internet_service_database</span> - Configure which Internet Service database size to download from FortiGuard and use. <span class="li-normal">type: str</span> <span class="li-normal">choices: mini, standard, full, on-demand</span> <a id='label248' href="javascript:ContentClick('label249', 'label248');" onmouseover="ContentPreview('label249');" onmouseout="ContentUnpreview('label249');" title="click to collapse or expand..."> more... </a> <div id="label249" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>internet_service_database</td> <td><code class="docutils literal notranslate">v7.0.4 -> 7.4.3 </code></td> </tr> <tr> <td>[mini]</td> <td><code class="docutils literal notranslate">v7.0.4 -> 7.4.3</code></td> <tr> <td>[standard]</td> <td><code class="docutils literal notranslate">v7.0.4 -> 7.4.3</code></td> <tr> <td>[full]</td> <td><code class="docutils literal notranslate">v7.0.4 -> 7.4.3</code></td> <tr> <td>[on-demand]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> </tr> </table> </div> </li> <li> <span class="li-head">internet_service_download_list</span> - Configure which on-demand Internet Service IDs are to be downloaded. <span class="li-normal">type: list</span> <span style="font-family:'Courier New'" class="li-required">member_path: internet_service_download_list:id</span> <a id='label250' href="javascript:ContentClick('label251', 'label250');" onmouseover="ContentPreview('label251');" onmouseout="ContentUnpreview('label251');" title="click to collapse or expand..."> more... </a> <div id="label251" style="display:none"> <table border="1"> <tr> <td></td><td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>internet_service_download_list</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <ul class="ul-self"> <li> <span class="li-head">id</span> - Internet Service ID. see <a href='#notes'>Notes</a>. Source firewall.internet-service.id. <span class="li-normal">type: int</span> <span class="li-required">required: true</span> <a id='label252' href="javascript:ContentClick('label253', 'label252');" onmouseover="ContentPreview('label253');" onmouseout="ContentUnpreview('label253');" title="click to collapse or expand..."> more... </a> <div id="label253" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>id</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> </ul> <li> <span class="li-head">interval</span> - Dead gateway detection interval. <span class="li-normal">type: int</span> <a id='label254' href="javascript:ContentClick('label255', 'label254');" onmouseover="ContentPreview('label255');" onmouseout="ContentUnpreview('label255');" title="click to collapse or expand..."> more... </a> <div id="label255" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>interval</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ip_fragment_mem_thresholds</span> - Maximum memory (MB) used to reassemble IPv4/IPv6 fragments. <span class="li-normal">type: int</span> <a id='label256' href="javascript:ContentClick('label257', 'label256');" onmouseover="ContentPreview('label257');" onmouseout="ContentUnpreview('label257');" title="click to collapse or expand..."> more... </a> <div id="label257" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>ip_fragment_mem_thresholds</td> <td><code class="docutils literal notranslate">v7.0.8 -> v7.0.12 </code></td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ip_src_port_range</span> - IP source port range used for traffic originating from the FortiGate unit. <span class="li-normal">type: str</span> <a id='label258' href="javascript:ContentClick('label259', 'label258');" onmouseover="ContentPreview('label259');" onmouseout="ContentUnpreview('label259');" title="click to collapse or expand..."> more... </a> <div id="label259" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ip_src_port_range</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ips_affinity</span> - Affinity setting for IPS (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx; allowed CPUs must be less than total number of IPS engine daemons). <span class="li-normal">type: str</span> <a id='label260' href="javascript:ContentClick('label261', 'label260');" onmouseover="ContentPreview('label261');" onmouseout="ContentUnpreview('label261');" title="click to collapse or expand..."> more... </a> <div id="label261" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>ips_affinity</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.4.1 </code></td> <td><code class="docutils literal notranslate">v7.4.3 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ipsec_asic_offload</span> - Enable/disable ASIC offloading (hardware acceleration) for IPsec VPN traffic. Hardware acceleration can offload IPsec VPN sessions and accelerate encryption and decryption. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label262' href="javascript:ContentClick('label263', 'label262');" onmouseover="ContentPreview('label263');" onmouseout="ContentUnpreview('label263');" title="click to collapse or expand..."> more... </a> <div id="label263" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ipsec_asic_offload</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">ipsec_ha_seqjump_rate</span> - ESP jump ahead rate (1G - 10G pps equivalent). <span class="li-normal">type: int</span> <a id='label264' href="javascript:ContentClick('label265', 'label264');" onmouseover="ContentPreview('label265');" onmouseout="ContentUnpreview('label265');" title="click to collapse or expand..."> more... </a> <div id="label265" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ipsec_ha_seqjump_rate</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ipsec_hmac_offload</span> - Enable/disable offloading (hardware acceleration) of HMAC processing for IPsec VPN. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label266' href="javascript:ContentClick('label267', 'label266');" onmouseover="ContentPreview('label267');" onmouseout="ContentUnpreview('label267');" title="click to collapse or expand..."> more... </a> <div id="label267" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ipsec_hmac_offload</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">ipsec_round_robin</span> - Enable/disable round-robin redistribution to multiple CPUs for IPsec VPN traffic. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label268' href="javascript:ContentClick('label269', 'label268');" onmouseover="ContentPreview('label269');" onmouseout="ContentUnpreview('label269');" title="click to collapse or expand..."> more... </a> <div id="label269" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ipsec_round_robin</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12</code></td> <td><code class="docutils literal notranslate">v7.2.1 -> v7.2.2</code></td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12</code></td> <td><code class="docutils literal notranslate">v7.2.1 -> v7.2.2</code></td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> </tr> </table> </div> </li> <li> <span class="li-head">ipsec_soft_dec_async</span> - Enable/disable software decryption asynchronization (using multiple CPUs to do decryption) for IPsec VPN traffic. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label270' href="javascript:ContentClick('label271', 'label270');" onmouseover="ContentPreview('label271');" onmouseout="ContentUnpreview('label271');" title="click to collapse or expand..."> more... </a> <div id="label271" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ipsec_soft_dec_async</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.4.1 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.4.1</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.4.1</code></td> </table> </div> </li> <li> <span class="li-head">ipv6_accept_dad</span> - Enable/disable acceptance of IPv6 Duplicate Address Detection (DAD). <span class="li-normal">type: int</span> <a id='label272' href="javascript:ContentClick('label273', 'label272');" onmouseover="ContentPreview('label273');" onmouseout="ContentUnpreview('label273');" title="click to collapse or expand..."> more... </a> <div id="label273" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ipv6_accept_dad</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ipv6_allow_anycast_probe</span> - Enable/disable IPv6 address probe through Anycast. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label274' href="javascript:ContentClick('label275', 'label274');" onmouseover="ContentPreview('label275');" onmouseout="ContentUnpreview('label275');" title="click to collapse or expand..."> more... </a> <div id="label275" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ipv6_allow_anycast_probe</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">ipv6_allow_local_in_slient_drop</span> - Enable/disable silent drop of IPv6 local-in traffic. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label276' href="javascript:ContentClick('label277', 'label276');" onmouseover="ContentPreview('label277');" onmouseout="ContentUnpreview('label277');" title="click to collapse or expand..."> more... </a> <div id="label277" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>ipv6_allow_local_in_slient_drop</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12 </code></td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12</code></td> </table> </div> </li> <li> <span class="li-head">ipv6_allow_multicast_probe</span> - Enable/disable IPv6 address probe through Multicast. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label278' href="javascript:ContentClick('label279', 'label278');" onmouseover="ContentPreview('label279');" onmouseout="ContentUnpreview('label279');" title="click to collapse or expand..."> more... </a> <div id="label279" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>ipv6_allow_multicast_probe</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12 </code></td> <td><code class="docutils literal notranslate">v7.2.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.6 -> v7.0.12</code></td> </table> </div> </li> <li> <span class="li-head">ipv6_allow_traffic_redirect</span> - Disable to prevent IPv6 traffic with same local ingress and egress interface from being forwarded without policy check. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label280' href="javascript:ContentClick('label281', 'label280');" onmouseover="ContentPreview('label281');" onmouseout="ContentUnpreview('label281');" title="click to collapse or expand..."> more... </a> <div id="label281" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ipv6_allow_traffic_redirect</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">irq_time_accounting</span> - Configure CPU IRQ time accounting mode. <span class="li-normal">type: str</span> <span class="li-normal">choices: auto, force</span> <a id='label282' href="javascript:ContentClick('label283', 'label282');" onmouseover="ContentPreview('label283');" onmouseout="ContentUnpreview('label283');" title="click to collapse or expand..."> more... </a> <div id="label283" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>irq_time_accounting</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3 </code></td> </tr> <tr> <td>[auto]</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3</code></td> <tr> <td>[force]</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">language</span> - GUI display language. <span class="li-normal">type: str</span> <span class="li-normal">choices: english, french, spanish, portuguese, japanese, trach, simch, korean</span> <a id='label284' href="javascript:ContentClick('label285', 'label284');" onmouseover="ContentPreview('label285');" onmouseout="ContentUnpreview('label285');" title="click to collapse or expand..."> more... </a> <div id="label285" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>language</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[english]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[french]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[spanish]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[portuguese]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[japanese]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[trach]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[simch]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[korean]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">ldapconntimeout</span> - Global timeout for connections with remote LDAP servers in milliseconds (1 - 300000). <span class="li-normal">type: int</span> <a id='label286' href="javascript:ContentClick('label287', 'label286');" onmouseover="ContentPreview('label287');" onmouseout="ContentUnpreview('label287');" title="click to collapse or expand..."> more... </a> <div id="label287" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ldapconntimeout</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">lldp_reception</span> - Enable/disable Link Layer Discovery Protocol (LLDP) reception. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label288' href="javascript:ContentClick('label289', 'label288');" onmouseover="ContentPreview('label289');" onmouseout="ContentUnpreview('label289');" title="click to collapse or expand..."> more... </a> <div id="label289" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>lldp_reception</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">lldp_transmission</span> - Enable/disable Link Layer Discovery Protocol (LLDP) transmission. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label290' href="javascript:ContentClick('label291', 'label290');" onmouseover="ContentPreview('label291');" onmouseout="ContentUnpreview('label291');" title="click to collapse or expand..."> more... </a> <div id="label291" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>lldp_transmission</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">log_single_cpu_high</span> - Enable/disable logging the event of a single CPU core reaching CPU usage threshold. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label292' href="javascript:ContentClick('label293', 'label292');" onmouseover="ContentPreview('label293');" onmouseout="ContentUnpreview('label293');" title="click to collapse or expand..."> more... </a> <div id="label293" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>log_single_cpu_high</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">log_ssl_connection</span> - Enable/disable logging of SSL connection events. