source: | fortios_dlp_sensor.py |
---|---|
orphan: |
.. versionadded:: 2.0.0
- This module is able to configure a FortiGate or FortiOS (FOS) device by allowing the user to set and modify dlp feature and sensor category. Examples include all parameters and values need to be adjusted to datasources before usage. Tested with FOS v6.0.0
The below requirements are needed on the host that executes this module.
- ansible>=2.9
v6.0.0 |
v6.0.5 |
v6.0.11 |
v6.2.0 |
v6.2.3 |
v6.2.5 |
v6.2.7 |
v6.4.0 |
v6.4.1 |
v6.4.4 |
v7.0.0 |
v7.0.1 |
v7.0.2 |
v7.0.3 |
v7.0.4 |
v7.0.5 |
v7.0.6 |
v7.0.7 |
v7.0.8 |
v7.2.0 |
v7.2.1 |
v7.2.2 |
|
fortios_dlp_sensor | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes |
- access_token - Token-based authentication. Generated from GUI of Fortigate. type: str required: false
- enable_log - Enable/Disable logging for task. type: bool required: false default: False
- vdom - Virtual domain, among those defined previously. A vdom is a virtual instance of the FortiGate that can be configured and used as a different unit. type: str default: root
- member_path - Member attribute path to operate on. type: str
- member_state - Add or delete a member under specified attribute path. type: str choices: present, absent
- state - Indicates whether to create or remove the object. type: str required: true choices: present, absent
- dlp_sensor - Configure sensors used by DLP blocking. type: dict
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
v7.2.0
v7.2.1
v7.2.2
dlp_sensor yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - comment - Optional comments. type: str
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
v7.2.0
v7.2.1
v7.2.2
comment yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - dlp_log - Enable/disable DLP logging. type: str choices: enable, disable
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
dlp_log yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [enable] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [disable] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - entries - DLP sensor entries. type: list
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
v7.2.0
v7.2.1
v7.2.2
entries no no no no no no no no no no no no no no no no no no no yes yes yes - count - Count of dictionary matches to trigger sensor entry match (Dictionary might not be able to trigger more than once based on its "repeat" option, 1 - 255). type: int
more...
v7.2.0
v7.2.1
v7.2.2
count yes yes yes - dictionary - Select a DLP dictionary. Source dlp.dictionary.name. type: str
more...
v7.2.0
v7.2.1
v7.2.2
dictionary yes yes yes - id - ID. type: int
more...
v7.2.0
v7.2.1
v7.2.2
id yes yes yes - status - Enable/disable this entry. type: str choices: enable, disable
more...
v7.2.0
v7.2.1
v7.2.2
status yes yes yes [enable] yes yes yes [disable] yes yes yes - eval - Expression to evaluate. type: str
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
v7.2.0
v7.2.1
v7.2.2
eval no no no no no no no no no no no no no no no no no no no yes yes yes - extended_log - Enable/disable extended logging for data leak prevention. type: str choices: enable, disable
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
extended_log yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [enable] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [disable] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - feature_set - Flow/proxy feature set. type: str choices: flow, proxy
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
feature_set no no no no no no no yes yes yes yes yes yes yes yes yes yes yes yes [flow] n/a n/a n/a n/a n/a n/a n/a yes yes yes yes yes yes yes yes yes yes yes yes [proxy] n/a n/a n/a n/a n/a n/a n/a yes yes yes yes yes yes yes yes yes yes yes yes - filter - Set up DLP filters for this sensor. type: list
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
filter yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - action - Action to take with content that this DLP sensor matches. type: str choices: allow, log-only, block, quarantine-ip
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
action yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [allow] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [log-only] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [block] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [quarantine-ip] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - archive - Enable/disable DLP archiving. type: str choices: disable, enable
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
archive yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [disable] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [enable] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - company_identifier - Enter a company identifier watermark to match. Only watermarks that your company has placed on the files are matched. type: str
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
company_identifier yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - expiry - Quarantine duration in days, hours, minutes (format = dddhhmm). type: str
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
expiry yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - file_size - Match files this size or larger (0 - 4294967295 kbytes). type: int
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
file_size yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - file_type - Select the number of a DLP file pattern table to match. Source dlp.filepattern.id. type: int
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
file_type yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - filter_by - Select the type of content to match. type: str choices: credit-card, ssn, regexp, file-type, file-size, fingerprint, watermark, encrypted
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
filter_by yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [credit-card] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [ssn] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [regexp] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [file-type] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [file-size] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [fingerprint] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [watermark] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [encrypted] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - fp_sensitivity - Select a DLP file pattern sensitivity to match. type: list
more...
v6.0.0
v6.0.5
v6.0.11
fp_sensitivity yes yes yes - name - Select a DLP sensitivity. Source dlp.fp-sensitivity.name. type: str
more...
v6.0.0
v6.0.5
v6.0.11
name yes yes yes - id - ID. type: int
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
id yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - match_percentage - Percentage of fingerprints in the fingerprint databases designated with the selected sensitivity to match. type: int
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
match_percentage yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - name - Filter name. type: str
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
name yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - proto - Check messages or files over one or more of these protocols. type: list choices: smtp, pop3, imap, http-get, http-post, ftp, nntp, mapi, ssh, cifs, mm1, mm3, mm4, mm7
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
proto yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [smtp] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [pop3] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [imap] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [http-get] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [http-post] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [ftp] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [nntp] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [mapi] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [ssh] no no no yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [cifs] no no no no no no no yes yes yes yes yes yes yes yes yes yes yes yes [mm1] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a [mm3] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a [mm4] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a [mm7] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a - regexp - Enter a regular expression to match (max. 255 characters). type: str
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
regexp yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - sensitivity - Select a DLP file pattern sensitivity to match. type: list
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
sensitivity no no no yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - name - Select a DLP sensitivity. Source dlp.sensitivity.name. type: str
more...
