Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. SystemGlobal
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.SystemGlobal

Explore with Pulumi AI

fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

Global range attributes.

The following variables have sub resource. Avoid using them together, otherwise conflicts and overwrites may occur.

  • mc_policy_disabled_adoms: fortimanager_system_global_mcpolicydisabledadoms
  • ssl_cipher_suites: fortimanager.SystemGlobalSslciphersuites

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";

const trname = new fortimanager.SystemGlobal("trname", {
    hostname: "FMG-Terr",
    language: "en",
});
Copy
import pulumi
import pulumi_fortimanager as fortimanager

trname = fortimanager.SystemGlobal("trname",
    hostname="FMG-Terr",
    language="en")
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := fortimanager.NewSystemGlobal(ctx, "trname", &fortimanager.SystemGlobalArgs{
			Hostname: pulumi.String("FMG-Terr"),
			Language: pulumi.String("en"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;

return await Deployment.RunAsync(() => 
{
    var trname = new Fortimanager.SystemGlobal("trname", new()
    {
        Hostname = "FMG-Terr",
        Language = "en",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.SystemGlobal;
import com.pulumi.fortimanager.SystemGlobalArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trname = new SystemGlobal("trname", SystemGlobalArgs.builder()
            .hostname("FMG-Terr")
            .language("en")
            .build());

    }
}
Copy
resources:
  trname:
    type: fortimanager:SystemGlobal
    properties:
      hostname: FMG-Terr
      language: en
Copy

Create SystemGlobal Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new SystemGlobal(name: string, args?: SystemGlobalArgs, opts?: CustomResourceOptions);
@overload
def SystemGlobal(resource_name: str,
                 args: Optional[SystemGlobalArgs] = None,
                 opts: Optional[ResourceOptions] = None)

@overload
def SystemGlobal(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 admin_host: Optional[str] = None,
                 admin_lockout_duration: Optional[float] = None,
                 admin_lockout_method: Optional[str] = None,
                 admin_lockout_threshold: Optional[float] = None,
                 admin_ssh_grace_time: Optional[float] = None,
                 adom_mode: Optional[str] = None,
                 adom_rev_auto_delete: Optional[str] = None,
                 adom_rev_max_backup_revisions: Optional[float] = None,
                 adom_rev_max_days: Optional[float] = None,
                 adom_rev_max_revisions: Optional[float] = None,
                 adom_select: Optional[str] = None,
                 adom_status: Optional[str] = None,
                 apache_mode: Optional[str] = None,
                 api_ip_binding: Optional[str] = None,
                 clone_name_option: Optional[str] = None,
                 clt_cert_req: Optional[str] = None,
                 console_output: Optional[str] = None,
                 contentpack_fgt_install: Optional[str] = None,
                 country_flag: Optional[str] = None,
                 create_revision: Optional[str] = None,
                 daylightsavetime: Optional[str] = None,
                 detect_unregistered_log_device: Optional[str] = None,
                 device_view_mode: Optional[str] = None,
                 dh_params: Optional[str] = None,
                 disable_modules: Optional[Sequence[str]] = None,
                 dynamic_sort_subtable: Optional[str] = None,
                 enc_algorithm: Optional[str] = None,
                 fabric_storage_pool_quota: Optional[float] = None,
                 fabric_storage_pool_size: Optional[float] = None,
                 faz_status: Optional[str] = None,
                 fcp_cfg_service: Optional[str] = None,
                 fgfm_ca_cert: Optional[str] = None,
                 fgfm_cert_exclusive: Optional[str] = None,
                 fgfm_deny_unknown: Optional[str] = None,
                 fgfm_local_cert: Optional[str] = None,
                 fgfm_peercert_withoutsn: Optional[str] = None,
                 fgfm_ssl_protocol: Optional[str] = None,
                 fortiservice_port: Optional[float] = None,
                 global_ssl_protocol: Optional[str] = None,
                 gui_curl_timeout: Optional[float] = None,
                 gui_polling_interval: Optional[float] = None,
                 ha_member_auto_grouping: Optional[str] = None,
                 hostname: Optional[str] = None,
                 httpd_ssl_protocols: Optional[Sequence[str]] = None,
                 import_ignore_addr_cmt: Optional[str] = None,
                 jsonapi_log: Optional[str] = None,
                 language: Optional[str] = None,
                 latitude: Optional[str] = None,
                 ldap_cache_timeout: Optional[float] = None,
                 ldapconntimeout: Optional[float] = None,
                 lock_preempt: Optional[str] = None,
                 log_checksum: Optional[str] = None,
                 log_checksum_upload: Optional[str] = None,
                 log_forward_cache_size: Optional[float] = None,
                 longitude: Optional[str] = None,
                 management_ip: Optional[str] = None,
                 management_port: Optional[float] = None,
                 mapclient_ssl_protocol: Optional[str] = None,
                 max_log_forward: Optional[float] = None,
                 max_running_reports: Optional[float] = None,
                 mc_policy_disabled_adoms: Optional[Sequence[SystemGlobalMcPolicyDisabledAdomArgs]] = None,
                 multiple_steps_upgrade_in_autolink: Optional[str] = None,
                 no_copy_permission_check: Optional[str] = None,
                 no_vip_value_check: Optional[str] = None,
                 normalized_intf_zone_only: Optional[str] = None,
                 object_revision_db_max: Optional[float] = None,
                 object_revision_mandatory_note: Optional[str] = None,
                 object_revision_object_max: Optional[float] = None,
                 object_revision_status: Optional[str] = None,
                 oftp_ssl_protocol: Optional[str] = None,
                 partial_install: Optional[str] = None,
                 partial_install_force: Optional[str] = None,
                 partial_install_rev: Optional[str] = None,
                 per_policy_lock: Optional[str] = None,
                 perform_improve_by_ha: Optional[str] = None,
                 policy_object_icon: Optional[str] = None,
                 policy_object_in_dual_pane: Optional[str] = None,
                 pre_login_banner: Optional[str] = None,
                 pre_login_banner_message: Optional[str] = None,
                 private_data_encryption: Optional[str] = None,
                 remoteauthtimeout: Optional[float] = None,
                 save_last_hit_in_adomdb: Optional[str] = None,
                 search_all_adoms: Optional[str] = None,
                 ssh_enc_algos: Optional[Sequence[str]] = None,
                 ssh_hostkey_algos: Optional[Sequence[str]] = None,
                 ssh_kex_algos: Optional[Sequence[str]] = None,
                 ssh_mac_algos: Optional[Sequence[str]] = None,
                 ssh_strong_crypto: Optional[str] = None,
                 ssl_cipher_suites: Optional[Sequence[SystemGlobalSslCipherSuiteArgs]] = None,
                 ssl_low_encryption: Optional[str] = None,
                 ssl_protocols: Optional[Sequence[str]] = None,
                 ssl_static_key_ciphers: Optional[str] = None,
                 system_global_id: Optional[str] = None,
                 table_entry_blink: Optional[str] = None,
                 task_list_size: Optional[float] = None,
                 tftp: Optional[str] = None,
                 timezone: Optional[str] = None,
                 tunnel_mtu: Optional[float] = None,
                 usg: Optional[str] = None,
                 vdom_mirror: Optional[str] = None,
                 webservice_protos: Optional[Sequence[str]] = None,
                 workflow_max_sessions: Optional[float] = None,
                 workspace_mode: Optional[str] = None,
                 workspace_unlock_after_install: Optional[str] = None)
func NewSystemGlobal(ctx *Context, name string, args *SystemGlobalArgs, opts ...ResourceOption) (*SystemGlobal, error)
public SystemGlobal(string name, SystemGlobalArgs? args = null, CustomResourceOptions? opts = null)
public SystemGlobal(String name, SystemGlobalArgs args)
public SystemGlobal(String name, SystemGlobalArgs args, CustomResourceOptions options)