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label294' href="javascript:ContentClick('label295', 'label294');" onmouseover="ContentPreview('label295');" onmouseout="ContentUnpreview('label295');" title="click to collapse or expand..."> more... </a> <div id="label295" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>log_ssl_connection</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">log_uuid</span> - Whether UUIDs are added to traffic logs. You can disable UUIDs, add firewall policy UUIDs to traffic logs, or add all UUIDs to traffic logs. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, policy-only, extended</span> <a id='label296' href="javascript:ContentClick('label297', 'label296');" onmouseover="ContentPreview('label297');" onmouseout="ContentUnpreview('label297');" title="click to collapse or expand..."> more... </a> <div id="label297" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>log_uuid</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> <tr> <td>[policy-only]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> <tr> <td>[extended]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </table> </div> </li> <li> <span class="li-head">log_uuid_address</span> - Enable/disable insertion of address UUIDs to traffic logs. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label298' href="javascript:ContentClick('label299', 'label298');" onmouseover="ContentPreview('label299');" onmouseout="ContentUnpreview('label299');" title="click to collapse or expand..."> more... </a> <div id="label299" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>log_uuid_address</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">log_uuid_policy</span> - Enable/disable insertion of policy UUIDs to traffic logs. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label300' href="javascript:ContentClick('label301', 'label300');" onmouseover="ContentPreview('label301');" onmouseout="ContentUnpreview('label301');" title="click to collapse or expand..."> more... </a> <div id="label301" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>log_uuid_policy</td> <td><code class="docutils literal notranslate">v6.2.0 -> v6.2.7 </code></td> <td><code class="docutils literal notranslate">v6.4.1 -> v6.4.1 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> v6.2.7</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> v6.2.7</code></td> </table> </div> </li> <li> <span class="li-head">login_timestamp</span> - Enable/disable login time recording. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label302' href="javascript:ContentClick('label303', 'label302');" onmouseover="ContentPreview('label303');" onmouseout="ContentUnpreview('label303');" title="click to collapse or expand..."> more... </a> <div id="label303" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>login_timestamp</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">long_vdom_name</span> - Enable/disable long VDOM name support. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label304' href="javascript:ContentClick('label305', 'label304');" onmouseover="ContentPreview('label305');" onmouseout="ContentUnpreview('label305');" title="click to collapse or expand..."> more... </a> <div id="label305" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>long_vdom_name</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">management_ip</span> - Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric. <span class="li-normal">type: str</span> <a id='label306' href="javascript:ContentClick('label307', 'label306');" onmouseover="ContentPreview('label307');" onmouseout="ContentUnpreview('label307');" title="click to collapse or expand..."> more... </a> <div id="label307" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>management_ip</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">management_port</span> - Overriding port for management connection (Overrides admin port). <span class="li-normal">type: int</span> <a id='label308' href="javascript:ContentClick('label309', 'label308');" onmouseover="ContentPreview('label309');" onmouseout="ContentUnpreview('label309');" title="click to collapse or expand..."> more... </a> <div id="label309" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>management_port</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">management_port_use_admin_sport</span> - Enable/disable use of the admin-sport setting for the management port. If disabled, FortiGate will allow user to specify management-port. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label310' href="javascript:ContentClick('label311', 'label310');" onmouseover="ContentPreview('label311');" onmouseout="ContentUnpreview('label311');" title="click to collapse or expand..."> more... </a> <div id="label311" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>management_port_use_admin_sport</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">management_vdom</span> - Management virtual domain name. Source system.vdom.name. <span class="li-normal">type: str</span> <a id='label312' href="javascript:ContentClick('label313', 'label312');" onmouseover="ContentPreview('label313');" onmouseout="ContentUnpreview('label313');" title="click to collapse or expand..."> more... </a> <div id="label313" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>management_vdom</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">max_dlpstat_memory</span> - Maximum DLP stat memory (0 - 4294967295). <span class="li-normal">type: int</span> <a id='label314' href="javascript:ContentClick('label315', 'label314');" onmouseover="ContentPreview('label315');" onmouseout="ContentUnpreview('label315');" title="click to collapse or expand..."> more... </a> <div id="label315" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>max_dlpstat_memory</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.2.7 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">max_route_cache_size</span> - Maximum number of IP route cache entries (0 - 2147483647). <span class="li-normal">type: int</span> <a id='label316' href="javascript:ContentClick('label317', 'label316');" onmouseover="ContentPreview('label317');" onmouseout="ContentUnpreview('label317');" title="click to collapse or expand..."> more... </a> <div id="label317" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>max_route_cache_size</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">mc_ttl_notchange</span> - Enable/disable no modification of multicast TTL. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label318' href="javascript:ContentClick('label319', 'label318');" onmouseover="ContentPreview('label319');" onmouseout="ContentUnpreview('label319');" title="click to collapse or expand..."> more... </a> <div id="label319" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>mc_ttl_notchange</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </table> </div> </li> <li> <span class="li-head">memory_use_threshold_extreme</span> - Threshold at which memory usage is considered extreme (new sessions are dropped) (% of total RAM). <span class="li-normal">type: int</span> <a id='label320' href="javascript:ContentClick('label321', 'label320');" onmouseover="ContentPreview('label321');" onmouseout="ContentUnpreview('label321');" title="click to collapse or expand..."> more... </a> <div id="label321" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>memory_use_threshold_extreme</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">memory_use_threshold_green</span> - Threshold at which memory usage forces the FortiGate to exit conserve mode (% of total RAM). <span class="li-normal">type: int</span> <a id='label322' href="javascript:ContentClick('label323', 'label322');" onmouseover="ContentPreview('label323');" onmouseout="ContentUnpreview('label323');" title="click to collapse or expand..."> more... </a> <div id="label323" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>memory_use_threshold_green</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">memory_use_threshold_red</span> - Threshold at which memory usage forces the FortiGate to enter conserve mode (% of total RAM). <span class="li-normal">type: int</span> <a id='label324' href="javascript:ContentClick('label325', 'label324');" onmouseover="ContentPreview('label325');" onmouseout="ContentUnpreview('label325');" title="click to collapse or expand..."> more... </a> <div id="label325" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>memory_use_threshold_red</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">miglog_affinity</span> - Affinity setting for logging (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). <span class="li-normal">type: str</span> <a id='label326' href="javascript:ContentClick('label327', 'label326');" onmouseover="ContentPreview('label327');" onmouseout="ContentUnpreview('label327');" title="click to collapse or expand..."> more... </a> <div id="label327" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>miglog_affinity</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">miglogd_children</span> - Number of logging (miglogd) processes to be allowed to run. Higher number can reduce performance; lower number can slow log processing time. <span class="li-normal">type: int</span> <a id='label328' href="javascript:ContentClick('label329', 'label328');" onmouseover="ContentPreview('label329');" onmouseout="ContentUnpreview('label329');" title="click to collapse or expand..."> more... </a> <div id="label329" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>miglogd_children</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">multi_factor_authentication</span> - Enforce all login methods to require an additional authentication factor . <span class="li-normal">type: str</span> <span class="li-normal">choices: optional, mandatory</span> <a id='label330' href="javascript:ContentClick('label331', 'label330');" onmouseover="ContentPreview('label331');" onmouseout="ContentUnpreview('label331');" title="click to collapse or expand..."> more... </a> <div id="label331" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>multi_factor_authentication</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[optional]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[mandatory]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">multicast_forward</span> - Enable/disable multicast forwarding. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label332' href="javascript:ContentClick('label333', 'label332');" onmouseover="ContentPreview('label333');" onmouseout="ContentUnpreview('label333');" title="click to collapse or expand..."> more... </a> <div id="label333" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>multicast_forward</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </table> </div> </li> <li> <span class="li-head">ndp_max_entry</span> - Maximum number of NDP table entries (set to 65,536 or higher; if set to 0, kernel holds 65,536 entries). <span class="li-normal">type: int</span> <a id='label334' href="javascript:ContentClick('label335', 'label334');" onmouseover="ContentPreview('label335');" onmouseout="ContentUnpreview('label335');" title="click to collapse or expand..."> more... </a> <div id="label335" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ndp_max_entry</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">per_user_bal</span> - Enable/disable per-user block/allow list filter. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label336' href="javascript:ContentClick('label337', 'label336');" onmouseover="ContentPreview('label337');" onmouseout="ContentUnpreview('label337');" title="click to collapse or expand..."> more... </a> <div id="label337" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>per_user_bal</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">per_user_bwl</span> - Enable/disable per-user black/white list filter. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label338' href="javascript:ContentClick('label339', 'label338');" onmouseover="ContentPreview('label339');" onmouseout="ContentUnpreview('label339');" title="click to collapse or expand..."> more... </a> <div id="label339" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>per_user_bwl</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.4.4 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.4.4</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.4.4</code></td> </table> </div> </li> <li> <span class="li-head">pmtu_discovery</span> - Enable/disable path MTU discovery. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label340' href="javascript:ContentClick('label341', 'label340');" onmouseover="ContentPreview('label341');" onmouseout="ContentUnpreview('label341');" title="click to collapse or expand..."> more... </a> <div id="label341" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>pmtu_discovery</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">policy_auth_concurrent</span> - Number of concurrent firewall use logins from the same user (1 - 100). <span class="li-normal">type: int</span> <a id='label342' href="javascript:ContentClick('label343', 'label342');" onmouseover="ContentPreview('label343');" onmouseout="ContentUnpreview('label343');" title="click to collapse or expand..."> more... </a> <div id="label343" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>policy_auth_concurrent</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">post_login_banner</span> - Enable/disable displaying the administrator access disclaimer message after an administrator successfully logs in. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label344' href="javascript:ContentClick('label345', 'label344');" onmouseover="ContentPreview('label345');" onmouseout="ContentUnpreview('label345');" title="click to collapse or expand..."> more... </a> <div id="label345" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>post_login_banner</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">pre_login_banner</span> - Enable/disable displaying the administrator access disclaimer message on the login page before an administrator logs in. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label346' href="javascript:ContentClick('label347', 'label346');" onmouseover="ContentPreview('label347');" onmouseout="ContentUnpreview('label347');" title="click to collapse or expand..."