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
name yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - severity - Select the severity or threat level that matches this filter. type: str choices: info, low, medium, high, critical
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
severity yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [info] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [low] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [medium] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [high] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [critical] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - type - Select whether to check the content of messages (an email message) or files (downloaded files or email attachments). type: str choices: file, message
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
type yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [file] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [message] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - flow_based - Enable/disable flow-based DLP. type: str choices: enable, disable
more...
v6.0.0
v6.0.5
v6.0.11
flow_based yes yes yes [enable] yes yes yes [disable] yes yes yes - full_archive_proto - Protocols to always content archive. type: list choices: smtp, pop3, imap, http-get, http-post, ftp, nntp, mapi, ssh, cifs, mm1, mm3, mm4, mm7
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
full_archive_proto yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [smtp] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [pop3] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [imap] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [http-get] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [http-post] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [ftp] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [nntp] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [mapi] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [ssh] no no no yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [cifs] no no no no no no no yes yes yes yes yes yes yes yes yes yes yes yes [mm1] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a [mm3] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a [mm4] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a [mm7] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a - match_type - Logical relation between entries . type: str choices: match-all, match-any, match-eval
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
v7.2.0
v7.2.1
v7.2.2
match_type no no no no no no no no no no no no no no no no no no no yes yes yes [match-all] n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a yes yes yes [match-any] n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a yes yes yes [match-eval] n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a yes yes yes - nac_quar_log - Enable/disable NAC quarantine logging. type: str choices: enable, disable
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
nac_quar_log yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [enable] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [disable] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - name - Name of table containing the sensor. type: str required: true
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
v7.2.0
v7.2.1
v7.2.2
name yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - options - Configure DLP options. type: str
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
options yes yes yes yes yes yes yes - replacemsg_group - Replacement message group used by this DLP sensor. Source system.replacemsg-group.name. type: str
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
replacemsg_group yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes - summary_proto - Protocols to always log summary. type: list choices: smtp, pop3, imap, http-get, http-post, ftp, nntp, mapi, ssh, cifs, mm1, mm3, mm4, mm7
more...
v6.0.0
v6.0.5
v6.0.11
v6.2.0
v6.2.3
v6.2.5
v6.2.7
v6.4.0
v6.4.1
v6.4.4
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
summary_proto yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [smtp] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [pop3] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [imap] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [http-get] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [http-post] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [ftp] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [nntp] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [mapi] yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [ssh] no no no yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes yes [cifs] no no no no no no no yes yes yes yes yes yes yes yes yes yes yes yes [mm1] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a [mm3] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a [mm4] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a [mm7] yes yes yes yes yes yes yes n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a n/a
Note
- Legacy fortiosapi has been deprecated, httpapi is the preferred way to run playbooks
- hosts: fortigates
collections:
- fortinet.fortios
connection: httpapi
vars:
vdom: "root"
ansible_httpapi_use_ssl: yes
ansible_httpapi_validate_certs: no
ansible_httpapi_port: 443
tasks:
- name: Configure sensors used by DLP blocking.
fortios_dlp_sensor:
vdom: "{{ vdom }}"
state: "present"
access_token: "<your_own_value>"
dlp_sensor:
comment: "Optional comments."
dlp_log: "enable"
entries:
-
count: "1"
dictionary: "<your_own_value> (source dlp.dictionary.name)"
id: "8"
status: "enable"
eval: "<your_own_value>"
extended_log: "enable"
feature_set: "flow"
filter:
-
action: "allow"
archive: "disable"
company_identifier: "myId_16"
expiry: "<your_own_value>"
file_size: "10"
file_type: "0"
filter_by: "credit-card"
fp_sensitivity:
-
name: "default_name_22 (source dlp.fp-sensitivity.name)"
id: "23"
match_percentage: "10"
name: "default_name_25"
proto: "smtp"
regexp: "<your_own_value>"
sensitivity:
-
name: "default_name_29 (source dlp.sensitivity.name)"
severity: "info"
type: "file"
flow_based: "enable"
full_archive_proto: "smtp"
match_type: "match-all"
nac_quar_log: "enable"
name: "default_name_36"
options: "<your_own_value>"
replacemsg_group: "<your_own_value> (source system.replacemsg-group.name)"
summary_proto: "smtp"
Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module:
- build - Build number of the fortigate image returned: always type: str sample: 1547
- http_method - Last method used to provision the content into FortiGate returned: always type: str sample: PUT
- http_status - Last result given by FortiGate on last operation applied returned: always type: str sample: 200
- mkey - Master key (id) used in the last call to FortiGate returned: success type: str sample: id
- name - Name of the table used to fulfill the request returned: always type: str sample: urlfilter
- path - Path of the table used to fulfill the request returned: always type: str sample: webfilter
- revision - Internal revision number returned: always type: str sample: 17.0.2.10658
- serial - Serial number of the unit returned: always type: str sample: FGVMEVYYQT3AB5352
- status - Indication of the operation's result returned: always type: str sample: success
- vdom - Virtual domain used returned: always type: str sample: root
- version - Version of the FortiGate returned: always type: str sample: v5.6.3
- This module is not guaranteed to have a backwards compatible interface.
- Link Zheng (@chillancezen)
- Jie Xue (@JieX19)
- Hongbin Lu (@fgtdev-hblu)
- Frank Shen (@frankshen01)
- Miguel Angel Munoz (@mamunozgonzalez)
- Nicolas Thomas (@thomnico)
Hint
If you notice any issues in this documentation, you can create a pull request to improve it.