type: fortimanager:SystemGlobal
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args SystemGlobalArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args SystemGlobalArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args SystemGlobalArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args SystemGlobalArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. SystemGlobalArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var systemGlobalResource = new Fortimanager.SystemGlobal("systemGlobalResource", new()
{
    AdminHost = "string",
    AdminLockoutDuration = 0,
    AdminLockoutMethod = "string",
    AdminLockoutThreshold = 0,
    AdminSshGraceTime = 0,
    AdomMode = "string",
    AdomRevAutoDelete = "string",
    AdomRevMaxBackupRevisions = 0,
    AdomRevMaxDays = 0,
    AdomRevMaxRevisions = 0,
    AdomSelect = "string",
    AdomStatus = "string",
    ApacheMode = "string",
    ApiIpBinding = "string",
    CloneNameOption = "string",
    CltCertReq = "string",
    ConsoleOutput = "string",
    ContentpackFgtInstall = "string",
    CountryFlag = "string",
    CreateRevision = "string",
    Daylightsavetime = "string",
    DetectUnregisteredLogDevice = "string",
    DeviceViewMode = "string",
    DhParams = "string",
    DisableModules = new[]
    {
        "string",
    },
    DynamicSortSubtable = "string",
    EncAlgorithm = "string",
    FabricStoragePoolQuota = 0,
    FabricStoragePoolSize = 0,
    FazStatus = "string",
    FcpCfgService = "string",
    FgfmCaCert = "string",
    FgfmCertExclusive = "string",
    FgfmDenyUnknown = "string",
    FgfmLocalCert = "string",
    FgfmPeercertWithoutsn = "string",
    FgfmSslProtocol = "string",
    FortiservicePort = 0,
    GlobalSslProtocol = "string",
    GuiCurlTimeout = 0,
    GuiPollingInterval = 0,
    HaMemberAutoGrouping = "string",
    Hostname = "string",
    HttpdSslProtocols = new[]
    {
        "string",
    },
    ImportIgnoreAddrCmt = "string",
    JsonapiLog = "string",
    Language = "string",
    Latitude = "string",
    LdapCacheTimeout = 0,
    Ldapconntimeout = 0,
    LockPreempt = "string",
    LogChecksum = "string",
    LogChecksumUpload = "string",
    LogForwardCacheSize = 0,
    Longitude = "string",
    ManagementIp = "string",
    ManagementPort = 0,
    MapclientSslProtocol = "string",
    MaxLogForward = 0,
    MaxRunningReports = 0,
    McPolicyDisabledAdoms = new[]
    {
        new Fortimanager.Inputs.SystemGlobalMcPolicyDisabledAdomArgs
        {
            AdomName = "string",
        },
    },
    MultipleStepsUpgradeInAutolink = "string",
    NoCopyPermissionCheck = "string",
    NoVipValueCheck = "string",
    NormalizedIntfZoneOnly = "string",
    ObjectRevisionDbMax = 0,
    ObjectRevisionMandatoryNote = "string",
    ObjectRevisionObjectMax = 0,
    ObjectRevisionStatus = "string",
    OftpSslProtocol = "string",
    PartialInstall = "string",
    PartialInstallForce = "string",
    PartialInstallRev = "string",
    PerPolicyLock = "string",
    PerformImproveByHa = "string",
    PolicyObjectIcon = "string",
    PolicyObjectInDualPane = "string",
    PreLoginBanner = "string",
    PreLoginBannerMessage = "string",
    PrivateDataEncryption = "string",
    Remoteauthtimeout = 0,
    SaveLastHitInAdomdb = "string",
    SearchAllAdoms = "string",
    SshEncAlgos = new[]
    {
        "string",
    },
    SshHostkeyAlgos = new[]
    {
        "string",
    },
    SshKexAlgos = new[]
    {
        "string",
    },
    SshMacAlgos = new[]
    {
        "string",
    },
    SshStrongCrypto = "string",
    SslCipherSuites = new[]
    {
        new Fortimanager.Inputs.SystemGlobalSslCipherSuiteArgs
        {
            Cipher = "string",
            Priority = 0,
            Version = "string",
        },
    },
    SslLowEncryption = "string",
    SslProtocols = new[]
    {
        "string",
    },
    SslStaticKeyCiphers = "string",
    SystemGlobalId = "string",
    TableEntryBlink = "string",
    TaskListSize = 0,
    Tftp = "string",
    Timezone = "string",
    TunnelMtu = 0,
    Usg = "string",
    VdomMirror = "string",
    WebserviceProtos = new[]
    {
        "string",
    },
    WorkflowMaxSessions = 0,
    WorkspaceMode = "string",
    WorkspaceUnlockAfterInstall = "string",
});
Copy
example, err := fortimanager.NewSystemGlobal(ctx, "systemGlobalResource", &fortimanager.SystemGlobalArgs{
AdminHost: pulumi.String("string"),
AdminLockoutDuration: pulumi.Float64(0),
AdminLockoutMethod: pulumi.String("string"),
AdminLockoutThreshold: pulumi.Float64(0),
AdminSshGraceTime: pulumi.Float64(0),
AdomMode: pulumi.String("string"),
AdomRevAutoDelete: pulumi.String("string"),
AdomRevMaxBackupRevisions: pulumi.Float64(0),
AdomRevMaxDays: pulumi.Float64(0),
AdomRevMaxRevisions: pulumi.Float64(0),
AdomSelect: pulumi.String("string"),
AdomStatus: pulumi.String("string"),
ApacheMode: pulumi.String("string"),
ApiIpBinding: pulumi.String("string"),
CloneNameOption: pulumi.String("string"),
CltCertReq: pulumi.String("string"),
ConsoleOutput: pulumi.String("string"),
ContentpackFgtInstall: pulumi.String("string"),
CountryFlag: pulumi.String("string"),
CreateRevision: pulumi.String("string"),
Daylightsavetime: pulumi.String("string"),
DetectUnregisteredLogDevice: pulumi.String("string"),
DeviceViewMode: pulumi.String("string"),
DhParams: pulumi.String("string"),
DisableModules: pulumi.StringArray{
pulumi.String("string"),
},
DynamicSortSubtable: pulumi.String("string"),
EncAlgorithm: pulumi.String("string"),
FabricStoragePoolQuota: pulumi.Float64(0),
FabricStoragePoolSize: pulumi.Float64(0),
FazStatus: pulumi.String("string"),
FcpCfgService: pulumi.String("string"),
FgfmCaCert: pulumi.String("string"),
FgfmCertExclusive: pulumi.String("string"),
FgfmDenyUnknown: pulumi.String("string"),
FgfmLocalCert: pulumi.String("string"),
FgfmPeercertWithoutsn: pulumi.String("string"),
FgfmSslProtocol: pulumi.String("string"),
FortiservicePort: pulumi.Float64(0),
GlobalSslProtocol: pulumi.String("string"),
GuiCurlTimeout: pulumi.Float64(0),
GuiPollingInterval: pulumi.Float64(0),
HaMemberAutoGrouping: pulumi.String("string"),
Hostname: pulumi.String("string"),
HttpdSslProtocols: pulumi.StringArray{
pulumi.String("string"),
},
ImportIgnoreAddrCmt: pulumi.String("string"),
JsonapiLog: pulumi.String("string"),
Language: pulumi.String("string"),
Latitude: pulumi.String("string"),
LdapCacheTimeout: pulumi.Float64(0),
Ldapconntimeout: pulumi.Float64(0),
LockPreempt: pulumi.String("string"),
LogChecksum: pulumi.String("string"),
LogChecksumUpload: pulumi.String("string"),
LogForwardCacheSize: pulumi.Float64(0),
Longitude: pulumi.String("string"),
ManagementIp: pulumi.String("string"),
ManagementPort: pulumi.Float64(0),
MapclientSslProtocol: pulumi.String("string"),
MaxLogForward: pulumi.Float64(0),
MaxRunningReports: pulumi.Float64(0),
McPolicyDisabledAdoms: .SystemGlobalMcPolicyDisabledAdomArray{
&.SystemGlobalMcPolicyDisabledAdomArgs{
AdomName: pulumi.String("string"),
},
},
MultipleStepsUpgradeInAutolink: pulumi.String("string"),
NoCopyPermissionCheck: pulumi.String("string"),
NoVipValueCheck: pulumi.String("string"),
NormalizedIntfZoneOnly: pulumi.String("string"),
ObjectRevisionDbMax: pulumi.Float64(0),
ObjectRevisionMandatoryNote: pulumi.String("string"),
ObjectRevisionObjectMax: pulumi.Float64(0),
ObjectRevisionStatus: pulumi.String("string"),
OftpSslProtocol: pulumi.String("string"),
PartialInstall: pulumi.String("string"),
PartialInstallForce: pulumi.String("string"),
PartialInstallRev: pulumi.String("string"),
PerPolicyLock: pulumi.String("string"),
PerformImproveByHa: pulumi.String("string"),
PolicyObjectIcon: pulumi.String("string"),
PolicyObjectInDualPane: pulumi.String("string"),
PreLoginBanner: pulumi.String("string"),
PreLoginBannerMessage: pulumi.String("string"),
PrivateDataEncryption: pulumi.String("string"),
Remoteauthtimeout: pulumi.Float64(0),
SaveLastHitInAdomdb: pulumi.String("string"),
SearchAllAdoms: pulumi.String("string"),
SshEncAlgos: pulumi.StringArray{
pulumi.String("string"),
},
SshHostkeyAlgos: pulumi.StringArray{
pulumi.String("string"),
},
SshKexAlgos: pulumi.StringArray{
pulumi.String("string"),
},
SshMacAlgos: pulumi.StringArray{
pulumi.String("string"),
},
SshStrongCrypto: pulumi.String("string"),
SslCipherSuites: .SystemGlobalSslCipherSuiteArray{
&.SystemGlobalSslCipherSuiteArgs{
Cipher: pulumi.String("string"),
Priority: pulumi.Float64(0),
Version: pulumi.String("string"),
},
},
SslLowEncryption: pulumi.String("string"),
SslProtocols: pulumi.StringArray{
pulumi.String("string"),
},
SslStaticKeyCiphers: pulumi.String("string"),
SystemGlobalId: pulumi.String("string"),
TableEntryBlink: pulumi.String("string"),
TaskListSize: pulumi.Float64(0),
Tftp: pulumi.String("string"),
Timezone: pulumi.String("string"),
TunnelMtu: pulumi.Float64(0),
Usg: pulumi.String("string"),
VdomMirror: pulumi.String("string"),
WebserviceProtos: pulumi.StringArray{
pulumi.String("string"),
},
WorkflowMaxSessions: pulumi.Float64(0),
WorkspaceMode: pulumi.String("string"),
WorkspaceUnlockAfterInstall: pulumi.String("string"),
})
Copy
var systemGlobalResource = new SystemGlobal("systemGlobalResource", SystemGlobalArgs.builder()
    .adminHost("string")
    .adminLockoutDuration(0)
    .adminLockoutMethod("string")
    .adminLockoutThreshold(0)
    .adminSshGraceTime(0)
    .adomMode("string")
    .adomRevAutoDelete("string")
    .adomRevMaxBackupRevisions(0)
    .adomRevMaxDays(0)
    .adomRevMaxRevisions(0)
    .adomSelect("string")
    .adomStatus("string")
    .apacheMode("string")
    .apiIpBinding("string")
    .cloneNameOption("string")
    .cltCertReq("string")
    .consoleOutput("string")
    .contentpackFgtInstall("string")
    .countryFlag("string")
    .createRevision("string")
    .daylightsavetime("string")
    .detectUnregisteredLogDevice("string")
    .deviceViewMode("string")
    .dhParams("string")
    .disableModules("string")
    .dynamicSortSubtable("string")
    .encAlgorithm("string")
    .fabricStoragePoolQuota(0)
    .fabricStoragePoolSize(0)
    .fazStatus("string")
    .fcpCfgService("string")
    .fgfmCaCert("string")
    .fgfmCertExclusive("string")
    .fgfmDenyUnknown("string")
    .fgfmLocalCert("string")
    .fgfmPeercertWithoutsn("string")
    .fgfmSslProtocol("string")
    .fortiservicePort(0)
    .globalSslProtocol("string")
    .guiCurlTimeout(0)
    .guiPollingInterval(0)
    .haMemberAutoGrouping("string")
    .hostname("string")
    .httpdSslProtocols("string")
    .importIgnoreAddrCmt("string")
    .jsonapiLog("string")
    .language("string")
    .latitude("string")
    .ldapCacheTimeout(0)
    .ldapconntimeout(0)
    .lockPreempt("string")
    .logChecksum("string")
    .logChecksumUpload("string")
    .logForwardCacheSize(0)
    .longitude("string")
    .managementIp("string")
    .managementPort(0)
    .mapclientSslProtocol("string")
    .maxLogForward(0)
    .maxRunningReports(0)
    .mcPolicyDisabledAdoms(SystemGlobalMcPolicyDisabledAdomArgs.builder()
        .adomName("string")
        .build())
    .multipleStepsUpgradeInAutolink("string")
    .noCopyPermissionCheck("string")
    .noVipValueCheck("string")