> more... </a> <div id="label347" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>pre_login_banner</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">private_data_encryption</span> - Enable/disable private data encryption using an AES 128-bit key or passpharse. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label348' href="javascript:ContentClick('label349', 'label348');" onmouseover="ContentPreview('label349');" onmouseout="ContentUnpreview('label349');" title="click to collapse or expand..."> more... </a> <div id="label349" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>private_data_encryption</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">proxy_auth_lifetime</span> - Enable/disable authenticated users lifetime control. This is a cap on the total time a proxy user can be authenticated for after which re-authentication will take place. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label350' href="javascript:ContentClick('label351', 'label350');" onmouseover="ContentPreview('label351');" onmouseout="ContentUnpreview('label351');" title="click to collapse or expand..."> more... </a> <div id="label351" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_auth_lifetime</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">proxy_auth_lifetime_timeout</span> - Lifetime timeout in minutes for authenticated users (5 - 65535 min). <span class="li-normal">type: int</span> <a id='label352' href="javascript:ContentClick('label353', 'label352');" onmouseover="ContentPreview('label353');" onmouseout="ContentUnpreview('label353');" title="click to collapse or expand..."> more... </a> <div id="label353" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_auth_lifetime_timeout</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">proxy_auth_timeout</span> - Authentication timeout in minutes for authenticated users (1 - 300 min). <span class="li-normal">type: int</span> <a id='label354' href="javascript:ContentClick('label355', 'label354');" onmouseover="ContentPreview('label355');" onmouseout="ContentUnpreview('label355');" title="click to collapse or expand..."> more... </a> <div id="label355" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_auth_timeout</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">proxy_cert_use_mgmt_vdom</span> - Enable/disable using management VDOM to send requests. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label356' href="javascript:ContentClick('label357', 'label356');" onmouseover="ContentPreview('label357');" onmouseout="ContentUnpreview('label357');" title="click to collapse or expand..."> more... </a> <div id="label357" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_cert_use_mgmt_vdom</td> <td><code class="docutils literal notranslate">v7.0.4 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.4 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.4 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">proxy_cipher_hardware_acceleration</span> - Enable/disable using content processor (CP8 or CP9) hardware acceleration to encrypt and decrypt IPsec and SSL traffic. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label358' href="javascript:ContentClick('label359', 'label358');" onmouseover="ContentPreview('label359');" onmouseout="ContentUnpreview('label359');" title="click to collapse or expand..."> more... </a> <div id="label359" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_cipher_hardware_acceleration</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.2.7 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.2.7</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.2.7</code></td> </table> </div> </li> <li> <span class="li-head">proxy_hardware_acceleration</span> - Enable/disable email proxy hardware acceleration. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label360' href="javascript:ContentClick('label361', 'label360');" onmouseover="ContentPreview('label361');" onmouseout="ContentUnpreview('label361');" title="click to collapse or expand..."> more... </a> <div id="label361" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_hardware_acceleration</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.4.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">proxy_keep_alive_mode</span> - Control if users must re-authenticate after a session is closed, traffic has been idle, or from the point at which the user was authenticated. <span class="li-normal">type: str</span> <span class="li-normal">choices: session, traffic, re-authentication</span> <a id='label362' href="javascript:ContentClick('label363', 'label362');" onmouseover="ContentPreview('label363');" onmouseout="ContentUnpreview('label363');" title="click to collapse or expand..."> more... </a> <div id="label363" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_keep_alive_mode</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> <tr> <td>[session]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> <tr> <td>[traffic]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> <tr> <td>[re-authentication]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">proxy_kxp_hardware_acceleration</span> - Enable/disable using the content processor to accelerate KXP traffic. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label364' href="javascript:ContentClick('label365', 'label364');" onmouseover="ContentPreview('label365');" onmouseout="ContentUnpreview('label365');" title="click to collapse or expand..."> more... </a> <div id="label365" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_kxp_hardware_acceleration</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.2.7 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.2.7</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.2.7</code></td> </table> </div> </li> <li> <span class="li-head">proxy_re_authentication_mode</span> - Control if users must re-authenticate after a session is closed, traffic has been idle, or from the point at which the user was first created. <span class="li-normal">type: str</span> <span class="li-normal">choices: session, traffic, absolute</span> <a id='label366' href="javascript:ContentClick('label367', 'label366');" onmouseover="ContentPreview('label367');" onmouseout="ContentUnpreview('label367');" title="click to collapse or expand..."> more... </a> <div id="label367" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_re_authentication_mode</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2 </code></td> </tr> <tr> <td>[session]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> <tr> <td>[traffic]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> <tr> <td>[absolute]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> </table> </div> </li> <li> <span class="li-head">proxy_re_authentication_time</span> - The time limit that users must re-authenticate if proxy-keep-alive-mode is set to re-authenticate (1 - 86400 sec, default=30s. <span class="li-normal">type: int</span> <a id='label368' href="javascript:ContentClick('label369', 'label368');" onmouseover="ContentPreview('label369');" onmouseout="ContentUnpreview('label369');" title="click to collapse or expand..."> more... </a> <div id="label369" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_re_authentication_time</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">proxy_resource_mode</span> - Enable/disable use of the maximum memory usage on the FortiGate unit"s proxy processing of resources, such as block lists, allow lists, and external resources. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label370' href="javascript:ContentClick('label371', 'label370');" onmouseover="ContentPreview('label371');" onmouseout="ContentUnpreview('label371');" title="click to collapse or expand..."> more... </a> <div id="label371" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_resource_mode</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">proxy_worker_count</span> - Proxy worker count. <span class="li-normal">type: int</span> <a id='label372' href="javascript:ContentClick('label373', 'label372');" onmouseover="ContentPreview('label373');" onmouseout="ContentUnpreview('label373');" title="click to collapse or expand..."> more... </a> <div id="label373" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>proxy_worker_count</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">purdue_level</span> - Purdue Level of this FortiGate. <span class="li-normal">type: str</span> <span class="li-normal">choices: 1, 1.5, 2, 2.5, 3, 3.5, 4, 5, 5.5</span> <a id='label374' href="javascript:ContentClick('label375', 'label374');" onmouseover="ContentPreview('label375');" onmouseout="ContentUnpreview('label375');" title="click to collapse or expand..."> more... </a> <div id="label375" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>purdue_level</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3 </code></td> </tr> <tr> <td>[1]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> <tr> <td>[1.5]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> <tr> <td>[2]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> <tr> <td>[2.5]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> <tr> <td>[3]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> <tr> <td>[3.5]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> <tr> <td>[4]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> <tr> <td>[5]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> <tr> <td>[5.5]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">quic_ack_thresold</span> - Maximum number of unacknowledged packets before sending ACK (2 - 5). <span class="li-normal">type: int</span> <a id='label376' href="javascript:ContentClick('label377', 'label376');" onmouseover="ContentPreview('label377');" onmouseout="ContentUnpreview('label377');" title="click to collapse or expand..."> more... </a> <div id="label377" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>quic_ack_thresold</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">quic_congestion_control_algo</span> - QUIC congestion control algorithm . <span class="li-normal">type: str</span> <span class="li-normal">choices: cubic, bbr, bbr2, reno</span> <a id='label378' href="javascript:ContentClick('label379', 'label378');" onmouseover="ContentPreview('label379');" onmouseout="ContentUnpreview('label379');" title="click to collapse or expand..."> more... </a> <div id="label379" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>quic_congestion_control_algo</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3 </code></td> </tr> <tr> <td>[cubic]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> <tr> <td>[bbr]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> <tr> <td>[bbr2]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> <tr> <td>[reno]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">quic_max_datagram_size</span> - Maximum transmit datagram size (1200 - 1500). <span class="li-normal">type: int</span> <a id='label380' href="javascript:ContentClick('label381', 'label380');" onmouseover="ContentPreview('label381');" onmouseout="ContentUnpreview('label381');" title="click to collapse or expand..."> more... </a> <div id="label381" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>quic_max_datagram_size</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">quic_pmtud</span> - Enable/disable path MTU discovery . <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label382' href="javascript:ContentClick('label383', 'label382');" onmouseover="ContentPreview('label383');" onmouseout="ContentUnpreview('label383');" title="click to collapse or expand..."> more... </a> <div id="label383" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>quic_pmtud</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">quic_tls_handshake_timeout</span> - Time-to-live (TTL) for TLS handshake in seconds (1 - 60). <span class="li-normal">type: int</span> <a id='label384' href="javascript:ContentClick('label385', 'label384');" onmouseover="ContentPreview('label385');" onmouseout="ContentUnpreview('label385');" title="click to collapse or expand..."> more... </a> <div id="label385" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>quic_tls_handshake_timeout</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">quic_udp_payload_size_shaping_per_cid</span> - Enable/disable UDP payload size shaping per connection ID . <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label386' href="javascript:ContentClick('label387', 'label386');" onmouseover="ContentPreview('label387');" onmouseout="ContentUnpreview('label387');" title="click to collapse or expand..."> more... </a> <div id="label387" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>quic_udp_payload_size_shaping_per_cid</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">radius_port</span> - RADIUS service port number. <span class="li-normal">type: int</span> <a id='label388' href="javascript:ContentClick('label389', 'label388');" onmouseover="ContentPreview('label389');" onmouseout="ContentUnpreview('label389');" title="click to collapse or expand..."> more... </a> <div id="label389" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>radius_port</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">reboot_upon_config_restore</span> - Enable/disable reboot of system upon restoring configuration. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label390' href="javascript:ContentClick('label391', 'label390');" onmouseover="ContentPreview('label391');" onmouseout="ContentUnpreview('label391');" title="click to collapse or expand..."> more... </a> <div id="label391" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>reboot_upon_config_restore</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">refresh</span> - Statistics refresh interval second(s) in GUI. <span class="li-normal">type: int</span> <a id='label392' href="javascript:ContentClick('label393', 'label392');" onmouseover="ContentPreview('label393');" onmouseout="ContentUnpreview('label393');" title="click to collapse or expand..."> more... </a> <div id="label393" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>refresh</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">remoteauthtimeout</span> - Number of seconds that the FortiGate waits for responses from remote RADIUS, LDAP, or TACACS+ authentication servers. (1-300 sec). <span class="li-normal">type: int</span> <a id='label394' href="javascript:ContentClick('label395', 'label394');" onmouseover="ContentPreview('label395');" onmouseout="ContentUnpreview('label395');" title="click to collapse or expand..."