    .normalizedIntfZoneOnly("string")
    .objectRevisionDbMax(0)
    .objectRevisionMandatoryNote("string")
    .objectRevisionObjectMax(0)
    .objectRevisionStatus("string")
    .oftpSslProtocol("string")
    .partialInstall("string")
    .partialInstallForce("string")
    .partialInstallRev("string")
    .perPolicyLock("string")
    .performImproveByHa("string")
    .policyObjectIcon("string")
    .policyObjectInDualPane("string")
    .preLoginBanner("string")
    .preLoginBannerMessage("string")
    .privateDataEncryption("string")
    .remoteauthtimeout(0)
    .saveLastHitInAdomdb("string")
    .searchAllAdoms("string")
    .sshEncAlgos("string")
    .sshHostkeyAlgos("string")
    .sshKexAlgos("string")
    .sshMacAlgos("string")
    .sshStrongCrypto("string")
    .sslCipherSuites(SystemGlobalSslCipherSuiteArgs.builder()
        .cipher("string")
        .priority(0)
        .version("string")
        .build())
    .sslLowEncryption("string")
    .sslProtocols("string")
    .sslStaticKeyCiphers("string")
    .systemGlobalId("string")
    .tableEntryBlink("string")
    .taskListSize(0)
    .tftp("string")
    .timezone("string")
    .tunnelMtu(0)
    .usg("string")
    .vdomMirror("string")
    .webserviceProtos("string")
    .workflowMaxSessions(0)
    .workspaceMode("string")
    .workspaceUnlockAfterInstall("string")
    .build());
Copy
system_global_resource = fortimanager.SystemGlobal("systemGlobalResource",
    admin_host="string",
    admin_lockout_duration=0,
    admin_lockout_method="string",
    admin_lockout_threshold=0,
    admin_ssh_grace_time=0,
    adom_mode="string",
    adom_rev_auto_delete="string",
    adom_rev_max_backup_revisions=0,
    adom_rev_max_days=0,
    adom_rev_max_revisions=0,
    adom_select="string",
    adom_status="string",
    apache_mode="string",
    api_ip_binding="string",
    clone_name_option="string",
    clt_cert_req="string",
    console_output="string",
    contentpack_fgt_install="string",
    country_flag="string",
    create_revision="string",
    daylightsavetime="string",
    detect_unregistered_log_device="string",
    device_view_mode="string",
    dh_params="string",
    disable_modules=["string"],
    dynamic_sort_subtable="string",
    enc_algorithm="string",
    fabric_storage_pool_quota=0,
    fabric_storage_pool_size=0,
    faz_status="string",
    fcp_cfg_service="string",
    fgfm_ca_cert="string",
    fgfm_cert_exclusive="string",
    fgfm_deny_unknown="string",
    fgfm_local_cert="string",
    fgfm_peercert_withoutsn="string",
    fgfm_ssl_protocol="string",
    fortiservice_port=0,
    global_ssl_protocol="string",
    gui_curl_timeout=0,
    gui_polling_interval=0,
    ha_member_auto_grouping="string",
    hostname="string",
    httpd_ssl_protocols=["string"],
    import_ignore_addr_cmt="string",
    jsonapi_log="string",
    language="string",
    latitude="string",
    ldap_cache_timeout=0,
    ldapconntimeout=0,
    lock_preempt="string",
    log_checksum="string",
    log_checksum_upload="string",
    log_forward_cache_size=0,
    longitude="string",
    management_ip="string",
    management_port=0,
    mapclient_ssl_protocol="string",
    max_log_forward=0,
    max_running_reports=0,
    mc_policy_disabled_adoms=[{
        "adom_name": "string",
    }],
    multiple_steps_upgrade_in_autolink="string",
    no_copy_permission_check="string",
    no_vip_value_check="string",
    normalized_intf_zone_only="string",
    object_revision_db_max=0,
    object_revision_mandatory_note="string",
    object_revision_object_max=0,
    object_revision_status="string",
    oftp_ssl_protocol="string",
    partial_install="string",
    partial_install_force="string",
    partial_install_rev="string",
    per_policy_lock="string",
    perform_improve_by_ha="string",
    policy_object_icon="string",
    policy_object_in_dual_pane="string",
    pre_login_banner="string",
    pre_login_banner_message="string",
    private_data_encryption="string",
    remoteauthtimeout=0,
    save_last_hit_in_adomdb="string",
    search_all_adoms="string",
    ssh_enc_algos=["string"],
    ssh_hostkey_algos=["string"],
    ssh_kex_algos=["string"],
    ssh_mac_algos=["string"],
    ssh_strong_crypto="string",
    ssl_cipher_suites=[{
        "cipher": "string",
        "priority": 0,
        "version": "string",
    }],
    ssl_low_encryption="string",
    ssl_protocols=["string"],
    ssl_static_key_ciphers="string",
    system_global_id="string",
    table_entry_blink="string",
    task_list_size=0,
    tftp="string",
    timezone="string",
    tunnel_mtu=0,
    usg="string",
    vdom_mirror="string",
    webservice_protos=["string"],
    workflow_max_sessions=0,
    workspace_mode="string",
    workspace_unlock_after_install="string")
Copy
const systemGlobalResource = new fortimanager.SystemGlobal("systemGlobalResource", {
    adminHost: "string",
    adminLockoutDuration: 0,
    adminLockoutMethod: "string",
    adminLockoutThreshold: 0,
    adminSshGraceTime: 0,
    adomMode: "string",
    adomRevAutoDelete: "string",
    adomRevMaxBackupRevisions: 0,
    adomRevMaxDays: 0,
    adomRevMaxRevisions: 0,
    adomSelect: "string",
    adomStatus: "string",
    apacheMode: "string",
    apiIpBinding: "string",
    cloneNameOption: "string",
    cltCertReq: "string",
    consoleOutput: "string",
    contentpackFgtInstall: "string",
    countryFlag: "string",
    createRevision: "string",
    daylightsavetime: "string",
    detectUnregisteredLogDevice: "string",
    deviceViewMode: "string",
    dhParams: "string",
    disableModules: ["string"],
    dynamicSortSubtable: "string",
    encAlgorithm: "string",
    fabricStoragePoolQuota: 0,
    fabricStoragePoolSize: 0,
    fazStatus: "string",
    fcpCfgService: "string",
    fgfmCaCert: "string",
    fgfmCertExclusive: "string",
    fgfmDenyUnknown: "string",
    fgfmLocalCert: "string",
    fgfmPeercertWithoutsn: "string",
    fgfmSslProtocol: "string",
    fortiservicePort: 0,
    globalSslProtocol: "string",
    guiCurlTimeout: 0,
    guiPollingInterval: 0,
    haMemberAutoGrouping: "string",
    hostname: "string",
    httpdSslProtocols: ["string"],
    importIgnoreAddrCmt: "string",
    jsonapiLog: "string",
    language: "string",
    latitude: "string",
    ldapCacheTimeout: 0,
    ldapconntimeout: 0,
    lockPreempt: "string",
    logChecksum: "string",
    logChecksumUpload: "string",
    logForwardCacheSize: 0,
    longitude: "string",
    managementIp: "string",
    managementPort: 0,
    mapclientSslProtocol: "string",
    maxLogForward: 0,
    maxRunningReports: 0,
    mcPolicyDisabledAdoms: [{
        adomName: "string",
    }],
    multipleStepsUpgradeInAutolink: "string",
    noCopyPermissionCheck: "string",
    noVipValueCheck: "string",
    normalizedIntfZoneOnly: "string",
    objectRevisionDbMax: 0,
    objectRevisionMandatoryNote: "string",
    objectRevisionObjectMax: 0,
    objectRevisionStatus: "string",
    oftpSslProtocol: "string",
    partialInstall: "string",
    partialInstallForce: "string",
    partialInstallRev: "string",
    perPolicyLock: "string",
    performImproveByHa: "string",
    policyObjectIcon: "string",
    policyObjectInDualPane: "string",
    preLoginBanner: "string",
    preLoginBannerMessage: "string",
    privateDataEncryption: "string",
    remoteauthtimeout: 0,
    saveLastHitInAdomdb: "string",
    searchAllAdoms: "string",
    sshEncAlgos: ["string"],
    sshHostkeyAlgos: ["string"],
    sshKexAlgos: ["string"],
    sshMacAlgos: ["string"],
    sshStrongCrypto: "string",
    sslCipherSuites: [{
        cipher: "string",
        priority: 0,
        version: "string",
    }],
    sslLowEncryption: "string",
    sslProtocols: ["string"],
    sslStaticKeyCiphers: "string",
    systemGlobalId: "string",
    tableEntryBlink: "string",
    taskListSize: 0,
    tftp: "string",
    timezone: "string",
    tunnelMtu: 0,
    usg: "string",
    vdomMirror: "string",
    webserviceProtos: ["string"],
    workflowMaxSessions: 0,
    workspaceMode: "string",
    workspaceUnlockAfterInstall: "string",
});
Copy
type: fortimanager:SystemGlobal
properties:
    adminHost: string
    adminLockoutDuration: 0
    adminLockoutMethod: string
    adminLockoutThreshold: 0
    adminSshGraceTime: 0
    adomMode: string
    adomRevAutoDelete: string
    adomRevMaxBackupRevisions: 0
    adomRevMaxDays: 0
    adomRevMaxRevisions: 0
    adomSelect: string
    adomStatus: string
    apacheMode: string
    apiIpBinding: string
    cloneNameOption: string
    cltCertReq: string
    consoleOutput: string
    contentpackFgtInstall: string
    countryFlag: string
    createRevision: string
    daylightsavetime: string
    detectUnregisteredLogDevice: string
    deviceViewMode: string
    dhParams: string
    disableModules:
        - string
    dynamicSortSubtable: string
    encAlgorithm: string
    fabricStoragePoolQuota: 0
    fabricStoragePoolSize: 0
    fazStatus: string
    fcpCfgService: string
    fgfmCaCert: string
    fgfmCertExclusive: string
    fgfmDenyUnknown: string
    fgfmLocalCert: string
    fgfmPeercertWithoutsn: string
    fgfmSslProtocol: string
    fortiservicePort: 0
    globalSslProtocol: string
    guiCurlTimeout: 0
    guiPollingInterval: 0
    haMemberAutoGrouping: string
    hostname: string
    httpdSslProtocols:
        - string
    importIgnoreAddrCmt: string
    jsonapiLog: string
    language: string
    latitude: string
    ldapCacheTimeout: 0
    ldapconntimeout: 0
    lockPreempt: string
    logChecksum: string
    logChecksumUpload: string
    logForwardCacheSize: 0
    longitude: string
    managementIp: string
    managementPort: 0
    mapclientSslProtocol: string
    maxLogForward: 0
    maxRunningReports: 0
    mcPolicyDisabledAdoms:
        - adomName: string
    multipleStepsUpgradeInAutolink: string
    noCopyPermissionCheck: string
    noVipValueCheck: string
    normalizedIntfZoneOnly: string
    objectRevisionDbMax: 0
    objectRevisionMandatoryNote: string
    objectRevisionObjectMax: 0
    objectRevisionStatus: string
    oftpSslProtocol: string
    partialInstall: string
    partialInstallForce: string
    partialInstallRev: string
    perPolicyLock: string
    performImproveByHa: string
    policyObjectIcon: string
    policyObjectInDualPane: string
    preLoginBanner: string
    preLoginBannerMessage: string
    privateDataEncryption: string
    remoteauthtimeout: 0
    saveLastHitInAdomdb: string
    searchAllAdoms: string
    sshEncAlgos:
        - string
    sshHostkeyAlgos:
        - string
    sshKexAlgos:
        - string
    sshMacAlgos:
        - string
    sshStrongCrypto: string
    sslCipherSuites:
        - cipher: string
          priority: 0
          version: string
    sslLowEncryption: string
    sslProtocols:
        - string
    sslStaticKeyCiphers: string
    systemGlobalId: string
    tableEntryBlink: string
    taskListSize: 0
    tftp: string
    timezone: string
    tunnelMtu: 0
    usg: string
    vdomMirror: string
    webserviceProtos:
        - string
    workflowMaxSessions: 0
    workspaceMode: string
    workspaceUnlockAfterInstall: string
Copy

SystemGlobal Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The SystemGlobal resource accepts the following input properties:

AdminHost string
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
AdminLockoutDuration double
Lockout duration(sec) for administration.
AdminLockoutMethod string
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
AdminLockoutThreshold double
Lockout threshold for administration.
AdminSshGraceTime double
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
AdomMode string
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
AdomRevAutoDelete string
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
AdomRevMaxBackupRevisions double
Maximum number of ADOM revisions to backup.
AdomRevMaxDays double
Number of days to keep old ADOM revisions.
AdomRevMaxRevisions double
Maximum number of ADOM revisions to keep.
AdomSelect string
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
AdomStatus string
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
ApacheMode string
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
ApiIpBinding string
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
CloneNameOption string
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
CltCertReq string
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
ConsoleOutput string
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
ContentpackFgtInstall string
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
CountryFlag string
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
CreateRevision string
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
Daylightsavetime string
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
DetectUnregisteredLogDevice string
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
DeviceViewMode string
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
DhParams string
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
DisableModules List<string>
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
EncAlgorithm string
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
FabricStoragePoolQuota double
Disk quota for Fabric (MB).
FabricStoragePoolSize double
Max storage pooll size
FazStatus string
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
FcpCfgService string
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
FgfmCaCert string
set the extra fgfm CA certificates.
FgfmCertExclusive string
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
FgfmDenyUnknown string
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
FgfmLocalCert string
set the fgfm local certificate.
FgfmPeercertWithoutsn string
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
FgfmSslProtocol string
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
FortiservicePort double
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
GlobalSslProtocol string
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
GuiCurlTimeout double
GUI curl timeout in seconds (5-300 default 30).
GuiPollingInterval double
GUI polling interval in seconds (1-288000 default 5).
HaMemberAutoGrouping string
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
Hostname string
System hostname.
HttpdSslProtocols List<string>
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
ImportIgnoreAddrCmt string
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
JsonapiLog string
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
Language string
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
Latitude string
fmg location latitude
LdapCacheTimeout double
LDAP browser cache timeout (seconds).
Ldapconntimeout double
LDAP connection timeout (msec).
LockPreempt string
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
LogChecksum string
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
LogChecksumUpload string
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
LogForwardCacheSize double
Log forwarding disk cache size (GB).
Longitude string
fmg location longitude
ManagementIp string
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
ManagementPort double
Overriding port for management connection (Overrides admin port).
MapclientSslProtocol string
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
MaxLogForward double
Maximum number of log-forward and aggregation settings.
MaxRunningReports double
Maximum number of reports generating at one time.
McPolicyDisabledAdoms List<SystemGlobalMcPolicyDisabledAdom>
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
MultipleStepsUpgradeInAutolink string
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NoCopyPermissionCheck string
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NoVipValueCheck string
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NormalizedIntfZoneOnly string
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
ObjectRevisionDbMax double
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
ObjectRevisionMandatoryNote string
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
ObjectRevisionObjectMax double
Maximum revisions for a single object (10-1000 default 100).
ObjectRevisionStatus string
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
OftpSslProtocol string
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
PartialInstall string
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
PartialInstallForce string
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
PartialInstallRev string
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
PerPolicyLock string
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
PerformImproveByHa string
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
PolicyObjectIcon string
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
PolicyObjectInDualPane string
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
PreLoginBanner string
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
PreLoginBannerMessage string
Pre-login banner message.
PrivateDataEncryption string
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
Remoteauthtimeout double
Remote authentication (RADIUS/LDAP) timeout (sec).
SaveLastHitInAdomdb string
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
SearchAllAdoms string
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
SshEncAlgos List<string>
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
SshHostkeyAlgos List<string>
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
SshKexAlgos List<string>
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
SshMacAlgos List<string>
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
SshStrongCrypto string
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
SslCipherSuites List<SystemGlobalSslCipherSuite>
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
SslLowEncryption string
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
SslProtocols List<string>
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
SslStaticKeyCiphers string
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
SystemGlobalId string
an identifier for the resource.
TableEntryBlink string
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
TaskListSize double
Maximum number of completed tasks to keep.
Tftp string
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
Timezone string
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
TunnelMtu double
Maximum transportation unit(68 - 9000).
Usg string
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
VdomMirror string
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
WebserviceProtos List<string>
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
WorkflowMaxSessions double
Maximum number of workflow sessions per ADOM (minimum 100).
WorkspaceMode string
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
WorkspaceUnlockAfterInstall string
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.
AdminHost string
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
AdminLockoutDuration float64
Lockout duration(sec) for administration.
AdminLockoutMethod string
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
AdminLockoutThreshold float64
Lockout threshold for administration.
AdminSshGraceTime float64
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
AdomMode string
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
AdomRevAutoDelete string
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
AdomRevMaxBackupRevisions float64
Maximum number of ADOM revisions to backup.
AdomRevMaxDays float64
Number of days to keep old ADOM revisions.
AdomRevMaxRevisions float64
Maximum number of ADOM revisions to keep.
AdomSelect string
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
AdomStatus string
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
ApacheMode string
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
ApiIpBinding string
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
CloneNameOption string
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
CltCertReq string
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
ConsoleOutput string
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
ContentpackFgtInstall string
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
CountryFlag string
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
CreateRevision string
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
Daylightsavetime string
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
DetectUnregisteredLogDevice string
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
DeviceViewMode string
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
DhParams string
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
DisableModules []string
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
EncAlgorithm string
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
FabricStoragePoolQuota float64
Disk quota for Fabric (MB).
FabricStoragePoolSize float64
Max storage pooll size
FazStatus string
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
FcpCfgService string
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
FgfmCaCert string
set the extra fgfm CA certificates.
FgfmCertExclusive string
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
FgfmDenyUnknown string
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
FgfmLocalCert string
set the fgfm local certificate.
FgfmPeercertWithoutsn string
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
FgfmSslProtocol string
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
FortiservicePort float64
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
GlobalSslProtocol string
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
GuiCurlTimeout float64
GUI curl timeout in seconds (5-300 default 30).
GuiPollingInterval float64
GUI polling interval in seconds (1-288000 default 5).
HaMemberAutoGrouping string
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
Hostname string
System hostname.
HttpdSslProtocols []string
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
ImportIgnoreAddrCmt string
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
JsonapiLog string
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
Language string
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
Latitude string
fmg location latitude
LdapCacheTimeout float64
LDAP browser cache timeout (seconds).
Ldapconntimeout float64
LDAP connection timeout (msec).
LockPreempt string
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
LogChecksum string
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
LogChecksumUpload string
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
LogForwardCacheSize float64
Log forwarding disk cache size (GB).
Longitude string
fmg location longitude
ManagementIp string
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
ManagementPort float64
Overriding port for management connection (Overrides admin port).
MapclientSslProtocol string
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
MaxLogForward float64
Maximum number of log-forward and aggregation settings.
MaxRunningReports float64
Maximum number of reports generating at one time.
McPolicyDisabledAdoms []SystemGlobalMcPolicyDisabledAdomArgs
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
MultipleStepsUpgradeInAutolink string
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NoCopyPermissionCheck string
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NoVipValueCheck string
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NormalizedIntfZoneOnly string
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
ObjectRevisionDbMax float64
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
ObjectRevisionMandatoryNote string
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
ObjectRevisionObjectMax float64
Maximum revisions for a single object (10-1000 default 100).
ObjectRevisionStatus string
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
OftpSslProtocol string
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
PartialInstall string
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
PartialInstallForce string
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
PartialInstallRev string
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
PerPolicyLock string
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
PerformImproveByHa string
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
PolicyObjectIcon string
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
PolicyObjectInDualPane string
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
PreLoginBanner string
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
PreLoginBannerMessage string
Pre-login banner message.
PrivateDataEncryption string
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
Remoteauthtimeout float64
Remote authentication (RADIUS/LDAP) timeout (sec).
SaveLastHitInAdomdb string
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
SearchAllAdoms string
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
SshEncAlgos []string
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
SshHostkeyAlgos []string
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
SshKexAlgos []string
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
SshMacAlgos []string
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
SshStrongCrypto string
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
SslCipherSuites []SystemGlobalSslCipherSuiteArgs
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
SslLowEncryption string
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
SslProtocols []string
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
SslStaticKeyCiphers string
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
SystemGlobalId string
an identifier for the resource.
TableEntryBlink string
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
TaskListSize float64
Maximum number of completed tasks to keep.
Tftp string
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
Timezone string
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
TunnelMtu float64
Maximum transportation unit(68 - 9000).
Usg string
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
VdomMirror string
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
WebserviceProtos []string
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
WorkflowMaxSessions float64
Maximum number of workflow sessions per ADOM (minimum 100).
WorkspaceMode string
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
WorkspaceUnlockAfterInstall string
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.
adminHost String
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
adminLockoutDuration Double
Lockout duration(sec) for administration.
adminLockoutMethod String
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
adminLockoutThreshold Double
Lockout threshold for administration.
adminSshGraceTime Double
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
adomMode String
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
adomRevAutoDelete String
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
adomRevMaxBackupRevisions Double
Maximum number of ADOM revisions to backup.
adomRevMaxDays Double
Number of days to keep old ADOM revisions.
adomRevMaxRevisions Double
Maximum number of ADOM revisions to keep.
adomSelect String
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
adomStatus String
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
apacheMode String
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
apiIpBinding String
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
cloneNameOption String
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
cltCertReq String
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
consoleOutput String
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
contentpackFgtInstall String
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
countryFlag String
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
createRevision String
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
daylightsavetime String
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
detectUnregisteredLogDevice String
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
deviceViewMode String
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
dhParams String
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
disableModules List<String>
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
encAlgorithm String
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
fabricStoragePoolQuota Double
Disk quota for Fabric (MB).
fabricStoragePoolSize Double
Max storage pooll size
fazStatus String
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
fcpCfgService String
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
fgfmCaCert String
set the extra fgfm CA certificates.
fgfmCertExclusive String
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
fgfmDenyUnknown String
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
fgfmLocalCert String
set the fgfm local certificate.
fgfmPeercertWithoutsn String
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
fgfmSslProtocol String
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
fortiservicePort Double
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
globalSslProtocol String
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
guiCurlTimeout Double
GUI curl timeout in seconds (5-300 default 30).
guiPollingInterval Double
GUI polling interval in seconds (1-288000 default 5).
haMemberAutoGrouping String
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
hostname String
System hostname.
httpdSslProtocols List<String>
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
importIgnoreAddrCmt String
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
jsonapiLog String
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
language String
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
latitude String
fmg location latitude
ldapCacheTimeout Double
LDAP browser cache timeout (seconds).
ldapconntimeout Double
LDAP connection timeout (msec).
lockPreempt String
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
logChecksum String
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
logChecksumUpload String
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
logForwardCacheSize Double
Log forwarding disk cache size (GB).
longitude String
fmg location longitude
managementIp String
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
managementPort Double
Overriding port for management connection (Overrides admin port).
mapclientSslProtocol String
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
maxLogForward Double
Maximum number of log-forward and aggregation settings.
maxRunningReports Double
Maximum number of reports generating at one time.
mcPolicyDisabledAdoms List<SystemGlobalMcPolicyDisabledAdom>
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
multipleStepsUpgradeInAutolink String
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noCopyPermissionCheck String
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noVipValueCheck String
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
normalizedIntfZoneOnly String
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
objectRevisionDbMax Double
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
objectRevisionMandatoryNote String
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
objectRevisionObjectMax Double
Maximum revisions for a single object (10-1000 default 100).
objectRevisionStatus String
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
oftpSslProtocol String
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
partialInstall String
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
partialInstallForce String
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
partialInstallRev String
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
perPolicyLock String
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
performImproveByHa String
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
policyObjectIcon String
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
policyObjectInDualPane String
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
preLoginBanner String
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
preLoginBannerMessage String
Pre-login banner message.
privateDataEncryption String
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
remoteauthtimeout Double
Remote authentication (RADIUS/LDAP) timeout (sec).
saveLastHitInAdomdb String
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
searchAllAdoms String
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
sshEncAlgos List<String>
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
sshHostkeyAlgos List<String>
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
sshKexAlgos List<String>
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
sshMacAlgos List<String>
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
sshStrongCrypto String
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
sslCipherSuites List<SystemGlobalSslCipherSuite>
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslLowEncryption String
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
sslProtocols List<String>
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
sslStaticKeyCiphers String
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
systemGlobalId String
an identifier for the resource.
tableEntryBlink String
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
taskListSize Double
Maximum number of completed tasks to keep.
tftp String
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
timezone String
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
tunnelMtu Double
Maximum transportation unit(68 - 9000).
usg String
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
vdomMirror String
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
webserviceProtos List<String>
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
workflowMaxSessions Double
Maximum number of workflow sessions per ADOM (minimum 100).
workspaceMode String
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
workspaceUnlockAfterInstall String
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.
adminHost string
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
adminLockoutDuration number
Lockout duration(sec) for administration.
adminLockoutMethod string
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
adminLockoutThreshold number
Lockout threshold for administration.
adminSshGraceTime number
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
adomMode string
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
adomRevAutoDelete string
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
adomRevMaxBackupRevisions number
Maximum number of ADOM revisions to backup.
adomRevMaxDays number
Number of days to keep old ADOM revisions.
adomRevMaxRevisions number
Maximum number of ADOM revisions to keep.
adomSelect string
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
adomStatus string
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
apacheMode string
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
apiIpBinding string
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
cloneNameOption string
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
cltCertReq string
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
consoleOutput string
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
contentpackFgtInstall string
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
countryFlag string
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
createRevision string
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
daylightsavetime string
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
detectUnregisteredLogDevice string
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
deviceViewMode string
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
dhParams string
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
disableModules string[]
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
dynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
encAlgorithm string
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
fabricStoragePoolQuota number
Disk quota for Fabric (MB).
fabricStoragePoolSize number
Max storage pooll size
fazStatus string
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
fcpCfgService string
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
fgfmCaCert string
set the extra fgfm CA certificates.
fgfmCertExclusive string
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
fgfmDenyUnknown string
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
fgfmLocalCert string
set the fgfm local certificate.
fgfmPeercertWithoutsn string
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
fgfmSslProtocol string
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
fortiservicePort number
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
globalSslProtocol string
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
guiCurlTimeout number
GUI curl timeout in seconds (5-300 default 30).
guiPollingInterval number
GUI polling interval in seconds (1-288000 default 5).
haMemberAutoGrouping string
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
hostname string
System hostname.
httpdSslProtocols string[]
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
importIgnoreAddrCmt string
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
jsonapiLog string
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
language string
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
latitude string
fmg location latitude
ldapCacheTimeout number
LDAP browser cache timeout (seconds).
ldapconntimeout number
LDAP connection timeout (msec).
lockPreempt string
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
logChecksum string
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
logChecksumUpload string
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
logForwardCacheSize number
Log forwarding disk cache size (GB).
longitude string
fmg location longitude
managementIp string
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
managementPort number
Overriding port for management connection (Overrides admin port).
mapclientSslProtocol string
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
maxLogForward number
Maximum number of log-forward and aggregation settings.
maxRunningReports number
Maximum number of reports generating at one time.
mcPolicyDisabledAdoms SystemGlobalMcPolicyDisabledAdom[]
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
multipleStepsUpgradeInAutolink string
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noCopyPermissionCheck string
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noVipValueCheck string
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
normalizedIntfZoneOnly string
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
objectRevisionDbMax number
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
objectRevisionMandatoryNote string
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
objectRevisionObjectMax number
Maximum revisions for a single object (10-1000 default 100).
objectRevisionStatus string
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
oftpSslProtocol string
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
partialInstall string
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
partialInstallForce string
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
partialInstallRev string
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
perPolicyLock string
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
performImproveByHa string
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
policyObjectIcon string
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
policyObjectInDualPane string
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
preLoginBanner string
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
preLoginBannerMessage string
Pre-login banner message.
privateDataEncryption string
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
remoteauthtimeout number
Remote authentication (RADIUS/LDAP) timeout (sec).
saveLastHitInAdomdb string
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
searchAllAdoms string
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
sshEncAlgos string[]
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
sshHostkeyAlgos string[]
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
sshKexAlgos string[]
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
sshMacAlgos string[]
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
sshStrongCrypto string
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
sslCipherSuites SystemGlobalSslCipherSuite[]
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslLowEncryption string
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
sslProtocols string[]
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
sslStaticKeyCiphers string
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
systemGlobalId string
an identifier for the resource.
tableEntryBlink string
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
taskListSize number
Maximum number of completed tasks to keep.
tftp string
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
timezone string
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
tunnelMtu number
Maximum transportation unit(68 - 9000).
usg string
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
vdomMirror string
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
webserviceProtos string[]
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
workflowMaxSessions number
Maximum number of workflow sessions per ADOM (minimum 100).
workspaceMode string
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
workspaceUnlockAfterInstall string
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.
admin_host str
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
admin_lockout_duration float
Lockout duration(sec) for administration.
admin_lockout_method str
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
admin_lockout_threshold float
Lockout threshold for administration.
admin_ssh_grace_time float
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
adom_mode str
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
adom_rev_auto_delete str
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
adom_rev_max_backup_revisions float
Maximum number of ADOM revisions to backup.
adom_rev_max_days float
Number of days to keep old ADOM revisions.
adom_rev_max_revisions float
Maximum number of ADOM revisions to keep.
adom_select str
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
adom_status str
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
apache_mode str
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
api_ip_binding str
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
clone_name_option str
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
clt_cert_req str
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
console_output str
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
contentpack_fgt_install str
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
country_flag str
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
create_revision str
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
daylightsavetime str
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
detect_unregistered_log_device str
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
device_view_mode str
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
dh_params str
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
disable_modules Sequence[str]
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
dynamic_sort_subtable str
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
enc_algorithm str
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
fabric_storage_pool_quota float
Disk quota for Fabric (MB).
fabric_storage_pool_size float
Max storage pooll size
faz_status str
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
fcp_cfg_service str
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
fgfm_ca_cert str
set the extra fgfm CA certificates.
fgfm_cert_exclusive str
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
fgfm_deny_unknown str
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
fgfm_local_cert str
set the fgfm local certificate.
fgfm_peercert_withoutsn str
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
fgfm_ssl_protocol str
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
fortiservice_port float
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
global_ssl_protocol str
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
gui_curl_timeout float
GUI curl timeout in seconds (5-300 default 30).
gui_polling_interval float
GUI polling interval in seconds (1-288000 default 5).
ha_member_auto_grouping str
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
hostname str
System hostname.
httpd_ssl_protocols Sequence[str]
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
import_ignore_addr_cmt str
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
jsonapi_log str
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
language str
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
latitude str
fmg location latitude
ldap_cache_timeout float
LDAP browser cache timeout (seconds).
ldapconntimeout float
LDAP connection timeout (msec).
lock_preempt str
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
log_checksum str
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
log_checksum_upload str
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
log_forward_cache_size float
Log forwarding disk cache size (GB).
longitude str
fmg location longitude
management_ip str
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
management_port float
Overriding port for management connection (Overrides admin port).
mapclient_ssl_protocol str
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
max_log_forward float
Maximum number of log-forward and aggregation settings.
max_running_reports float
Maximum number of reports generating at one time.
mc_policy_disabled_adoms Sequence[SystemGlobalMcPolicyDisabledAdomArgs]
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
multiple_steps_upgrade_in_autolink str
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
no_copy_permission_check str
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
no_vip_value_check str
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
normalized_intf_zone_only str
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
object_revision_db_max float
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
object_revision_mandatory_note str
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
object_revision_object_max float
Maximum revisions for a single object (10-1000 default 100).
object_revision_status str
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
oftp_ssl_protocol str
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
partial_install str
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
partial_install_force str
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
partial_install_rev str
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
per_policy_lock str
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
perform_improve_by_ha str
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
policy_object_icon str
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
policy_object_in_dual_pane str
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
pre_login_banner str
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
pre_login_banner_message str
Pre-login banner message.
private_data_encryption str
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
remoteauthtimeout float
Remote authentication (RADIUS/LDAP) timeout (sec).
save_last_hit_in_adomdb str
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
search_all_adoms str
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
ssh_enc_algos Sequence[str]
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
ssh_hostkey_algos Sequence[str]
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
ssh_kex_algos Sequence[str]
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
ssh_mac_algos Sequence[str]
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
ssh_strong_crypto str
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
ssl_cipher_suites Sequence[SystemGlobalSslCipherSuiteArgs]
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
ssl_low_encryption str
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
ssl_protocols Sequence[str]
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
ssl_static_key_ciphers str
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
system_global_id str
an identifier for the resource.
table_entry_blink str
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
task_list_size float
Maximum number of completed tasks to keep.
tftp str
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
timezone str
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
tunnel_mtu float
Maximum transportation unit(68 - 9000).
usg str
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
vdom_mirror str
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
webservice_protos Sequence[str]
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
workflow_max_sessions float
Maximum number of workflow sessions per ADOM (minimum 100).
workspace_mode str
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
workspace_unlock_after_install str
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.
adminHost String
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
adminLockoutDuration Number
Lockout duration(sec) for administration.
adminLockoutMethod String
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
adminLockoutThreshold Number
Lockout threshold for administration.
adminSshGraceTime Number
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
adomMode String
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
adomRevAutoDelete String
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
adomRevMaxBackupRevisions Number
Maximum number of ADOM revisions to backup.
adomRevMaxDays Number
Number of days to keep old ADOM revisions.
adomRevMaxRevisions Number
Maximum number of ADOM revisions to keep.
adomSelect String
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
adomStatus String
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
apacheMode String
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
apiIpBinding String
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
cloneNameOption String
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
cltCertReq String
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
consoleOutput String
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
contentpackFgtInstall String
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
countryFlag String
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
createRevision String
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
daylightsavetime String
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
detectUnregisteredLogDevice String
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
deviceViewMode String
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
dhParams String
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
disableModules List<String>
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
encAlgorithm String
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
fabricStoragePoolQuota Number
Disk quota for Fabric (MB).
fabricStoragePoolSize Number
Max storage pooll size
fazStatus String
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
fcpCfgService String
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
fgfmCaCert String
set the extra fgfm CA certificates.
fgfmCertExclusive String
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
fgfmDenyUnknown String
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
fgfmLocalCert String
set the fgfm local certificate.
fgfmPeercertWithoutsn String
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
fgfmSslProtocol String
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
fortiservicePort Number
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
globalSslProtocol String
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
guiCurlTimeout Number
GUI curl timeout in seconds (5-300 default 30).
guiPollingInterval Number
GUI polling interval in seconds (1-288000 default 5).
haMemberAutoGrouping String
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
hostname String
System hostname.
httpdSslProtocols List<String>
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
importIgnoreAddrCmt String
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
jsonapiLog String
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
language String
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
latitude String
fmg location latitude
ldapCacheTimeout Number
LDAP browser cache timeout (seconds).
ldapconntimeout Number
LDAP connection timeout (msec).
lockPreempt String
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
logChecksum String
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
logChecksumUpload String
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
logForwardCacheSize Number
Log forwarding disk cache size (GB).
longitude String
fmg location longitude
managementIp String
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
managementPort Number
Overriding port for management connection (Overrides admin port).
mapclientSslProtocol String
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
maxLogForward Number
Maximum number of log-forward and aggregation settings.
maxRunningReports Number
Maximum number of reports generating at one time.
mcPolicyDisabledAdoms List<Property Map>
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
multipleStepsUpgradeInAutolink String
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noCopyPermissionCheck String
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noVipValueCheck String
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
normalizedIntfZoneOnly String
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
objectRevisionDbMax Number
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
objectRevisionMandatoryNote String
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
objectRevisionObjectMax Number
Maximum revisions for a single object (10-1000 default 100).
objectRevisionStatus String
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
oftpSslProtocol String
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
partialInstall String
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
partialInstallForce String
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
partialInstallRev String
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
perPolicyLock String
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
performImproveByHa String
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
policyObjectIcon String
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
policyObjectInDualPane String
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
preLoginBanner String
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
preLoginBannerMessage String
Pre-login banner message.
privateDataEncryption String
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
remoteauthtimeout Number
Remote authentication (RADIUS/LDAP) timeout (sec).
saveLastHitInAdomdb String
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
searchAllAdoms String
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
sshEncAlgos List<String>
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
sshHostkeyAlgos List<String>
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
sshKexAlgos List<String>
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
sshMacAlgos List<String>
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
sshStrongCrypto String
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
sslCipherSuites List<Property Map>
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslLowEncryption String
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
sslProtocols List<String>
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
sslStaticKeyCiphers String
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
systemGlobalId String
an identifier for the resource.
tableEntryBlink String
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
taskListSize Number
Maximum number of completed tasks to keep.
tftp String
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
timezone String
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
tunnelMtu Number
Maximum transportation unit(68 - 9000).
usg String
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
vdomMirror String
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
webserviceProtos List<String>
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
workflowMaxSessions Number
Maximum number of workflow sessions per ADOM (minimum 100).
workspaceMode String
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
workspaceUnlockAfterInstall String
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.