> more... </a> <div id="label395" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>remoteauthtimeout</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">reset_sessionless_tcp</span> - Action to perform if the FortiGate receives a TCP packet but cannot find a corresponding session in its session table. NAT/Route mode only. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label396' href="javascript:ContentClick('label397', 'label396');" onmouseover="ContentPreview('label397');" onmouseout="ContentUnpreview('label397');" title="click to collapse or expand..."> more... </a> <div id="label397" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>reset_sessionless_tcp</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">restart_time</span> - Daily restart time (hh:mm). <span class="li-normal">type: str</span> <a id='label398' href="javascript:ContentClick('label399', 'label398');" onmouseover="ContentPreview('label399');" onmouseout="ContentUnpreview('label399');" title="click to collapse or expand..."> more... </a> <div id="label399" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>restart_time</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">revision_backup_on_logout</span> - Enable/disable back-up of the latest configuration revision when an administrator logs out of the CLI or GUI. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label400' href="javascript:ContentClick('label401', 'label400');" onmouseover="ContentPreview('label401');" onmouseout="ContentUnpreview('label401');" title="click to collapse or expand..."> more... </a> <div id="label401" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>revision_backup_on_logout</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">revision_image_auto_backup</span> - Enable/disable back-up of the latest image revision after the firmware is upgraded. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label402' href="javascript:ContentClick('label403', 'label402');" onmouseover="ContentPreview('label403');" onmouseout="ContentUnpreview('label403');" title="click to collapse or expand..."> more... </a> <div id="label403" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>revision_image_auto_backup</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">scanunit_count</span> - Number of scanunits. The range and the default depend on the number of CPUs. Only available on FortiGate units with multiple CPUs. <span class="li-normal">type: int</span> <a id='label404' href="javascript:ContentClick('label405', 'label404');" onmouseover="ContentPreview('label405');" onmouseout="ContentUnpreview('label405');" title="click to collapse or expand..."> more... </a> <div id="label405" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>scanunit_count</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">security_rating_result_submission</span> - Enable/disable the submission of Security Rating results to FortiGuard. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label406' href="javascript:ContentClick('label407', 'label406');" onmouseover="ContentPreview('label407');" onmouseout="ContentUnpreview('label407');" title="click to collapse or expand..."> more... </a> <div id="label407" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>security_rating_result_submission</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">security_rating_run_on_schedule</span> - Enable/disable scheduled runs of Security Rating. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label408' href="javascript:ContentClick('label409', 'label408');" onmouseover="ContentPreview('label409');" onmouseout="ContentUnpreview('label409');" title="click to collapse or expand..."> more... </a> <div id="label409" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>security_rating_run_on_schedule</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">send_pmtu_icmp</span> - Enable/disable sending of path maximum transmission unit (PMTU) - ICMP destination unreachable packet and to support PMTUD protocol on your network to reduce fragmentation of packets. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label410' href="javascript:ContentClick('label411', 'label410');" onmouseover="ContentPreview('label411');" onmouseout="ContentUnpreview('label411');" title="click to collapse or expand..."> more... </a> <div id="label411" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>send_pmtu_icmp</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">sflowd_max_children_num</span> - Maximum number of sflowd child processes allowed to run. <span class="li-normal">type: int</span> <a id='label412' href="javascript:ContentClick('label413', 'label412');" onmouseover="ContentPreview('label413');" onmouseout="ContentUnpreview('label413');" title="click to collapse or expand..."> more... </a> <div id="label413" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>sflowd_max_children_num</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">snat_route_change</span> - Enable/disable the ability to change the source NAT route. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label414' href="javascript:ContentClick('label415', 'label414');" onmouseover="ContentPreview('label415');" onmouseout="ContentUnpreview('label415');" title="click to collapse or expand..."> more... </a> <div id="label415" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>snat_route_change</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">special_file_23_support</span> - Enable/disable detection of those special format files when using Data Leak Prevention. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label416' href="javascript:ContentClick('label417', 'label416');" onmouseover="ContentPreview('label417');" onmouseout="ContentUnpreview('label417');" title="click to collapse or expand..."> more... </a> <div id="label417" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>special_file_23_support</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">speedtest_server</span> - Enable/disable speed test server. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label418' href="javascript:ContentClick('label419', 'label418');" onmouseover="ContentPreview('label419');" onmouseout="ContentUnpreview('label419');" title="click to collapse or expand..."> more... </a> <div id="label419" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>speedtest_server</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.0.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">speedtestd_ctrl_port</span> - Speedtest server controller port number. <span class="li-normal">type: int</span> <a id='label420' href="javascript:ContentClick('label421', 'label420');" onmouseover="ContentPreview('label421');" onmouseout="ContentUnpreview('label421');" title="click to collapse or expand..."> more... </a> <div id="label421" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>speedtestd_ctrl_port</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">speedtestd_server_port</span> - Speedtest server port number. <span class="li-normal">type: int</span> <a id='label422' href="javascript:ContentClick('label423', 'label422');" onmouseover="ContentPreview('label423');" onmouseout="ContentUnpreview('label423');" title="click to collapse or expand..."> more... </a> <div id="label423" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>speedtestd_server_port</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">split_port</span> - Split port(s) to multiple 10Gbps ports. <span class="li-normal">type: list</span> </li> <li> <span class="li-head">split_port_mode</span> - Configure split port mode of ports. <span class="li-normal">type: list</span> <span style="font-family:'Courier New'" class="li-required">member_path: split_port_mode:interface</span> <a id='label424' href="javascript:ContentClick('label425', 'label424');" onmouseover="ContentPreview('label425');" onmouseout="ContentUnpreview('label425');" title="click to collapse or expand..."> more... </a> <div id="label425" style="display:none"> <table border="1"> <tr> <td></td><td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>split_port_mode</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2 </code></td> </tr> </table> </div> </li> <ul class="ul-self"> <li> <span class="li-head">interface</span> - Split port interface. <span class="li-normal">type: str</span> <span class="li-required">required: true</span> <a id='label426' href="javascript:ContentClick('label427', 'label426');" onmouseover="ContentPreview('label427');" onmouseout="ContentUnpreview('label427');" title="click to collapse or expand..."> more... </a> <div id="label427" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>interface</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">split_mode</span> - The configuration mode for the split port interface. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, 4x10G, 4x25G, 4x50G, 8x25G, 8x50G, 4x100G, 2x200G</span> <a id='label428' href="javascript:ContentClick('label429', 'label428');" onmouseover="ContentPreview('label429');" onmouseout="ContentUnpreview('label429');" title="click to collapse or expand..."> more... </a> <div id="label429" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>split_mode</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2</code></td> <tr> <td>[4x10G]</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2</code></td> <tr> <td>[4x25G]</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2</code></td> <tr> <td>[4x50G]</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2</code></td> <tr> <td>[8x25G]</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2</code></td> <tr> <td>[8x50G]</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2</code></td> <tr> <td>[4x100G]</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2</code></td> <tr> <td>[2x200G]</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2</code></td> </table> </div> </li> </ul> <li> <span class="li-head">ssd_trim_date</span> - Date within a month to run ssd trim. <span class="li-normal">type: int</span> <a id='label430' href="javascript:ContentClick('label431', 'label430');" onmouseover="ContentPreview('label431');" onmouseout="ContentUnpreview('label431');" title="click to collapse or expand..."> more... </a> <div id="label431" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>ssd_trim_date</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.4.1 </code></td> <td><code class="docutils literal notranslate">v7.4.3 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ssd_trim_freq</span> - How often to run SSD Trim . SSD Trim prevents SSD drive data loss by finding and isolating errors. <span class="li-normal">type: str</span> <span class="li-normal">choices: never, hourly, daily, weekly, monthly</span> <a id='label432' href="javascript:ContentClick('label433', 'label432');" onmouseover="ContentPreview('label433');" onmouseout="ContentUnpreview('label433');" title="click to collapse or expand..."> more... </a> <div id="label433" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>ssd_trim_freq</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.4.1 </code></td> <td><code class="docutils literal notranslate">v7.4.3 -> 7.4.3 </code></td> </tr> <tr> <td>[never]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[hourly]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[daily]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[weekly]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[monthly]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> </table> </div> </li> <li> <span class="li-head">ssd_trim_hour</span> - Hour of the day on which to run SSD Trim (0 - 23). <span class="li-normal">type: int</span> <a id='label434' href="javascript:ContentClick('label435', 'label434');" onmouseover="ContentPreview('label435');" onmouseout="ContentUnpreview('label435');" title="click to collapse or expand..."> more... </a> <div id="label435" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>ssd_trim_hour</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.4.1 </code></td> <td><code class="docutils literal notranslate">v7.4.3 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ssd_trim_min</span> - Minute of the hour on which to run SSD Trim (0 - 59, 60 for random). <span class="li-normal">type: int</span> <a id='label436' href="javascript:ContentClick('label437', 'label436');" onmouseover="ContentPreview('label437');" onmouseout="ContentUnpreview('label437');" title="click to collapse or expand..."> more... </a> <div id="label437" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>ssd_trim_min</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.4.1 </code></td> <td><code class="docutils literal notranslate">v7.4.3 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ssd_trim_weekday</span> - Day of week to run SSD Trim. <span class="li-normal">type: str</span> <span class="li-normal">choices: sunday, monday, tuesday, wednesday, thursday, friday, saturday</span> <a id='label438' href="javascript:ContentClick('label439', 'label438');" onmouseover="ContentPreview('label439');" onmouseout="ContentUnpreview('label439');" title="click to collapse or expand..."> more... </a> <div id="label439" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>ssd_trim_weekday</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.4.1 </code></td> <td><code class="docutils literal notranslate">v7.4.3 -> 7.4.3 </code></td> </tr> <tr> <td>[sunday]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[monday]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[tuesday]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[wednesday]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[thursday]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[friday]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> <tr> <td>[saturday]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </tr> </table> </div> </li> <li> <span class="li-head">ssh_cbc_cipher</span> - Enable/disable CBC cipher for SSH access. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label440' href="javascript:ContentClick('label441', 'label440');" onmouseover="ContentPreview('label441');" onmouseout="ContentUnpreview('label441');" title="click to collapse or expand..."