Outputs

All input properties are implicitly available as output properties. Additionally, the SystemGlobal resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing SystemGlobal Resource

Get an existing SystemGlobal resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: SystemGlobalState, opts?: CustomResourceOptions): SystemGlobal
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        admin_host: Optional[str] = None,
        admin_lockout_duration: Optional[float] = None,
        admin_lockout_method: Optional[str] = None,
        admin_lockout_threshold: Optional[float] = None,
        admin_ssh_grace_time: Optional[float] = None,
        adom_mode: Optional[str] = None,
        adom_rev_auto_delete: Optional[str] = None,
        adom_rev_max_backup_revisions: Optional[float] = None,
        adom_rev_max_days: Optional[float] = None,
        adom_rev_max_revisions: Optional[float] = None,
        adom_select: Optional[str] = None,
        adom_status: Optional[str] = None,
        apache_mode: Optional[str] = None,
        api_ip_binding: Optional[str] = None,
        clone_name_option: Optional[str] = None,
        clt_cert_req: Optional[str] = None,
        console_output: Optional[str] = None,
        contentpack_fgt_install: Optional[str] = None,
        country_flag: Optional[str] = None,
        create_revision: Optional[str] = None,
        daylightsavetime: Optional[str] = None,
        detect_unregistered_log_device: Optional[str] = None,
        device_view_mode: Optional[str] = None,
        dh_params: Optional[str] = None,
        disable_modules: Optional[Sequence[str]] = None,
        dynamic_sort_subtable: Optional[str] = None,
        enc_algorithm: Optional[str] = None,
        fabric_storage_pool_quota: Optional[float] = None,
        fabric_storage_pool_size: Optional[float] = None,
        faz_status: Optional[str] = None,
        fcp_cfg_service: Optional[str] = None,
        fgfm_ca_cert: Optional[str] = None,
        fgfm_cert_exclusive: Optional[str] = None,
        fgfm_deny_unknown: Optional[str] = None,
        fgfm_local_cert: Optional[str] = None,
        fgfm_peercert_withoutsn: Optional[str] = None,
        fgfm_ssl_protocol: Optional[str] = None,
        fortiservice_port: Optional[float] = None,
        global_ssl_protocol: Optional[str] = None,
        gui_curl_timeout: Optional[float] = None,
        gui_polling_interval: Optional[float] = None,
        ha_member_auto_grouping: Optional[str] = None,
        hostname: Optional[str] = None,
        httpd_ssl_protocols: Optional[Sequence[str]] = None,
        import_ignore_addr_cmt: Optional[str] = None,
        jsonapi_log: Optional[str] = None,
        language: Optional[str] = None,
        latitude: Optional[str] = None,
        ldap_cache_timeout: Optional[float] = None,
        ldapconntimeout: Optional[float] = None,
        lock_preempt: Optional[str] = None,
        log_checksum: Optional[str] = None,
        log_checksum_upload: Optional[str] = None,
        log_forward_cache_size: Optional[float] = None,
        longitude: Optional[str] = None,
        management_ip: Optional[str] = None,
        management_port: Optional[float] = None,
        mapclient_ssl_protocol: Optional[str] = None,
        max_log_forward: Optional[float] = None,
        max_running_reports: Optional[float] = None,
        mc_policy_disabled_adoms: Optional[Sequence[SystemGlobalMcPolicyDisabledAdomArgs]] = None,
        multiple_steps_upgrade_in_autolink: Optional[str] = None,
        no_copy_permission_check: Optional[str] = None,
        no_vip_value_check: Optional[str] = None,
        normalized_intf_zone_only: Optional[str] = None,
        object_revision_db_max: Optional[float] = None,
        object_revision_mandatory_note: Optional[str] = None,
        object_revision_object_max: Optional[float] = None,
        object_revision_status: Optional[str] = None,
        oftp_ssl_protocol: Optional[str] = None,
        partial_install: Optional[str] = None,
        partial_install_force: Optional[str] = None,
        partial_install_rev: Optional[str] = None,
        per_policy_lock: Optional[str] = None,
        perform_improve_by_ha: Optional[str] = None,
        policy_object_icon: Optional[str] = None,
        policy_object_in_dual_pane: Optional[str] = None,
        pre_login_banner: Optional[str] = None,
        pre_login_banner_message: Optional[str] = None,
        private_data_encryption: Optional[str] = None,
        remoteauthtimeout: Optional[float] = None,
        save_last_hit_in_adomdb: Optional[str] = None,
        search_all_adoms: Optional[str] = None,
        ssh_enc_algos: Optional[Sequence[str]] = None,
        ssh_hostkey_algos: Optional[Sequence[str]] = None,
        ssh_kex_algos: Optional[Sequence[str]] = None,
        ssh_mac_algos: Optional[Sequence[str]] = None,
        ssh_strong_crypto: Optional[str] = None,
        ssl_cipher_suites: Optional[Sequence[SystemGlobalSslCipherSuiteArgs]] = None,
        ssl_low_encryption: Optional[str] = None,
        ssl_protocols: Optional[Sequence[str]] = None,
        ssl_static_key_ciphers: Optional[str] = None,
        system_global_id: Optional[str] = None,
        table_entry_blink: Optional[str] = None,
        task_list_size: Optional[float] = None,
        tftp: Optional[str] = None,
        timezone: Optional[str] = None,
        tunnel_mtu: Optional[float] = None,
        usg: Optional[str] = None,
        vdom_mirror: Optional[str] = None,
        webservice_protos: Optional[Sequence[str]] = None,
        workflow_max_sessions: Optional[float] = None,
        workspace_mode: Optional[str] = None,
        workspace_unlock_after_install: Optional[str] = None) -> SystemGlobal
func GetSystemGlobal(ctx *Context, name string, id IDInput, state *SystemGlobalState, opts ...ResourceOption) (*SystemGlobal, error)
public static SystemGlobal Get(string name, Input<string> id, SystemGlobalState? state, CustomResourceOptions? opts = null)
public static SystemGlobal get(String name, Output<String> id, SystemGlobalState state, CustomResourceOptions options)
resources:  _:    type: fortimanager:SystemGlobal    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AdminHost string
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
AdminLockoutDuration double
Lockout duration(sec) for administration.
AdminLockoutMethod string
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
AdminLockoutThreshold double
Lockout threshold for administration.
AdminSshGraceTime double
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
AdomMode string
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
AdomRevAutoDelete string
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
AdomRevMaxBackupRevisions double
Maximum number of ADOM revisions to backup.
AdomRevMaxDays double
Number of days to keep old ADOM revisions.
AdomRevMaxRevisions double
Maximum number of ADOM revisions to keep.
AdomSelect string
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
AdomStatus string
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
ApacheMode string
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
ApiIpBinding string
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
CloneNameOption string
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
CltCertReq string
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
ConsoleOutput string
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
ContentpackFgtInstall string
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
CountryFlag string
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
CreateRevision string
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
Daylightsavetime string
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
DetectUnregisteredLogDevice string
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
DeviceViewMode string
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
DhParams string
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
DisableModules List<string>
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
EncAlgorithm string
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
FabricStoragePoolQuota double
Disk quota for Fabric (MB).
FabricStoragePoolSize double
Max storage pooll size
FazStatus string
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
FcpCfgService string
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
FgfmCaCert string
set the extra fgfm CA certificates.
FgfmCertExclusive string
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
FgfmDenyUnknown string
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
FgfmLocalCert string
set the fgfm local certificate.
FgfmPeercertWithoutsn string
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
FgfmSslProtocol string
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
FortiservicePort double
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
GlobalSslProtocol string
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
GuiCurlTimeout double
GUI curl timeout in seconds (5-300 default 30).
GuiPollingInterval double
GUI polling interval in seconds (1-288000 default 5).
HaMemberAutoGrouping string
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
Hostname string
System hostname.
HttpdSslProtocols List<string>
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
ImportIgnoreAddrCmt string
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
JsonapiLog string
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
Language string
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
Latitude string
fmg location latitude
LdapCacheTimeout double
LDAP browser cache timeout (seconds).
Ldapconntimeout double
LDAP connection timeout (msec).
LockPreempt string
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
LogChecksum string
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
LogChecksumUpload string
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
LogForwardCacheSize double
Log forwarding disk cache size (GB).
Longitude string
fmg location longitude
ManagementIp string
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
ManagementPort double
Overriding port for management connection (Overrides admin port).
MapclientSslProtocol string
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
MaxLogForward double
Maximum number of log-forward and aggregation settings.
MaxRunningReports double
Maximum number of reports generating at one time.
McPolicyDisabledAdoms List<SystemGlobalMcPolicyDisabledAdom>
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
MultipleStepsUpgradeInAutolink string
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NoCopyPermissionCheck string
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NoVipValueCheck string
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NormalizedIntfZoneOnly string
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
ObjectRevisionDbMax double
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
ObjectRevisionMandatoryNote string
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
ObjectRevisionObjectMax double
Maximum revisions for a single object (10-1000 default 100).
ObjectRevisionStatus string
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
OftpSslProtocol string
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
PartialInstall string
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
PartialInstallForce string
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
PartialInstallRev string
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
PerPolicyLock string
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
PerformImproveByHa string
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
PolicyObjectIcon string
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
PolicyObjectInDualPane string
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
PreLoginBanner string
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
PreLoginBannerMessage string
Pre-login banner message.
PrivateDataEncryption string
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
Remoteauthtimeout double
Remote authentication (RADIUS/LDAP) timeout (sec).
SaveLastHitInAdomdb string
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
SearchAllAdoms string
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
SshEncAlgos List<string>
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
SshHostkeyAlgos List<string>
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
SshKexAlgos List<string>
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
SshMacAlgos List<string>
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
SshStrongCrypto string
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
SslCipherSuites List<SystemGlobalSslCipherSuite>
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
SslLowEncryption string
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
SslProtocols List<string>
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
SslStaticKeyCiphers string
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
SystemGlobalId string
an identifier for the resource.
TableEntryBlink string
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
TaskListSize double
Maximum number of completed tasks to keep.
Tftp string
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
Timezone string
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
TunnelMtu double
Maximum transportation unit(68 - 9000).
Usg string
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
VdomMirror string
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
WebserviceProtos List<string>
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
WorkflowMaxSessions double
Maximum number of workflow sessions per ADOM (minimum 100).
WorkspaceMode string
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
WorkspaceUnlockAfterInstall string
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.
AdminHost string
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
AdminLockoutDuration float64
Lockout duration(sec) for administration.
AdminLockoutMethod string
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
AdminLockoutThreshold float64
Lockout threshold for administration.
AdminSshGraceTime float64
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
AdomMode string
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
AdomRevAutoDelete string
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
AdomRevMaxBackupRevisions float64
Maximum number of ADOM revisions to backup.
AdomRevMaxDays float64
Number of days to keep old ADOM revisions.
AdomRevMaxRevisions float64
Maximum number of ADOM revisions to keep.
AdomSelect string
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
AdomStatus string
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
ApacheMode string
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
ApiIpBinding string
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
CloneNameOption string
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
CltCertReq string
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
ConsoleOutput string
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
ContentpackFgtInstall string
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
CountryFlag string
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
CreateRevision string
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
Daylightsavetime string
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
DetectUnregisteredLogDevice string
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
DeviceViewMode string
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
DhParams string
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
DisableModules []string
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
EncAlgorithm string
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
FabricStoragePoolQuota float64
Disk quota for Fabric (MB).
FabricStoragePoolSize float64
Max storage pooll size
FazStatus string
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
FcpCfgService string
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
FgfmCaCert string
set the extra fgfm CA certificates.
FgfmCertExclusive string
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
FgfmDenyUnknown string
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
FgfmLocalCert string
set the fgfm local certificate.
FgfmPeercertWithoutsn string
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
FgfmSslProtocol string
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
FortiservicePort float64
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
GlobalSslProtocol string
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
GuiCurlTimeout float64
GUI curl timeout in seconds (5-300 default 30).
GuiPollingInterval float64
GUI polling interval in seconds (1-288000 default 5).
HaMemberAutoGrouping string
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
Hostname string
System hostname.
HttpdSslProtocols []string
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
ImportIgnoreAddrCmt string
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
JsonapiLog string
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
Language string
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
Latitude string
fmg location latitude
LdapCacheTimeout float64
LDAP browser cache timeout (seconds).
Ldapconntimeout float64
LDAP connection timeout (msec).
LockPreempt string
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
LogChecksum string
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
LogChecksumUpload string
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
LogForwardCacheSize float64
Log forwarding disk cache size (GB).
Longitude string
fmg location longitude
ManagementIp string
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
ManagementPort float64
Overriding port for management connection (Overrides admin port).
MapclientSslProtocol string
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
MaxLogForward float64
Maximum number of log-forward and aggregation settings.
MaxRunningReports float64
Maximum number of reports generating at one time.
McPolicyDisabledAdoms []SystemGlobalMcPolicyDisabledAdomArgs
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
MultipleStepsUpgradeInAutolink string
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NoCopyPermissionCheck string
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NoVipValueCheck string
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
NormalizedIntfZoneOnly string
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
ObjectRevisionDbMax float64
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
ObjectRevisionMandatoryNote string
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
ObjectRevisionObjectMax float64
Maximum revisions for a single object (10-1000 default 100).
ObjectRevisionStatus string
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
OftpSslProtocol string
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
PartialInstall string
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
PartialInstallForce string
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
PartialInstallRev string
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
PerPolicyLock string
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
PerformImproveByHa string
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
PolicyObjectIcon string
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
PolicyObjectInDualPane string
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
PreLoginBanner string
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
PreLoginBannerMessage string
Pre-login banner message.
PrivateDataEncryption string
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
Remoteauthtimeout float64
Remote authentication (RADIUS/LDAP) timeout (sec).
SaveLastHitInAdomdb string
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
SearchAllAdoms string
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
SshEncAlgos []string
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
SshHostkeyAlgos []string
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
SshKexAlgos []string
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
SshMacAlgos []string
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
SshStrongCrypto string
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
SslCipherSuites []SystemGlobalSslCipherSuiteArgs
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
SslLowEncryption string
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
SslProtocols []string
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
SslStaticKeyCiphers string
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
SystemGlobalId string
an identifier for the resource.
TableEntryBlink string
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
TaskListSize float64
Maximum number of completed tasks to keep.
Tftp string
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
Timezone string
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
TunnelMtu float64
Maximum transportation unit(68 - 9000).
Usg string
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
VdomMirror string
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
WebserviceProtos []string
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
WorkflowMaxSessions float64
Maximum number of workflow sessions per ADOM (minimum 100).
WorkspaceMode string
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
WorkspaceUnlockAfterInstall string
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.
adminHost String
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
adminLockoutDuration Double
Lockout duration(sec) for administration.