> more... </a> <div id="label441" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_cbc_cipher</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.0.1 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.0.1</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.0.1</code></td> </table> </div> </li> <li> <span class="li-head">ssh_enc_algo</span> - Select one or more SSH ciphers. <span class="li-normal">type: list</span> <span class="li-normal">choices: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com</span> <a id='label442' href="javascript:ContentClick('label443', 'label442');" onmouseover="ContentPreview('label443');" onmouseout="ContentUnpreview('label443');" title="click to collapse or expand..."> more... </a> <div id="label443" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_enc_algo</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3 </code></td> </tr> <tr> <td>[chacha20-poly1305@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[aes128-ctr]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[aes192-ctr]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[aes256-ctr]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[arcfour256]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[arcfour128]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[aes128-cbc]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[3des-cbc]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[blowfish-cbc]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[cast128-cbc]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[aes192-cbc]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[aes256-cbc]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[arcfour]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[rijndael-cbc@lysator.liu.se]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[aes128-gcm@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[aes256-gcm@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">ssh_hmac_md5</span> - Enable/disable HMAC-MD5 for SSH access. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label444' href="javascript:ContentClick('label445', 'label444');" onmouseover="ContentPreview('label445');" onmouseout="ContentUnpreview('label445');" title="click to collapse or expand..."> more... </a> <div id="label445" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_hmac_md5</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.0.1 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.0.1</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.0.1</code></td> </table> </div> </li> <li> <span class="li-head">ssh_hostkey</span> - Config SSH host key. <span class="li-normal">type: str</span> <a id='label446' href="javascript:ContentClick('label447', 'label446');" onmouseover="ContentPreview('label447');" onmouseout="ContentUnpreview('label447');" title="click to collapse or expand..."> more... </a> <div id="label447" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_hostkey</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ssh_hostkey_algo</span> - Select one or more SSH hostkey algorithms. <span class="li-normal">type: list</span> <span class="li-normal">choices: ssh-rsa, ecdsa-sha2-nistp521, ecdsa-sha2-nistp384, ecdsa-sha2-nistp256, rsa-sha2-256, rsa-sha2-512, ssh-ed25519</span> <a id='label448' href="javascript:ContentClick('label449', 'label448');" onmouseover="ContentPreview('label449');" onmouseout="ContentUnpreview('label449');" title="click to collapse or expand..."> more... </a> <div id="label449" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_hostkey_algo</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3 </code></td> </tr> <tr> <td>[ssh-rsa]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> <tr> <td>[ecdsa-sha2-nistp521]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> <tr> <td>[ecdsa-sha2-nistp384]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> </tr> <tr> <td>[ecdsa-sha2-nistp256]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> </tr> <tr> <td>[rsa-sha2-256]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> <tr> <td>[rsa-sha2-512]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> <tr> <td>[ssh-ed25519]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">ssh_hostkey_override</span> - Enable/disable SSH host key override in SSH daemon. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label450' href="javascript:ContentClick('label451', 'label450');" onmouseover="ContentPreview('label451');" onmouseout="ContentUnpreview('label451');" title="click to collapse or expand..."> more... </a> <div id="label451" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_hostkey_override</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">ssh_hostkey_password</span> - Password for ssh-hostkey. <span class="li-normal">type: str</span> <a id='label452' href="javascript:ContentClick('label453', 'label452');" onmouseover="ContentPreview('label453');" onmouseout="ContentUnpreview('label453');" title="click to collapse or expand..."> more... </a> <div id="label453" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_hostkey_password</td> <td><code class="docutils literal notranslate">v7.4.2 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">ssh_kex_algo</span> - Select one or more SSH kex algorithms. <span class="li-normal">type: list</span> <span class="li-normal">choices: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521</span> <a id='label454' href="javascript:ContentClick('label455', 'label454');" onmouseover="ContentPreview('label455');" onmouseout="ContentUnpreview('label455');" title="click to collapse or expand..."> more... </a> <div id="label455" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_kex_algo</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3 </code></td> </tr> <tr> <td>[diffie-hellman-group1-sha1]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[diffie-hellman-group14-sha1]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[diffie-hellman-group14-sha256]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> </tr> <tr> <td>[diffie-hellman-group16-sha512]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> </tr> <tr> <td>[diffie-hellman-group18-sha512]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> </tr> <tr> <td>[diffie-hellman-group-exchange-sha1]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[diffie-hellman-group-exchange-sha256]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[curve25519-sha256@libssh.org]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[ecdh-sha2-nistp256]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[ecdh-sha2-nistp384]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[ecdh-sha2-nistp521]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">ssh_kex_sha1</span> - Enable/disable SHA1 key exchange for SSH access. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label456' href="javascript:ContentClick('label457', 'label456');" onmouseover="ContentPreview('label457');" onmouseout="ContentUnpreview('label457');" title="click to collapse or expand..."> more... </a> <div id="label457" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_kex_sha1</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.0.1 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.0.1</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.0.1</code></td> </table> </div> </li> <li> <span class="li-head">ssh_mac_algo</span> - Select one or more SSH MAC algorithms. <span class="li-normal">type: list</span> <span class="li-normal">choices: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com</span> <a id='label458' href="javascript:ContentClick('label459', 'label458');" onmouseover="ContentPreview('label459');" onmouseout="ContentUnpreview('label459');" title="click to collapse or expand..."> more... </a> <div id="label459" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_mac_algo</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3 </code></td> </tr> <tr> <td>[hmac-md5]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-md5-etm@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-md5-96]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-md5-96-etm@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-sha1]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-sha1-etm@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-sha2-256]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-sha2-256-etm@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-sha2-512]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-sha2-512-etm@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-ripemd160]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-ripemd160@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[hmac-ripemd160-etm@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[umac-64@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[umac-128@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[umac-64-etm@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> <tr> <td>[umac-128-etm@openssh.com]</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">ssh_mac_weak</span> - Enable/disable HMAC-SHA1 and UMAC-64-ETM for SSH access. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label460' href="javascript:ContentClick('label461', 'label460');" onmouseover="ContentPreview('label461');" onmouseout="ContentUnpreview('label461');" title="click to collapse or expand..."> more... </a> <div id="label461" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssh_mac_weak</td> <td><code class="docutils literal notranslate">v6.2.0 -> v7.0.1 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> v7.0.1</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.2.0 -> v7.0.1</code></td> </table> </div> </li> <li> <span class="li-head">ssl_min_proto_version</span> - Minimum supported protocol version for SSL/TLS connections . <span class="li-normal">type: str</span> <span class="li-normal">choices: SSLv3, TLSv1, TLSv1-1, TLSv1-2, TLSv1-3</span> <a id='label462' href="javascript:ContentClick('label463', 'label462');" onmouseover="ContentPreview('label463');" onmouseout="ContentUnpreview('label463');" title="click to collapse or expand..."> more... </a> <div id="label463" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssl_min_proto_version</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[SSLv3]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[TLSv1]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[TLSv1-1]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[TLSv1-2]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[TLSv1-3]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> </tr> </table> </div> </li> <li> <span class="li-head">ssl_static_key_ciphers</span> - Enable/disable static key ciphers in SSL/TLS connections (e.g. AES128-SHA, AES256-SHA, AES128-SHA256, AES256-SHA256). <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label464' href="javascript:ContentClick('label465', 'label464');" onmouseover="ContentPreview('label465');" onmouseout="ContentUnpreview('label465');" title="click to collapse or expand..."> more... </a> <div id="label465" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>ssl_static_key_ciphers</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">sslvpn_cipher_hardware_acceleration</span> - sslvpn-cipher-hardware-acceleration <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label466' href="javascript:ContentClick('label467', 'label466');" onmouseover="ContentPreview('label467');" onmouseout="ContentUnpreview('label467');" title="click to collapse or expand..."> more... </a> <div id="label467" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>sslvpn_cipher_hardware_acceleration</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> </table> </div> </li> <li> <span class="li-head">sslvpn_ems_sn_check</span> - Enable/disable verification of EMS serial number in SSL-VPN connection. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label468' href="javascript:ContentClick('label469', 'label468');" onmouseover="ContentPreview('label469');" onmouseout="ContentUnpreview('label469');" title="click to collapse or expand..."> more... </a> <div id="label469" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>sslvpn_ems_sn_check</td> <td><code class="docutils literal notranslate">v6.4.0 -> v6.4.0 </code></td> <td><code class="docutils literal notranslate">v6.4.4 -> v7.2.4 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.4.0 -> v6.4.0</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.4.0 -> v6.4.0</code></td> </table> </div> </li> <li> <span class="li-head">sslvpn_kxp_hardware_acceleration</span> - sslvpn-kxp-hardware-acceleration <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label470' href="javascript:ContentClick('label471', 'label470');" onmouseover="ContentPreview('label471');" onmouseout="ContentUnpreview('label471');" title="click to collapse or expand..."> more... </a> <div id="label471" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>sslvpn_kxp_hardware_acceleration</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> </table> </div> </li> <li> <span class="li-head">sslvpn_max_worker_count</span> - Maximum number of SSL-VPN processes. Upper limit for this value is the number of CPUs and depends on the model. Default value of zero means the SSLVPN daemon decides the number of worker processes. <span class="li-normal">type: int</span> <a id='label472' href="javascript:ContentClick('label473', 'label472');" onmouseover="ContentPreview('label473');" onmouseout="ContentUnpreview('label473');" title="click to collapse or expand..."> more... </a> <div id="label473" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>sslvpn_max_worker_count</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">sslvpn_plugin_version_check</span> - sslvpn-plugin-version-check <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label474' href="javascript:ContentClick('label475', 'label474');" onmouseover="ContentPreview('label475');" onmouseout="ContentUnpreview('label475');" title="click to collapse or expand..."> more... </a> <div id="label475" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>sslvpn_plugin_version_check</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.2</code></td> </table> </div> </li> <li> <span class="li-head">sslvpn_web_mode</span> - Enable/disable SSL-VPN web mode. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label476' href="javascript:ContentClick('label477', 'label476');" onmouseover="ContentPreview('label477');" onmouseout="ContentUnpreview('label477');" title="click to collapse or expand..."> more... </a> <div id="label477" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>sslvpn_web_mode</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.1 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">strict_dirty_session_check</span> - Enable to check the session against the original policy when revalidating. This can prevent dropping of redirected sessions when web-filtering and authentication are enabled together. If this option is enabled, the FortiGate unit deletes a session if a routing or policy change causes the session to no longer match the policy that originally allowed the session. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label478' href="javascript:ContentClick('label479', 'label478');" onmouseover="ContentPreview('label479');" onmouseout="ContentUnpreview('label479');" title="click to collapse or expand..."> more... </a> <div id="label479" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>strict_dirty_session_check</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">strong_crypto</span> - Enable to use strong encryption and only allow strong ciphers and digest for HTTPS/SSH/TLS/SSL functions. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label480' href="javascript:ContentClick('label481', 'label480');" onmouseover="ContentPreview('label481');" onmouseout="ContentUnpreview('label481');" title="click to collapse or expand..."> more... </a> <div id="label481" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>strong_crypto</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">switch_controller</span> - Enable/disable switch controller feature. Switch controller allows you to manage FortiSwitch from the FortiGate itself. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label482' href="javascript:ContentClick('label483', 'label482');" onmouseover="ContentPreview('label483');" onmouseout="ContentUnpreview('label483');" title="click to collapse or expand..."> more... </a> <div id="label483" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>switch_controller</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">switch_controller_reserved_network</span> - Configure reserved network subnet for managed switches. This is available when the switch controller is enabled. <span class="li-normal">type: str</span> <a id='label484' href="javascript:ContentClick('label485', 'label484');" onmouseover="ContentPreview('label485');" onmouseout="ContentUnpreview('label485');" title="click to collapse or expand..."> more... </a> <div id="label485" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>switch_controller_reserved_network</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">sys_perf_log_interval</span> - Time in minutes between updates of performance statistics logging. (1 - 15 min). <span class="li-normal">type: int</span> <a id='label486' href="javascript:ContentClick('label487', 'label486');" onmouseover="ContentPreview('label487');" onmouseout="ContentUnpreview('label487');" title="click to collapse or expand..."> more... </a> <div id="label487" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>sys_perf_log_interval</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">syslog_affinity</span> - Affinity setting for syslog (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). <span class="li-normal">type: str</span> <a id='label488' href="javascript:ContentClick('label489', 'label488');" onmouseover="ContentPreview('label489');" onmouseout="ContentUnpreview('label489');" title="click to collapse or expand..."> more... </a> <div id="label489" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>syslog_affinity</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">tcp_halfclose_timer</span> - Number of seconds the FortiGate unit should wait to close a session after one peer has sent a FIN packet but the other has not responded (1 - 86400 sec (1 day)). <span class="li-normal">type: int</span> <a id='label490' href="javascript:ContentClick('label491', 'label490');" onmouseover="ContentPreview('label491');" onmouseout="ContentUnpreview('label491');" title="click to collapse or expand..."> more... </a> <div id="label491" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>tcp_halfclose_timer</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">tcp_halfopen_timer</span> - Number of seconds the FortiGate unit should wait to close a session after one peer has sent an open session packet but the other has not responded (1 - 86400 sec (1 day)). <span class="li-normal">type: int</span> <a id='label492' href="javascript:ContentClick('label493', 'label492');" onmouseover="ContentPreview('label493');" onmouseout="ContentUnpreview('label493');" title="click to collapse or expand..."> more... </a> <div id="label493" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>tcp_halfopen_timer</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">tcp_option</span> - Enable SACK, timestamp and MSS TCP options. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label494' href="javascript:ContentClick('label495', 'label494');" onmouseover="ContentPreview('label495');" onmouseout="ContentUnpreview('label495');" title="click to collapse or expand..."> more... </a> <div id="label495" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>tcp_option</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">tcp_rst_timer</span> - Length of the TCP CLOSE state in seconds (5 - 300 sec). <span class="li-normal">type: int</span> <a id='label496' href="javascript:ContentClick('label497', 'label496');" onmouseover="ContentPreview('label497');" onmouseout="ContentUnpreview('label497');" title="click to collapse or expand..."> more... </a> <div id="label497" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>tcp_rst_timer</td> <td><code class="docutils literal notranslate">v7.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">tcp_timewait_timer</span> - Length of the TCP TIME-WAIT state in seconds (1 - 300 sec). <span class="li-normal">type: int</span> <a id='label498' href="javascript:ContentClick('label499', 'label498');" onmouseover="ContentPreview('label499');" onmouseout="ContentUnpreview('label499');" title="click to collapse or expand..."> more... </a> <div id="label499" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>tcp_timewait_timer</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">tftp</span> - Enable/disable TFTP. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label500' href="javascript:ContentClick('label501', 'label500');" onmouseover="ContentPreview('label501');" onmouseout="ContentUnpreview('label501');" title="click to collapse or expand..."> more... </a> <div id="label501" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>tftp</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">timezone</span> - Timezone database name. Enter ? to view the list of timezone. Source system.timezone.name. <span class="li-normal">type: str</span> <a id='label502' href="javascript:ContentClick('label503', 'label502');" onmouseover="ContentPreview('label503');" onmouseout="ContentUnpreview('label503');" title="click to collapse or expand..."> more... </a> <div id="label503" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>timezone</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">tp_mc_skip_policy</span> - Enable/disable skip policy check and allow multicast through. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label504' href="javascript:ContentClick('label505', 'label504');" onmouseover="ContentPreview('label505');" onmouseout="ContentUnpreview('label505');" title="click to collapse or expand..."> more... </a> <div id="label505" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>tp_mc_skip_policy</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </table> </div> </li> <li> <span class="li-head">traffic_priority</span> - Choose Type of Service (ToS) or Differentiated Services Code Point (DSCP) for traffic prioritization in traffic shaping. <span class="li-normal">type: str</span> <span class="li-normal">choices: tos, dscp</span> <a id='label506' href="javascript:ContentClick('label507', 'label506');" onmouseover="ContentPreview('label507');" onmouseout="ContentUnpreview('label507');" title="click to collapse or expand..."> more... </a> <div id="label507" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>traffic_priority</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[tos]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[dscp]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">traffic_priority_level</span> - Default system-wide level of priority for traffic prioritization. <span class="li-normal">type: str</span> <span class="li-normal">choices: low, medium, high</span> <a id='label508' href="javascript:ContentClick('label509', 'label508');" onmouseover="ContentPreview('label509');" onmouseout="ContentUnpreview('label509');" title="click to collapse or expand..."> more... </a> <div id="label509" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>traffic_priority_level</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[low]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[medium]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[high]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">two_factor_email_expiry</span> - Email-based two-factor authentication session timeout (30 - 300 seconds (5 minutes)). <span class="li-normal">type: int</span> <a id='label510' href="javascript:ContentClick('label511', 'label510');" onmouseover="ContentPreview('label511');" onmouseout="ContentUnpreview('label511');" title="click to collapse or expand..."> more... </a> <div id="label511" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>two_factor_email_expiry</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">two_factor_fac_expiry</span> - FortiAuthenticator token authentication session timeout (10 - 3600 seconds (1 hour)). <span class="li-normal">type: int</span> <a id='label512' href="javascript:ContentClick('label513', 'label512');" onmouseover="ContentPreview('label513');" onmouseout="ContentUnpreview('label513');" title="click to collapse or expand..."> more... </a> <div id="label513" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>two_factor_fac_expiry</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">two_factor_ftk_expiry</span> - FortiToken authentication session timeout (60 - 600 sec (10 minutes)). <span class="li-normal">type: int</span> <a id='label514' href="javascript:ContentClick('label515', 'label514');" onmouseover="ContentPreview('label515');" onmouseout="ContentUnpreview('label515');" title="click to collapse or expand..."> more... </a> <div id="label515" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>two_factor_ftk_expiry</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">two_factor_ftm_expiry</span> - FortiToken Mobile session timeout (1 - 168 hours (7 days)). <span class="li-normal">type: int</span> <a id='label516' href="javascript:ContentClick('label517', 'label516');" onmouseover="ContentPreview('label517');" onmouseout="ContentUnpreview('label517');" title="click to collapse or expand..."> more... </a> <div id="label517" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>two_factor_ftm_expiry</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">two_factor_sms_expiry</span> - SMS-based two-factor authentication session timeout (30 - 300 sec). <span class="li-normal">type: int</span> <a id='label518' href="javascript:ContentClick('label519', 'label518');" onmouseover="ContentPreview('label519');" onmouseout="ContentUnpreview('label519');" title="click to collapse or expand..."> more... </a> <div id="label519" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>two_factor_sms_expiry</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">udp_idle_timer</span> - UDP connection session timeout. This command can be useful in managing CPU and memory resources (1 - 86400 seconds (1 day)). <span class="li-normal">type: int</span> <a id='label520' href="javascript:ContentClick('label521', 'label520');" onmouseover="ContentPreview('label521');" onmouseout="ContentUnpreview('label521');" title="click to collapse or expand..."> more... </a> <div id="label521" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>udp_idle_timer</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">url_filter_affinity</span> - URL filter CPU affinity. <span class="li-normal">type: str</span> <a id='label522' href="javascript:ContentClick('label523', 'label522');" onmouseover="ContentPreview('label523');" onmouseout="ContentUnpreview('label523');" title="click to collapse or expand..."> more... </a> <div id="label523" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>url_filter_affinity</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">url_filter_count</span> - URL filter daemon count. <span class="li-normal">type: int</span> <a id='label524' href="javascript:ContentClick('label525', 'label524');" onmouseover="ContentPreview('label525');" onmouseout="ContentUnpreview('label525');" title="click to collapse or expand..."> more... </a> <div id="label525" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>url_filter_count</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">user_device_store_max_devices</span> - Maximum number of devices allowed in user device store. <span class="li-normal">type: int</span> <a id='label526' href="javascript:ContentClick('label527', 'label526');" onmouseover="ContentPreview('label527');" onmouseout="ContentUnpreview('label527');" title="click to collapse or expand..."> more... </a> <div id="label527" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>user_device_store_max_devices</td> <td><code class="docutils literal notranslate">v6.4.4 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">user_device_store_max_unified_mem</span> - Maximum unified memory allowed in user device store. <span class="li-normal">type: int</span> <a id='label528' href="javascript:ContentClick('label529', 'label528');" onmouseover="ContentPreview('label529');" onmouseout="ContentUnpreview('label529');" title="click to collapse or expand..."