adminLockoutMethod String
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
adminLockoutThreshold Double
Lockout threshold for administration.
adminSshGraceTime Double
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
adomMode String
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
adomRevAutoDelete String
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
adomRevMaxBackupRevisions Double
Maximum number of ADOM revisions to backup.
adomRevMaxDays Double
Number of days to keep old ADOM revisions.
adomRevMaxRevisions Double
Maximum number of ADOM revisions to keep.
adomSelect String
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
adomStatus String
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
apacheMode String
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
apiIpBinding String
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
cloneNameOption String
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
cltCertReq String
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
consoleOutput String
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
contentpackFgtInstall String
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
countryFlag String
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
createRevision String
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
daylightsavetime String
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
detectUnregisteredLogDevice String
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
deviceViewMode String
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
dhParams String
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
disableModules List<String>
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
encAlgorithm String
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
fabricStoragePoolQuota Double
Disk quota for Fabric (MB).
fabricStoragePoolSize Double
Max storage pooll size
fazStatus String
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
fcpCfgService String
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
fgfmCaCert String
set the extra fgfm CA certificates.
fgfmCertExclusive String
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
fgfmDenyUnknown String
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
fgfmLocalCert String
set the fgfm local certificate.
fgfmPeercertWithoutsn String
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
fgfmSslProtocol String
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
fortiservicePort Double
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
globalSslProtocol String
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
guiCurlTimeout Double
GUI curl timeout in seconds (5-300 default 30).
guiPollingInterval Double
GUI polling interval in seconds (1-288000 default 5).
haMemberAutoGrouping String
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
hostname String
System hostname.
httpdSslProtocols List<String>
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
importIgnoreAddrCmt String
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
jsonapiLog String
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
language String
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
latitude String
fmg location latitude
ldapCacheTimeout Double
LDAP browser cache timeout (seconds).
ldapconntimeout Double
LDAP connection timeout (msec).
lockPreempt String
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
logChecksum String
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
logChecksumUpload String
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
logForwardCacheSize Double
Log forwarding disk cache size (GB).
longitude String
fmg location longitude
managementIp String
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
managementPort Double
Overriding port for management connection (Overrides admin port).
mapclientSslProtocol String
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
maxLogForward Double
Maximum number of log-forward and aggregation settings.
maxRunningReports Double
Maximum number of reports generating at one time.
mcPolicyDisabledAdoms List<SystemGlobalMcPolicyDisabledAdom>
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
multipleStepsUpgradeInAutolink String
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noCopyPermissionCheck String
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noVipValueCheck String
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
normalizedIntfZoneOnly String
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
objectRevisionDbMax Double
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
objectRevisionMandatoryNote String
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
objectRevisionObjectMax Double
Maximum revisions for a single object (10-1000 default 100).
objectRevisionStatus String
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
oftpSslProtocol String
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
partialInstall String
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
partialInstallForce String
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
partialInstallRev String
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
perPolicyLock String
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
performImproveByHa String
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
policyObjectIcon String
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
policyObjectInDualPane String
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
preLoginBanner String
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
preLoginBannerMessage String
Pre-login banner message.
privateDataEncryption String
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
remoteauthtimeout Double
Remote authentication (RADIUS/LDAP) timeout (sec).
saveLastHitInAdomdb String
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
searchAllAdoms String
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
sshEncAlgos List<String>
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
sshHostkeyAlgos List<String>
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
sshKexAlgos List<String>
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
sshMacAlgos List<String>
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
sshStrongCrypto String
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
sslCipherSuites List<SystemGlobalSslCipherSuite>
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslLowEncryption String
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
sslProtocols List<String>
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
sslStaticKeyCiphers String
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
systemGlobalId String
an identifier for the resource.
tableEntryBlink String
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
taskListSize Double
Maximum number of completed tasks to keep.
tftp String
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
timezone String
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
tunnelMtu Double
Maximum transportation unit(68 - 9000).
usg String
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
vdomMirror String
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
webserviceProtos List<String>
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
workflowMaxSessions Double
Maximum number of workflow sessions per ADOM (minimum 100).
workspaceMode String
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
workspaceUnlockAfterInstall String
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.
adminHost string
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
adminLockoutDuration number
Lockout duration(sec) for administration.
adminLockoutMethod string
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
adminLockoutThreshold number
Lockout threshold for administration.
adminSshGraceTime number
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
adomMode string
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
adomRevAutoDelete string
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
adomRevMaxBackupRevisions number
Maximum number of ADOM revisions to backup.
adomRevMaxDays number
Number of days to keep old ADOM revisions.
adomRevMaxRevisions number
Maximum number of ADOM revisions to keep.
adomSelect string
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
adomStatus string
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
apacheMode string
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
apiIpBinding string
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
cloneNameOption string
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
cltCertReq string
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
consoleOutput string
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
contentpackFgtInstall string
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
countryFlag string
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
createRevision string
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
daylightsavetime string
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
detectUnregisteredLogDevice string
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
deviceViewMode string
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
dhParams string
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
disableModules string[]
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
dynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
encAlgorithm string
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
fabricStoragePoolQuota number
Disk quota for Fabric (MB).
fabricStoragePoolSize number
Max storage pooll size
fazStatus string
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
fcpCfgService string
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
fgfmCaCert string
set the extra fgfm CA certificates.
fgfmCertExclusive string
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
fgfmDenyUnknown string
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
fgfmLocalCert string
set the fgfm local certificate.
fgfmPeercertWithoutsn string
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
fgfmSslProtocol string
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
fortiservicePort number
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
globalSslProtocol string
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
guiCurlTimeout number
GUI curl timeout in seconds (5-300 default 30).
guiPollingInterval number
GUI polling interval in seconds (1-288000 default 5).
haMemberAutoGrouping string
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
hostname string
System hostname.
httpdSslProtocols string[]
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
importIgnoreAddrCmt string
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
jsonapiLog string
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
language string
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
latitude string
fmg location latitude
ldapCacheTimeout number
LDAP browser cache timeout (seconds).
ldapconntimeout number
LDAP connection timeout (msec).
lockPreempt string
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
logChecksum string
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
logChecksumUpload string
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
logForwardCacheSize number
Log forwarding disk cache size (GB).
longitude string
fmg location longitude
managementIp string
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
managementPort number
Overriding port for management connection (Overrides admin port).
mapclientSslProtocol string
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
maxLogForward number
Maximum number of log-forward and aggregation settings.
maxRunningReports number
Maximum number of reports generating at one time.
mcPolicyDisabledAdoms SystemGlobalMcPolicyDisabledAdom[]
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
multipleStepsUpgradeInAutolink string
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noCopyPermissionCheck string
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noVipValueCheck string
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
normalizedIntfZoneOnly string
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
objectRevisionDbMax number
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
objectRevisionMandatoryNote string
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
objectRevisionObjectMax number
Maximum revisions for a single object (10-1000 default 100).
objectRevisionStatus string
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
oftpSslProtocol string
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
partialInstall string
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
partialInstallForce string
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
partialInstallRev string
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
perPolicyLock string
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
performImproveByHa string
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
policyObjectIcon string
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
policyObjectInDualPane string
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
preLoginBanner string
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
preLoginBannerMessage string
Pre-login banner message.
privateDataEncryption string
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
remoteauthtimeout number
Remote authentication (RADIUS/LDAP) timeout (sec).
saveLastHitInAdomdb string
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
searchAllAdoms string
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
sshEncAlgos string[]
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
sshHostkeyAlgos string[]
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
sshKexAlgos string[]
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
sshMacAlgos string[]
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
sshStrongCrypto string
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
sslCipherSuites SystemGlobalSslCipherSuite[]
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslLowEncryption string
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
sslProtocols string[]
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
sslStaticKeyCiphers string
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
systemGlobalId string
an identifier for the resource.
tableEntryBlink string
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
taskListSize number
Maximum number of completed tasks to keep.
tftp string
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
timezone string
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
tunnelMtu number
Maximum transportation unit(68 - 9000).
usg string
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
vdomMirror string
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
webserviceProtos string[]
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
workflowMaxSessions number
Maximum number of workflow sessions per ADOM (minimum 100).
workspaceMode string
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
workspaceUnlockAfterInstall string
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.
admin_host str
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
admin_lockout_duration float
Lockout duration(sec) for administration.
admin_lockout_method str
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
admin_lockout_threshold float
Lockout threshold for administration.
admin_ssh_grace_time float
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
adom_mode str
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
adom_rev_auto_delete str
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
adom_rev_max_backup_revisions float
Maximum number of ADOM revisions to backup.
adom_rev_max_days float
Number of days to keep old ADOM revisions.
adom_rev_max_revisions float
Maximum number of ADOM revisions to keep.
adom_select str
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
adom_status str
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
apache_mode str
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
api_ip_binding str
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
clone_name_option str
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
clt_cert_req str
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
console_output str
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
contentpack_fgt_install str
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
country_flag str
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
create_revision str
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
daylightsavetime str
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
detect_unregistered_log_device str
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
device_view_mode str
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
dh_params str
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
disable_modules Sequence[str]
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
dynamic_sort_subtable str
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
enc_algorithm str
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
fabric_storage_pool_quota float
Disk quota for Fabric (MB).
fabric_storage_pool_size float
Max storage pooll size
faz_status str
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
fcp_cfg_service str
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
fgfm_ca_cert str
set the extra fgfm CA certificates.
fgfm_cert_exclusive str
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
fgfm_deny_unknown str
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
fgfm_local_cert str
set the fgfm local certificate.
fgfm_peercert_withoutsn str
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
fgfm_ssl_protocol str
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
fortiservice_port float
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
global_ssl_protocol str
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
gui_curl_timeout float
GUI curl timeout in seconds (5-300 default 30).
gui_polling_interval float
GUI polling interval in seconds (1-288000 default 5).
ha_member_auto_grouping str
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
hostname str
System hostname.
httpd_ssl_protocols Sequence[str]
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
import_ignore_addr_cmt str
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
jsonapi_log str
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
language str
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
latitude str
fmg location latitude
ldap_cache_timeout float
LDAP browser cache timeout (seconds).
ldapconntimeout float
LDAP connection timeout (msec).
lock_preempt str
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
log_checksum str
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
log_checksum_upload str
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
log_forward_cache_size float
Log forwarding disk cache size (GB).
longitude str
fmg location longitude
management_ip str
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
management_port float
Overriding port for management connection (Overrides admin port).
mapclient_ssl_protocol str
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
max_log_forward float
Maximum number of log-forward and aggregation settings.
max_running_reports float
Maximum number of reports generating at one time.
mc_policy_disabled_adoms Sequence[SystemGlobalMcPolicyDisabledAdomArgs]
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
multiple_steps_upgrade_in_autolink str
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
no_copy_permission_check str
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
no_vip_value_check str
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
normalized_intf_zone_only str
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
object_revision_db_max float
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
object_revision_mandatory_note str
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
object_revision_object_max float
Maximum revisions for a single object (10-1000 default 100).
object_revision_status str
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
oftp_ssl_protocol str
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
partial_install str
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
partial_install_force str
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
partial_install_rev str
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
per_policy_lock str
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
perform_improve_by_ha str
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
policy_object_icon str
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
policy_object_in_dual_pane str
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
pre_login_banner str
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
pre_login_banner_message str
Pre-login banner message.
private_data_encryption str
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
remoteauthtimeout float
Remote authentication (RADIUS/LDAP) timeout (sec).
save_last_hit_in_adomdb str
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
search_all_adoms str
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
ssh_enc_algos Sequence[str]
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
ssh_hostkey_algos Sequence[str]
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
ssh_kex_algos Sequence[str]
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
ssh_mac_algos Sequence[str]
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