> more... </a> <div id="label529" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>user_device_store_max_unified_mem</td> <td><code class="docutils literal notranslate">v7.0.2 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">user_device_store_max_users</span> - Maximum number of users allowed in user device store. <span class="li-normal">type: int</span> <a id='label530' href="javascript:ContentClick('label531', 'label530');" onmouseover="ContentPreview('label531');" onmouseout="ContentUnpreview('label531');" title="click to collapse or expand..."> more... </a> <div id="label531" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>user_device_store_max_users</td> <td><code class="docutils literal notranslate">v6.4.4 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">user_server_cert</span> - Certificate to use for https user authentication. Source certificate.local.name. <span class="li-normal">type: str</span> <a id='label532' href="javascript:ContentClick('label533', 'label532');" onmouseover="ContentPreview('label533');" onmouseout="ContentUnpreview('label533');" title="click to collapse or expand..."> more... </a> <div id="label533" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>user_server_cert</td> <td><code class="docutils literal notranslate">v6.0.0 -> v7.2.0 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">vdom_admin</span> - vdom-admin <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label534' href="javascript:ContentClick('label535', 'label534');" onmouseover="ContentPreview('label535');" onmouseout="ContentUnpreview('label535');" title="click to collapse or expand..."> more... </a> <div id="label535" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>vdom_admin</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> <td><code class="docutils literal notranslate">v6.2.3 -> v6.2.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </tr> </table> </div> </li> <li> <span class="li-head">vdom_mode</span> - Enable/disable support for multiple virtual domains (VDOMs). <span class="li-normal">type: str</span> <span class="li-normal">choices: no-vdom, multi-vdom, split-vdom</span> <a id='label536' href="javascript:ContentClick('label537', 'label536');" onmouseover="ContentPreview('label537');" onmouseout="ContentUnpreview('label537');" title="click to collapse or expand..."> more... </a> <div id="label537" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>vdom_mode</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> <tr> <td>[no-vdom]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> <tr> <td>[multi-vdom]</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3</code></td> <tr> <td>[split-vdom]</td> <td><code class="docutils literal notranslate">v6.2.0 -> v7.0.12</code></td> </tr> </table> </div> </li> <li> <span class="li-head">vip_arp_range</span> - Controls the number of ARPs that the FortiGate sends for a Virtual IP (VIP) address range. <span class="li-normal">type: str</span> <span class="li-normal">choices: unlimited, restricted</span> <a id='label538' href="javascript:ContentClick('label539', 'label538');" onmouseover="ContentPreview('label539');" onmouseout="ContentUnpreview('label539');" title="click to collapse or expand..."> more... </a> <div id="label539" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>vip_arp_range</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[unlimited]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[restricted]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">virtual_server_count</span> - Maximum number of virtual server processes to create. The maximum is the number of CPU cores. This is not available on single-core CPUs. <span class="li-normal">type: int</span> <a id='label540' href="javascript:ContentClick('label541', 'label540');" onmouseover="ContentPreview('label541');" onmouseout="ContentUnpreview('label541');" title="click to collapse or expand..."> more... </a> <div id="label541" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>virtual_server_count</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> <td><code class="docutils literal notranslate">v6.2.3 -> v6.2.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">virtual_server_hardware_acceleration</span> - Enable/disable virtual server hardware acceleration. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label542' href="javascript:ContentClick('label543', 'label542');" onmouseover="ContentPreview('label543');" onmouseout="ContentUnpreview('label543');" title="click to collapse or expand..."> more... </a> <div id="label543" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="2">Supported Version Ranges</td> </tr> <tr> <td>virtual_server_hardware_acceleration</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11 </code></td> <td><code class="docutils literal notranslate">v6.2.3 -> v6.2.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> v6.0.11</code></td> </table> </div> </li> <li> <span class="li-head">virtual_switch_vlan</span> - Enable/disable virtual switch VLAN. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label544' href="javascript:ContentClick('label545', 'label544');" onmouseover="ContentPreview('label545');" onmouseout="ContentUnpreview('label545');" title="click to collapse or expand..."> more... </a> <div id="label545" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>virtual_switch_vlan</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.2 -> v7.4.2</code></td> </table> </div> </li> <li> <span class="li-head">vpn_ems_sn_check</span> - Enable/disable verification of EMS serial number in SSL-VPN and IPsec VPN connection. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label546' href="javascript:ContentClick('label547', 'label546');" onmouseover="ContentPreview('label547');" onmouseout="ContentUnpreview('label547');" title="click to collapse or expand..."> more... </a> <div id="label547" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>vpn_ems_sn_check</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v7.4.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">wad_affinity</span> - Affinity setting for wad (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). <span class="li-normal">type: str</span> <a id='label548' href="javascript:ContentClick('label549', 'label548');" onmouseover="ContentPreview('label549');" onmouseout="ContentUnpreview('label549');" title="click to collapse or expand..."> more... </a> <div id="label549" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wad_affinity</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">wad_csvc_cs_count</span> - Number of concurrent WAD-cache-service object-cache processes. <span class="li-normal">type: int</span> <a id='label550' href="javascript:ContentClick('label551', 'label550');" onmouseover="ContentPreview('label551');" onmouseout="ContentUnpreview('label551');" title="click to collapse or expand..."> more... </a> <div id="label551" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wad_csvc_cs_count</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">wad_csvc_db_count</span> - Number of concurrent WAD-cache-service byte-cache processes. <span class="li-normal">type: int</span> <a id='label552' href="javascript:ContentClick('label553', 'label552');" onmouseover="ContentPreview('label553');" onmouseout="ContentUnpreview('label553');" title="click to collapse or expand..."> more... </a> <div id="label553" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wad_csvc_db_count</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">wad_memory_change_granularity</span> - Minimum percentage change in system memory usage detected by the wad daemon prior to adjusting TCP window size for any active connection. <span class="li-normal">type: int</span> <a id='label554' href="javascript:ContentClick('label555', 'label554');" onmouseover="ContentPreview('label555');" onmouseout="ContentUnpreview('label555');" title="click to collapse or expand..."> more... </a> <div id="label555" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wad_memory_change_granularity</td> <td><code class="docutils literal notranslate">v6.2.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">wad_restart_end_time</span> - WAD workers daily restart end time (hh:mm). <span class="li-normal">type: str</span> <a id='label556' href="javascript:ContentClick('label557', 'label556');" onmouseover="ContentPreview('label557');" onmouseout="ContentUnpreview('label557');" title="click to collapse or expand..."> more... </a> <div id="label557" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wad_restart_end_time</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">wad_restart_mode</span> - WAD worker restart mode . <span class="li-normal">type: str</span> <span class="li-normal">choices: none, time, memory</span> <a id='label558' href="javascript:ContentClick('label559', 'label558');" onmouseover="ContentPreview('label559');" onmouseout="ContentUnpreview('label559');" title="click to collapse or expand..."> more... </a> <div id="label559" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wad_restart_mode</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> <tr> <td>[none]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> <tr> <td>[time]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> <tr> <td>[memory]</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">wad_restart_start_time</span> - WAD workers daily restart time (hh:mm). <span class="li-normal">type: str</span> <a id='label560' href="javascript:ContentClick('label561', 'label560');" onmouseover="ContentPreview('label561');" onmouseout="ContentUnpreview('label561');" title="click to collapse or expand..."> more... </a> <div id="label561" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wad_restart_start_time</td> <td><code class="docutils literal notranslate">v7.2.4 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">wad_source_affinity</span> - Enable/disable dispatching traffic to WAD workers based on source affinity. <span class="li-normal">type: str</span> <span class="li-normal">choices: disable, enable</span> <a id='label562' href="javascript:ContentClick('label563', 'label562');" onmouseover="ContentPreview('label563');" onmouseout="ContentUnpreview('label563');" title="click to collapse or expand..."> more... </a> <div id="label563" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wad_source_affinity</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">wad_worker_count</span> - Number of explicit proxy WAN optimization daemon (WAD) processes. By default WAN optimization, explicit proxy, and web caching is handled by all of the CPU cores in a FortiGate unit. <span class="li-normal">type: int</span> <a id='label564' href="javascript:ContentClick('label565', 'label564');" onmouseover="ContentPreview('label565');" onmouseout="ContentUnpreview('label565');" title="click to collapse or expand..."> more... </a> <div id="label565" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wad_worker_count</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">wifi_ca_certificate</span> - CA certificate that verifies the WiFi certificate. Source certificate.ca.name. <span class="li-normal">type: str</span> <a id='label566' href="javascript:ContentClick('label567', 'label566');" onmouseover="ContentPreview('label567');" onmouseout="ContentUnpreview('label567');" title="click to collapse or expand..."> more... </a> <div id="label567" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wifi_ca_certificate</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">wifi_certificate</span> - Certificate to use for WiFi authentication. Source certificate.local.name. <span class="li-normal">type: str</span> <a id='label568' href="javascript:ContentClick('label569', 'label568');" onmouseover="ContentPreview('label569');" onmouseout="ContentUnpreview('label569');" title="click to collapse or expand..."> more... </a> <div id="label569" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wifi_certificate</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> <li> <span class="li-head">wimax_4g_usb</span> - Enable/disable comparability with WiMAX 4G USB devices. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label570' href="javascript:ContentClick('label571', 'label570');" onmouseover="ContentPreview('label571');" onmouseout="ContentUnpreview('label571');" title="click to collapse or expand..."> more... </a> <div id="label571" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wimax_4g_usb</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">wireless_controller</span> - Enable/disable the wireless controller feature to use the FortiGate unit to manage FortiAPs. <span class="li-normal">type: str</span> <span class="li-normal">choices: enable, disable</span> <a id='label572' href="javascript:ContentClick('label573', 'label572');" onmouseover="ContentPreview('label573');" onmouseout="ContentUnpreview('label573');" title="click to collapse or expand..."> more... </a> <div id="label573" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wireless_controller</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> <tr> <td>[enable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> <tr> <td>[disable]</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3</code></td> </table> </div> </li> <li> <span class="li-head">wireless_controller_port</span> - Port used for the control channel in wireless controller mode (wireless-mode is ac). The data channel port is the control channel port number plus one (1024 - 49150). <span class="li-normal">type: int</span> <a id='label574' href="javascript:ContentClick('label575', 'label574');" onmouseover="ContentPreview('label575');" onmouseout="ContentUnpreview('label575');" title="click to collapse or expand..."> more... </a> <div id="label575" style="display:none"> <table border="1"> <tr> <td></td> <td colspan="1">Supported Version Ranges</td> </tr> <tr> <td>wireless_controller_port</td> <td><code class="docutils literal notranslate">v6.0.0 -> 7.4.3 </code></td> </tr> </table> </div> </li> </ul> </ul>

    Notes

    Note

    • Legacy fortiosapi has been deprecated, httpapi is the preferred way to run playbooks

    Examples

    - name: Configure global attributes.