ssh_strong_crypto str
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
ssl_cipher_suites Sequence[SystemGlobalSslCipherSuiteArgs]
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
ssl_low_encryption str
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
ssl_protocols Sequence[str]
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
ssl_static_key_ciphers str
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
system_global_id str
an identifier for the resource.
table_entry_blink str
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
task_list_size float
Maximum number of completed tasks to keep.
tftp str
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
timezone str
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
tunnel_mtu float
Maximum transportation unit(68 - 9000).
usg str
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
vdom_mirror str
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
webservice_protos Sequence[str]
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
workflow_max_sessions float
Maximum number of workflow sessions per ADOM (minimum 100).
workspace_mode str
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
workspace_unlock_after_install str
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.
adminHost String
Administrative host for HTTP and HTTPs. When set, will be used in lieu of the client's Host header for any redirection.
adminLockoutDuration Number
Lockout duration(sec) for administration.
adminLockoutMethod String
Lockout method for administration. ip - Lockout by IP user - Lockout by user Valid values: ip, user.
adminLockoutThreshold Number
Lockout threshold for administration.
adminSshGraceTime Number
Maximum time in seconds permitted between making an SSH connection to the FortiManager unit and authenticating (10 - 3600 sec (1 hour), default 120).
adomMode String
ADOM mode. normal - Normal ADOM mode. advanced - Advanced ADOM mode. Valid values: normal, advanced.
adomRevAutoDelete String
Auto delete features for old ADOM revisions. disable - Disable auto delete function for ADOM revision. by-revisions - Auto delete ADOM revisions by maximum number of revisions. by-days - Auto delete ADOM revisions by maximum days. Valid values: disable, by-revisions, by-days.
adomRevMaxBackupRevisions Number
Maximum number of ADOM revisions to backup.
adomRevMaxDays Number
Number of days to keep old ADOM revisions.
adomRevMaxRevisions Number
Maximum number of ADOM revisions to keep.
adomSelect String
Enable/disable select ADOM after login. disable - Disable select ADOM after login. enable - Enable select ADOM after login. Valid values: disable, enable.
adomStatus String
ADOM status. disable - Disable ADOM mode. enable - Enable ADOM mode. Valid values: disable, enable.
apacheMode String
Set apache mode. event - Apache event mode. prefork - Apache prefork mode. Valid values: event, prefork.
apiIpBinding String
Enable/disable source IP check for JSON API request. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
cloneNameOption String
set the clone object names option. default - Add a prefix of 'Clone of' to the clone name. keep - Keep the original name for user to edit. Valid values: default, keep.
cltCertReq String
Require client certificate for GUI login. disable - Disable setting. enable - Require client certificate for GUI login. optional - Optional client certificate for GUI login. Valid values: disable, enable, optional.
consoleOutput String
Console output mode. standard - Standard output. more - More page output. Valid values: standard, more.
contentpackFgtInstall String
Enable/disable outbreak alert auto install for FGT ADOMS . disable - Disable the sql report auto outbreak auto install. enable - Enable the sql report auto outbreak auto install. Valid values: disable, enable.
countryFlag String
Country flag Status. disable - Disable country flag icon beside ip address. enable - Enable country flag icon beside ip address. Valid values: disable, enable.
createRevision String
Enable/disable create revision by default. disable - Disable create revision by default. enable - Enable create revision by default. Valid values: disable, enable.
daylightsavetime String
Enable/disable daylight saving time. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
detectUnregisteredLogDevice String
Detect unregistered logging device from log message. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
deviceViewMode String
Set devices/groups view mode. regular - Regular view mode. tree - Tree view mode. Valid values: regular, tree.
dhParams String
Minimum size of Diffie-Hellman prime for SSH/HTTPS (bits). 1024 - 1024 bits. 1536 - 1536 bits. 2048 - 2048 bits. 3072 - 3072 bits. 4096 - 4096 bits. 6144 - 6144 bits. 8192 - 8192 bits. Valid values: 1024, 1536, 2048, 3072, 4096, 6144, 8192.
disableModules List<String>
Disable module list. fortiview-noc - FortiView/NOC-SOC module. fortirecorder - FortiRecorder module. siem - SIEM module. soc - SOC module. ai - AI module. Valid values: fortiview-noc, fortirecorder, siem, soc, ai.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
encAlgorithm String
SSL communication encryption algorithms. low - SSL communication using all available encryption algorithms. medium - SSL communication using high and medium encryption algorithms. high - SSL communication using high encryption algorithms. Valid values: low, medium, high.
fabricStoragePoolQuota Number
Disk quota for Fabric (MB).
fabricStoragePoolSize Number
Max storage pooll size
fazStatus String
FAZ status. disable - Disable FAZ feature. enable - Enable FAZ feature. Valid values: disable, enable.
fcpCfgService String
Enable/disable FCP service processing configuration requests disable - FCP service doesn't process configuration requests from web enable - FCP service processes configuration requests from web. Valid values: disable, enable.
fgfmCaCert String
set the extra fgfm CA certificates.
fgfmCertExclusive String
set if the local or CA certificates should be used exclusively. disable - Used certificate best-effort. enable - Used certificate exclusive. Valid values: disable, enable.
fgfmDenyUnknown String
set if allow devices with unknown SN actively register as an unauthorized device. disable - Allow devices with unknown SN to actively register as an unauthorized device. enable - Deny devices with unknown SN to actively register as an unauthorized device. Valid values: disable, enable.
fgfmLocalCert String
set the fgfm local certificate.
fgfmPeercertWithoutsn String
set if the subject CN or SAN of peer's SSL certificate sent in FGFM should include the serial number of the device. disable - Peer's certificate must include serial number in subject CN or SAN. enable - Peer's certificate might not include serial number in subject CN or SAN. Valid values: disable, enable.
fgfmSslProtocol String
set the lowest SSL protocols for fgfmsd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
fortiservicePort Number
FortiService port (1 - 65535, default = 8013). Used by FortiClient endpoint compliance. Older versions of FortiClient used a different port.
globalSslProtocol String
set the lowest SSL protocol version for all SSL connections. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
guiCurlTimeout Number
GUI curl timeout in seconds (5-300 default 30).
guiPollingInterval Number
GUI polling interval in seconds (1-288000 default 5).
haMemberAutoGrouping String
Enable/disable automatically group HA members feature disable - Disable automatically grouping HA members feature. enable - Enable automatically grouping HA members only when group name is unique in your network. Valid values: disable, enable.
hostname String
System hostname.
httpdSslProtocols List<String>
set SSL protocols for apache daemon (httpd) sslv3 - Enable SSLv3. tlsv1.0 - Enable TLSv1.0. tlsv1.1 - Enable TLSv1.1. tlsv1.2 - Enable TLSv1.2. tlsv1.3 - Enable TLSv1.3. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
importIgnoreAddrCmt String
Enable/Disable import ignore of address comments. disable - Disable import ignore of address comments. enable - Enable import ignore of address comments. Valid values: disable, enable.
jsonapiLog String
enable jsonapi log. disable - disable jsonapi log. request - logging jsonapi request. response - logging jsonapi response. all - logging both jsonapi request & response. Valid values: disable, request, response, all.
language String
System global language. english - English simch - Simplified Chinese japanese - Japanese korean - Korean spanish - Spanish trach - Traditional Chinese Valid values: english, simch, japanese, korean, spanish, trach.
latitude String
fmg location latitude
ldapCacheTimeout Number
LDAP browser cache timeout (seconds).
ldapconntimeout Number
LDAP connection timeout (msec).
lockPreempt String
Enable/disable ADOM lock override. disable - Disable lock preempt. enable - Enable lock preempt. Valid values: disable, enable.
logChecksum String
Record log file hash value, timestamp, and authentication code at transmission or rolling. none - No record log file checksum. md5 - Record log file's MD5 hash value only. md5-auth - Record log file's MD5 hash value and authentication code. Valid values: none, md5, md5-auth.
logChecksumUpload String
Enable/disable upload log checksum with log files. disable - Disable attribute function. enable - Enable attribute function. Valid values: disable, enable.
logForwardCacheSize Number
Log forwarding disk cache size (GB).
longitude String
fmg location longitude
managementIp String
Management IP address of this FortiGate. Used to log into this FortiGate from another FortiGate in the Security Fabric.
managementPort Number
Overriding port for management connection (Overrides admin port).
mapclientSslProtocol String
set the lowest SSL protocol version for connection to mapserver. follow-global-ssl-protocol - Follow system.global.global-ssl-protocol setting (default). sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version. tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: follow-global-ssl-protocol, sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
maxLogForward Number
Maximum number of log-forward and aggregation settings.
maxRunningReports Number
Maximum number of reports generating at one time.
mcPolicyDisabledAdoms List<Property Map>
Mc-Policy-Disabled-Adoms. The structure of mc_policy_disabled_adoms block is documented below.
multipleStepsUpgradeInAutolink String
Enable/disable multiple steps upgade in autolink process disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noCopyPermissionCheck String
Do not perform permission check to block object changes in different adom during copy and install. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
noVipValueCheck String
Enable/disable skipping policy instead of throwing error when vip has no default or dynamic mapping during policy copy disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
normalizedIntfZoneOnly String
allow normalized interface to be zone only. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
objectRevisionDbMax Number
Maximum revisions for a single database (10,000-1,000,000 default 100,000).
objectRevisionMandatoryNote String
Enable/disable mandatory note when create revision. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
objectRevisionObjectMax Number
Maximum revisions for a single object (10-1000 default 100).
objectRevisionStatus String
Enable/disable create revision when modify objects. disable - Disable object revision. enable - Enable object revision. Valid values: disable, enable.
oftpSslProtocol String
set the lowest SSL protocols for oftpd. sslv3 - set SSLv3 as the lowest version. tlsv1.0 - set TLSv1.0 as the lowest version. tlsv1.1 - set TLSv1.1 as the lowest version. tlsv1.2 - set TLSv1.2 as the lowest version (default). tlsv1.3 - set TLSv1.3 as the lowest version. Valid values: sslv3, tlsv1.0, tlsv1.1, tlsv1.2, tlsv1.3.
partialInstall String
Enable/Disable partial install (install some objects). disable - Disable partial install function. enable - Enable partial install function. Valid values: disable, enable.
partialInstallForce String
Enable/Disable partial install when devdb is modified. disable - Disable partial install when devdb is modified. enable - Enable partial install when devdb is modified. Valid values: disable, enable.
partialInstallRev String
Enable/Disable auto creating adom revision for partial install. disable - Disable partial install revision. enable - Enable partial install revision. Valid values: disable, enable.
perPolicyLock String
Enable/Disable per policy lock. disable - Disable per policy lock. enable - Enable per policy lock. Valid values: disable, enable.
performImproveByHa String
Enable/Disable performance improvement by distributing tasks to HA secondary units. disable - Disable performance improvement by HA. enable - Enable performance improvement by HA. Valid values: disable, enable.
policyObjectIcon String
show icons of policy objects. disable - Disable icon of policy objects. enable - Enable icon of policy objects. Valid values: disable, enable.
policyObjectInDualPane String
show policies and objects in dual pane. disable - Disable polices and objects in dual pane. enable - Enable polices and objects in dual pane. Valid values: disable, enable.
preLoginBanner String
Enable/disable pre-login banner. disable - Disable pre-login banner. enable - Enable pre-login banner. Valid values: disable, enable.
preLoginBannerMessage String
Pre-login banner message.
privateDataEncryption String
Enable/disable private data encryption using an AES 128-bit key. disable - Disable private data encryption using an AES 128-bit key. enable - Enable private data encryption using an AES 128-bit key. Valid values: disable, enable.
remoteauthtimeout Number
Remote authentication (RADIUS/LDAP) timeout (sec).
saveLastHitInAdomdb String
Enable/Disable save last-hit value in adomdb. disable - Disable save last-hit value in adomdb. enable - Enable save last-hit value in adomdb. Valid values: disable, enable.
searchAllAdoms String
Enable/Disable Search all ADOMs for where-used query. disable - Disable search all ADOMs for where-used queries. enable - Enable search all ADOMs for where-used queries. Valid values: disable, enable.
sshEncAlgos List<String>
Select one or more SSH ciphers. chacha20-poly1305@openssh.com - aes128-ctr - aes192-ctr - aes256-ctr - arcfour256 - arcfour128 - aes128-cbc - 3des-cbc - blowfish-cbc - cast128-cbc - aes192-cbc - aes256-cbc - arcfour - rijndael-cbc@lysator.liu.se - aes128-gcm@openssh.com - aes256-gcm@openssh.com - Valid values: chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com.
sshHostkeyAlgos List<String>
Select one or more SSH hostkey algorithms. ssh-rsa - ecdsa-sha2-nistp521 - rsa-sha2-256 - rsa-sha2-512 - ssh-ed25519 - Valid values: ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519.
sshKexAlgos List<String>
Select one or more SSH kex algorithms. diffie-hellman-group1-sha1 - diffie-hellman-group14-sha1 - diffie-hellman-group14-sha256 - diffie-hellman-group16-sha512 - diffie-hellman-group18-sha512 - diffie-hellman-group-exchange-sha1 - diffie-hellman-group-exchange-sha256 - curve25519-sha256@libssh.org - ecdh-sha2-nistp256 - ecdh-sha2-nistp384 - ecdh-sha2-nistp521 - Valid values: diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521.
sshMacAlgos List<String>
Select one or more SSH MAC algorithms. hmac-md5 - hmac-md5-etm@openssh.com - hmac-md5-96 - hmac-md5-96-etm@openssh.com - hmac-sha1 - hmac-sha1-etm@openssh.com - hmac-sha2-256 - hmac-sha2-256-etm@openssh.com - hmac-sha2-512 - hmac-sha2-512-etm@openssh.com - hmac-ripemd160 - hmac-ripemd160@openssh.com - hmac-ripemd160-etm@openssh.com - umac-64@openssh.com - umac-128@openssh.com - umac-64-etm@openssh.com - umac-128-etm@openssh.com - Valid values: hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com.
sshStrongCrypto String
Only allow strong ciphers for SSH when enabled. disable - Disable strong crypto for SSH. enable - Enable strong crypto for SSH. Valid values: disable, enable.
sslCipherSuites List<Property Map>
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslLowEncryption String
SSL low-grade encryption. disable - Disable SSL low-grade encryption. enable - Enable SSL low-grade encryption. Valid values: disable, enable.
sslProtocols List<String>
SSL protocols. tlsv1.3 - Enable TLSv1.3. tlsv1.2 - Enable TLSv1.2. tlsv1.1 - Enable TLSv1.1. tlsv1.0 - Enable TLSv1.0. sslv3 - Enable SSLv3. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3.
sslStaticKeyCiphers String
Enable/disable SSL static key ciphers. disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
systemGlobalId String
an identifier for the resource.
tableEntryBlink String
Enable/disable table entry blink in GUI disable - Disable setting. enable - Enable setting. Valid values: disable, enable.
taskListSize Number
Maximum number of completed tasks to keep.
tftp String
Enable/disable TFTP in exec restore image command (disabled by default in FIPS mode) disable - Disable TFTP enable - Enable TFTP Valid values: disable, enable.
timezone String
Time zone. 00 - (GMT-12:00) Eniwetak, Kwajalein. 01 - (GMT-11:00) Midway Island, Samoa. 02 - (GMT-10:00) Hawaii. 03 - (GMT-9:00) Alaska. 04 - (GMT-8:00) Pacific Time (US & Canada). 05 - (GMT-7:00) Arizona. 06 - (GMT-7:00) Mountain Time (US & Canada). 07 - (GMT-6:00) Central America. 08 - (GMT-6:00) Central Time (US & Canada). 09 - (GMT-6:00) Mexico City. 10 - (GMT-6:00) Saskatchewan. 11 - (GMT-5:00) Bogota, Lima, Quito. 12 - (GMT-5:00) Eastern Time (US & Canada). 13 - (GMT-5:00) Indiana (East). 14 - (GMT-4:00) Atlantic Time (Canada). 15 - (GMT-4:00) La Paz. 16 - (GMT-4:00) Santiago. 17 - (GMT-3:30) Newfoundland. 18 - (GMT-3:00) Brasilia. 19 - (GMT-3:00) Buenos Aires, Georgetown. 20 - (GMT-3:00) Nuuk (Greenland). 21 - (GMT-2:00) Mid-Atlantic (Deprecated). 22 - (GMT-1:00) Azores. 23 - (GMT-1:00) Cape Verde Is. 24 - (GMT) Monrovia. 25 - (GMT) London, Edinburgh. 26 - (GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna. 27 - (GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague. 28 - (GMT+1:00) Brussels, Copenhagen, Madrid, Paris. 29 - (GMT+1:00) Sarajevo, Skopje, Warsaw, Zagreb. 30 - (GMT+1:00) West Central Africa. 31 - (GMT+2:00) Athens, Sofia, Vilnius. 32 - (GMT+2:00) Bucharest. 33 - (GMT+2:00) Cairo. 34 - (GMT+2:00) Harare, Pretoria. 35 - (GMT+2:00) Helsinki, Riga,Tallinn. 36 - (GMT+2:00) Jerusalem. 37 - (GMT+3:00) Baghdad. 38 - (GMT+3:00) Kuwait, Riyadh. 39 - (GMT+3:00) St.Petersburg, Volgograd. 40 - (GMT+3:00) Nairobi. 41 - (GMT+3:30) Tehran. 42 - (GMT+4:00) Abu Dhabi, Muscat. 43 - (GMT+4:00) Baku. 44 - (GMT+4:30) Kabul. 45 - (GMT+5:00) Ekaterinburg. 46 - (GMT+5:00) Islamabad, Karachi, Tashkent. 47 - (GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi. 48 - (GMT+5:45) Kathmandu. 49 - (GMT+6:00) Almaty, Novosibirsk. 50 - (GMT+6:00) Astana, Dhaka. 51 - (GMT+5:30) Sri Jayawardenepura. 52 - (GMT+6:30) Rangoon. 53 - (GMT+7:00) Bangkok, Hanoi, Jakarta. 54 - (GMT+7:00) Krasnoyarsk. 55 - (GMT+8:00) Beijing, ChongQing, HongKong, Urumqi. 56 - (GMT+8:00) Irkutsk, Ulaanbaatar. 57 - (GMT+8:00) Kuala Lumpur, Singapore. 58 - (GMT+8:00) Perth. 59 - (GMT+8:00) Taipei. 60 - (GMT+9:00) Osaka, Sapporo, Tokyo, Seoul. 61 - (GMT+9:00) Yakutsk. 62 - (GMT+9:30) Adelaide. 63 - (GMT+9:30) Darwin. 64 - (GMT+10:00) Brisbane. 65 - (GMT+10:00) Canberra, Melbourne, Sydney. 66 - (GMT+10:00) Guam, Port Moresby. 67 - (GMT+10:00) Hobart. 68 - (GMT+10:00) Vladivostok. 69 - (GMT+11:00) Magadan. 70 - (GMT+11:00) Solomon Is., New Caledonia. 71 - (GMT+12:00) Auckland, Wellington. 72 - (GMT+12:00) Fiji, Kamchatka, Marshall Is. 73 - (GMT+13:00) Nuku'alofa. 74 - (GMT-4:30) Caracas. 75 - (GMT+1:00) Namibia. 76 - (GMT-5:00) Brazil-Acre. 77 - (GMT-4:00) Brazil-West. 78 - (GMT-3:00) Brazil-East. 79 - (GMT-2:00) Brazil-DeNoronha. 80 - (GMT+14:00) Kiritimati. 81 - (GMT-7:00) Baja California Sur, Chihuahua. 82 - (GMT+12:45) Chatham Islands. 83 - (GMT+3:00) Minsk. 84 - (GMT+13:00) Samoa. 85 - (GMT+3:00) Istanbul. 86 - (GMT-4:00) Paraguay. 87 - (GMT) Casablanca. 88 - (GMT+3:00) Moscow. 89 - (GMT) Greenwich Mean Time. 90 - (GMT) Dublin. 91 - (GMT) Lisbon. Valid values: 00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91.
tunnelMtu Number
Maximum transportation unit(68 - 9000).
usg String
Enable/disable Fortiguard server restriction. disable - Contact any Fortiguard server enable - Contact Fortiguard server in USA only Valid values: disable, enable.
vdomMirror String
VDOM mirror. disable - Disable VDOM mirror function. enable - Enable VDOM mirror function. Valid values: disable, enable.
webserviceProtos List<String>
Web Service connection support SSL protocols. tlsv1.3 - Web Service connection using TLSv1.3 protocol. tlsv1.2 - Web Service connection using TLSv1.2 protocol. tlsv1.1 - Web Service connection using TLSv1.1 protocol. tlsv1.0 - Web Service connection using TLSv1.0 protocol. sslv3 - Web Service connection using SSLv3 protocol. sslv2 - Web Service connection using SSLv2 protocol. Valid values: tlsv1.3, tlsv1.2, tlsv1.1, tlsv1.0, sslv3, sslv2.
workflowMaxSessions Number
Maximum number of workflow sessions per ADOM (minimum 100).
workspaceMode String
Set workspace mode. disabled - Workspace disabled. normal - Workspace lock mode. workflow - Workspace workflow mode. per-adom - Per-Adom workspace mode. Valid values: disabled, normal, workflow, per-adom.
workspaceUnlockAfterInstall String
Enable/disable ADOM auto-unlock after device installation. disable - Disable automatically unlock adom after device installation. enable - Enable automatically unlock adom after device installation. Valid values: disable, enable.