      fortinet.fortios.fortios_system_global:
          vdom: "{{ vdom }}"
          system_global:
              admin_concurrent: "enable"
              admin_console_timeout: "0"
              admin_forticloud_sso_default_profile: "<your_own_value> (source system.accprofile.name)"
              admin_forticloud_sso_login: "enable"
              admin_host: "myhostname"
              admin_hsts_max_age: "15552000"
              admin_https_pki_required: "enable"
              admin_https_redirect: "enable"
              admin_https_ssl_banned_ciphers: "RSA"
              admin_https_ssl_ciphersuites: "TLS-AES-128-GCM-SHA256"
              admin_https_ssl_versions: "tlsv1-1"
              admin_lockout_duration: "60"
              admin_lockout_threshold: "3"
              admin_login_max: "100"
              admin_maintainer: "enable"
              admin_port: "80"
              admin_restrict_local: "enable"
              admin_scp: "enable"
              admin_server_cert: "<your_own_value> (source certificate.local.name)"
              admin_sport: "443"
              admin_ssh_grace_time: "120"
              admin_ssh_password: "enable"
              admin_ssh_port: "22"
              admin_ssh_v1: "enable"
              admin_telnet: "enable"
              admin_telnet_port: "23"
              admintimeout: "5"
              alias: "<your_own_value>"
              allow_traffic_redirect: "enable"
              anti_replay: "disable"
              arp_max_entry: "131072"
              asymroute: "enable"
              auth_cert: "<your_own_value> (source certificate.local.name)"
              auth_http_port: "1000"
              auth_https_port: "1003"
              auth_ike_saml_port: "1001"
              auth_keepalive: "enable"
              auth_session_limit: "block-new"
              auto_auth_extension_device: "enable"
              autorun_log_fsck: "enable"
              av_affinity: "<your_own_value>"
              av_failopen: "pass"
              av_failopen_session: "enable"
              batch_cmdb: "enable"
              bfd_affinity: "<your_own_value>"
              block_session_timer: "30"
              br_fdb_max_entry: "8192"
              cert_chain_max: "8"
              cfg_revert_timeout: "600"
              cfg_save: "automatic"
              check_protocol_header: "loose"
              check_reset_range: "strict"
              cli_audit_log: "enable"
              cloud_communication: "enable"
              clt_cert_req: "enable"
              cmdbsvr_affinity: "<your_own_value>"
              compliance_check: "enable"
              compliance_check_time: "<your_own_value>"
              cpu_use_threshold: "90"
              csr_ca_attribute: "enable"
              daily_restart: "enable"
              default_service_source_port: "<your_own_value>"
              device_identification_active_scan_delay: "1800"
              device_idle_timeout: "300"
              dh_params: "1024"
              dnsproxy_worker_count: "1"
              dst: "enable"
              early_tcp_npu_session: "enable"
              edit_vdom_prompt: "enable"
              endpoint_control_fds_access: "enable"
              endpoint_control_portal_port: "32767"
              extender_controller_reserved_network: "<your_own_value>"
              failtime: "5"
              faz_disk_buffer_size: "0"
              fds_statistics: "enable"
              fds_statistics_period: "60"
              fec_port: "50000"
              fgd_alert_subscription: "advisory"
              forticarrier_bypass: "enable"
              forticonverter_config_upload: "once"
              forticonverter_integration: "enable"
              fortiextender: "disable"
              fortiextender_data_port: "25246"
              fortiextender_discovery_lockdown: "disable"
              fortiextender_provision_on_authorization: "enable"
              fortiextender_vlan_mode: "enable"
              fortigslb_integration: "disable"
              fortiipam_integration: "enable"
              fortiservice_port: "8013"
              fortitoken_cloud: "enable"
              fortitoken_cloud_push_status: "enable"
              fortitoken_cloud_sync_interval: "24"
              gui_allow_default_hostname: "enable"
              gui_allow_incompatible_fabric_fgt: "enable"
              gui_app_detection_sdwan: "enable"
              gui_auto_upgrade_setup_warning: "enable"
              gui_cdn_domain_override: "<your_own_value>"
              gui_cdn_usage: "enable"
              gui_certificates: "enable"
              gui_custom_language: "enable"
              gui_date_format: "yyyy/MM/dd"
              gui_date_time_source: "system"
              gui_device_latitude: "<your_own_value>"
              gui_device_longitude: "<your_own_value>"
              gui_display_hostname: "enable"
              gui_firmware_upgrade_warning: "enable"
              gui_forticare_registration_setup_warning: "enable"
              gui_fortigate_cloud_sandbox: "enable"
              gui_fortiguard_resource_fetch: "enable"
              gui_fortisandbox_cloud: "enable"
              gui_ipv6: "enable"
              gui_lines_per_page: "500"
              gui_local_out: "enable"
              gui_replacement_message_groups: "enable"
              gui_rest_api_cache: "enable"
              gui_theme: "jade"
              gui_wireless_opensecurity: "enable"
              gui_workflow_management: "enable"
              ha_affinity: "<your_own_value>"
              honor_df: "enable"
              hostname: "myhostname"
              igmp_state_limit: "3200"
              interface_subnet_usage: "disable"
              internet_service_database: "mini"
              internet_service_download_list:
                  -
                      id: "128 (source firewall.internet-service.id)"
              interval: "5"
              ip_fragment_mem_thresholds: "32"
              ip_src_port_range: "<your_own_value>"
              ips_affinity: "<your_own_value>"
              ipsec_asic_offload: "enable"
              ipsec_ha_seqjump_rate: "10"
              ipsec_hmac_offload: "enable"
              ipsec_round_robin: "enable"
              ipsec_soft_dec_async: "enable"
              ipv6_accept_dad: "1"
              ipv6_allow_anycast_probe: "enable"
              ipv6_allow_local_in_slient_drop: "enable"
              ipv6_allow_multicast_probe: "enable"
              ipv6_allow_traffic_redirect: "enable"
              irq_time_accounting: "auto"
              language: "english"
              ldapconntimeout: "500"
              lldp_reception: "enable"
              lldp_transmission: "enable"
              log_single_cpu_high: "enable"
              log_ssl_connection: "enable"
              log_uuid: "disable"
              log_uuid_address: "enable"
              log_uuid_policy: "enable"
              login_timestamp: "enable"
              long_vdom_name: "enable"
              management_ip: "<your_own_value>"
              management_port: "443"
              management_port_use_admin_sport: "enable"
              management_vdom: "<your_own_value> (source system.vdom.name)"
              max_dlpstat_memory: "159"
              max_route_cache_size: "0"
              mc_ttl_notchange: "enable"
              memory_use_threshold_extreme: "95"
              memory_use_threshold_green: "82"
              memory_use_threshold_red: "88"
              miglog_affinity: "<your_own_value>"
              miglogd_children: "0"
              multi_factor_authentication: "optional"
              multicast_forward: "enable"
              ndp_max_entry: "0"
              per_user_bal: "enable"
              per_user_bwl: "enable"
              pmtu_discovery: "enable"
              policy_auth_concurrent: "0"
              post_login_banner: "disable"
              pre_login_banner: "enable"
              private_data_encryption: "disable"
              proxy_auth_lifetime: "enable"
              proxy_auth_lifetime_timeout: "480"
              proxy_auth_timeout: "10"
              proxy_cert_use_mgmt_vdom: "enable"
              proxy_cipher_hardware_acceleration: "disable"
              proxy_hardware_acceleration: "disable"
              proxy_keep_alive_mode: "session"
              proxy_kxp_hardware_acceleration: "disable"
              proxy_re_authentication_mode: "session"
              proxy_re_authentication_time: "30"
              proxy_resource_mode: "enable"
              proxy_worker_count: "0"
              purdue_level: "1"
              quic_ack_thresold: "3"
              quic_congestion_control_algo: "cubic"
              quic_max_datagram_size: "1500"
              quic_pmtud: "enable"
              quic_tls_handshake_timeout: "5"
              quic_udp_payload_size_shaping_per_cid: "enable"
              radius_port: "1812"
              reboot_upon_config_restore: "enable"
              refresh: "0"
              remoteauthtimeout: "5"
              reset_sessionless_tcp: "enable"
              restart_time: "<your_own_value>"
              revision_backup_on_logout: "enable"
              revision_image_auto_backup: "enable"
              scanunit_count: "0"
              security_rating_result_submission: "enable"
              security_rating_run_on_schedule: "enable"
              send_pmtu_icmp: "enable"
              sflowd_max_children_num: "6"
              snat_route_change: "enable"
              special_file_23_support: "disable"
              speedtest_server: "enable"
              speedtestd_ctrl_port: "5200"
              speedtestd_server_port: "5201"
              split_port: "<your_own_value>"
              split_port_mode:
                  -
                      interface: "<your_own_value>"
                      split_mode: "disable"
              ssd_trim_date: "1"
              ssd_trim_freq: "never"
              ssd_trim_hour: "1"
              ssd_trim_min: "60"
              ssd_trim_weekday: "sunday"
              ssh_cbc_cipher: "enable"
              ssh_enc_algo: "chacha20-poly1305@openssh.com"
              ssh_hmac_md5: "enable"
              ssh_hostkey: "myhostname"
              ssh_hostkey_algo: "ssh-rsa"
              ssh_hostkey_override: "disable"
              ssh_hostkey_password: "myhostname"
              ssh_kex_algo: "diffie-hellman-group1-sha1"
              ssh_kex_sha1: "enable"
              ssh_mac_algo: "hmac-md5"
              ssh_mac_weak: "enable"
              ssl_min_proto_version: "SSLv3"
              ssl_static_key_ciphers: "enable"
              sslvpn_cipher_hardware_acceleration: "enable"
              sslvpn_ems_sn_check: "enable"
              sslvpn_kxp_hardware_acceleration: "enable"
              sslvpn_max_worker_count: "0"
              sslvpn_plugin_version_check: "enable"
              sslvpn_web_mode: "enable"
              strict_dirty_session_check: "enable"
              strong_crypto: "enable"
              switch_controller: "disable"
              switch_controller_reserved_network: "<your_own_value>"
              sys_perf_log_interval: "5"
              syslog_affinity: "<your_own_value>"
              tcp_halfclose_timer: "120"
              tcp_halfopen_timer: "10"
              tcp_option: "enable"
              tcp_rst_timer: "5"
              tcp_timewait_timer: "1"
              tftp: "enable"
              timezone: "<your_own_value> (source system.timezone.name)"
              tp_mc_skip_policy: "enable"
              traffic_priority: "tos"
              traffic_priority_level: "low"
              two_factor_email_expiry: "60"
              two_factor_fac_expiry: "60"
              two_factor_ftk_expiry: "60"
              two_factor_ftm_expiry: "72"
              two_factor_sms_expiry: "60"
              udp_idle_timer: "180"
              url_filter_affinity: "<your_own_value>"
              url_filter_count: "1"
              user_device_store_max_devices: "20911"
              user_device_store_max_unified_mem: "104558182"
              user_device_store_max_users: "20911"
              user_server_cert: "<your_own_value> (source certificate.local.name)"
              vdom_admin: "enable"
              vdom_mode: "no-vdom"
              vip_arp_range: "unlimited"
              virtual_server_count: "20"
              virtual_server_hardware_acceleration: "disable"
              virtual_switch_vlan: "enable"
              vpn_ems_sn_check: "enable"
              wad_affinity: "<your_own_value>"
              wad_csvc_cs_count: "1"
              wad_csvc_db_count: "0"
              wad_memory_change_granularity: "10"
              wad_restart_end_time: "<your_own_value>"
              wad_restart_mode: "none"
              wad_restart_start_time: "<your_own_value>"
              wad_source_affinity: "disable"
              wad_worker_count: "0"
              wifi_ca_certificate: "<your_own_value> (source certificate.ca.name)"
              wifi_certificate: "<your_own_value> (source certificate.local.name)"
              wimax_4g_usb: "enable"
              wireless_controller: "enable"
              wireless_controller_port: "5246"

    Return Values

    Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module:

    • build - Build number of the fortigate image returned: always type: str sample: 1547
    • http_method - Last method used to provision the content into FortiGate returned: always type: str sample: PUT
    • http_status - Last result given by FortiGate on last operation applied returned: always type: str sample: 200
    • mkey - Master key (id) used in the last call to FortiGate returned: success type: str sample: id
    • name - Name of the table used to fulfill the request returned: always type: str sample: urlfilter
    • path - Path of the table used to fulfill the request returned: always type: str sample: webfilter
    • revision - Internal revision number returned: always type: str sample: 17.0.2.10658
    • serial - Serial number of the unit returned: always type: str sample: FGVMEVYYQT3AB5352
    • status - Indication of the operation's result returned: always type: str sample: success
    • vdom - Virtual domain used returned: always type: str sample: root
    • version - Version of the FortiGate returned: always type: str sample: v5.6.3

    Status

    • This module is not guaranteed to have a backwards compatible interface.

    Authors

    • Link Zheng (@chillancezen)
    • Jie Xue (@JieX19)
    • Hongbin Lu (@fgtdev-hblu)
    • Frank Shen (@frankshen01)
    • Miguel Angel Munoz (@mamunozgonzalez)
    • Nicolas Thomas (@thomnico)

    Hint

    If you notice any issues in this documentation, you can create a pull request to improve it.