Supporting Types

SystemGlobalMcPolicyDisabledAdom
, SystemGlobalMcPolicyDisabledAdomArgs

AdomName string
Adom names.
AdomName string
Adom names.
adomName String
Adom names.
adomName string
Adom names.
adom_name str
Adom names.
adomName String
Adom names.

SystemGlobalSslCipherSuite
, SystemGlobalSslCipherSuiteArgs

Cipher string
Cipher name
Priority double
SSL/TLS cipher suites priority.
Version string
SSL/TLS version the cipher suite can be used with. tls1.2-or-below - TLS 1.2 or below. tls1.3 - TLS 1.3 Valid values: tls1.2-or-below, tls1.3.
Cipher string
Cipher name
Priority float64
SSL/TLS cipher suites priority.
Version string
SSL/TLS version the cipher suite can be used with. tls1.2-or-below - TLS 1.2 or below. tls1.3 - TLS 1.3 Valid values: tls1.2-or-below, tls1.3.
cipher String
Cipher name
priority Double
SSL/TLS cipher suites priority.
version String
SSL/TLS version the cipher suite can be used with. tls1.2-or-below - TLS 1.2 or below. tls1.3 - TLS 1.3 Valid values: tls1.2-or-below, tls1.3.
cipher string
Cipher name
priority number
SSL/TLS cipher suites priority.
version string
SSL/TLS version the cipher suite can be used with. tls1.2-or-below - TLS 1.2 or below. tls1.3 - TLS 1.3 Valid values: tls1.2-or-below, tls1.3.
cipher str
Cipher name
priority float
SSL/TLS cipher suites priority.
version str
SSL/TLS version the cipher suite can be used with. tls1.2-or-below - TLS 1.2 or below. tls1.3 - TLS 1.3 Valid values: tls1.2-or-below, tls1.3.
cipher String
Cipher name
priority Number
SSL/TLS cipher suites priority.
version String
SSL/TLS version the cipher suite can be used with. tls1.2-or-below - TLS 1.2 or below. tls1.3 - TLS 1.3 Valid values: tls1.2-or-below, tls1.3.

Import

System Global can be imported using any of these accepted formats:

$ export “FORTIMANAGER_IMPORT_TABLE”=“true”

$ pulumi import fortimanager:index/systemGlobal:SystemGlobal labelname SystemGlobal
Copy

$ unset “FORTIMANAGER_IMPORT_TABLE”

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortimanager fortinetdev/terraform-provider-fortimanager
License
Notes
This Pulumi package is based on the fortimanager Terraform Provider.
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager