:source: fmgr_devprof_system_global.py
:orphan:
.. _fmgr_devprof_system_global:
fmgr_devprof_system_global -- Configure global attributes.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
.. versionadded:: 1.0.0
.. warning::
Starting in version 3.0.0, all input arguments will be named using the underscore naming convention (snake_case).
- Argument name before 3.0.0: ``var-name``, ``var name``, ``var.name``
- New argument name starting in 3.0.0: ``var_name``
FortiManager Ansible v2.4+ supports both previous argument name and new underscore name.
You will receive deprecation warnings if you keep using the previous argument name.
You can ignore the warning by setting deprecation_warnings=False in ansible.cfg.
.. contents::
:local:
:depth: 1
Synopsis
--------
- This module is able to configure a FortiManager device.
- Examples include all parameters and values need to be adjusted to data sources before usage.
- Tested with FortiManager v7.x.
Requirements
------------
The below requirements are needed on the host that executes this module.
- ansible-core>=2.16.0
FortiManager Version Compatibility
----------------------------------
.. raw:: html
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
Parameters
----------
.. raw:: html
- access_token -The token to access FortiManager without using username and password. type: str required: false
- bypass_validation - Only set to True when module schema diffs with FortiManager API structure, module continues to execute without validating parameters. type: bool required: false default: False
- enable_log - Enable/Disable logging for task. type: bool required: false default: False
- forticloud_access_token - Access token of forticloud managed API users, this option is available with FortiManager later than 6.4.0. type: str required: false
- proposed_method - The overridden method for the underlying Json RPC request. type: str required: false choices: set, update, add
- rc_succeeded - The rc codes list with which the conditions to succeed will be overriden. type: list required: false
- rc_failed - The rc codes list with which the conditions to fail will be overriden. type: list required: false
- workspace_locking_adom - Acquire the workspace lock if FortiManager is running in workspace mode. type: str required: false choices: global, custom adom including root
- workspace_locking_timeout - The maximum time in seconds to wait for other users to release workspace lock. type: integer required: false default: 300
- adom - The parameter in requested url type: str required: true
- devprof - The parameter in requested url type: str required: true
- devprof_system_global - Configure global attributes. type: dict
- admin_https_redirect (Alias name: admin-https-redirect) Enable/disable redirection of http administration access to https. type: str choices: [disable, enable]
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- admin_port (Alias name: admin-port) Administrative access port for http. type: int
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- admin_scp (Alias name: admin-scp) Enable/disable using scp to download the system configuration. type: str choices: [disable, enable]
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- admin_sport (Alias name: admin-sport) Administrative access port for https. type: int
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- admin_ssh_port (Alias name: admin-ssh-port) Administrative access port for ssh. type: int
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- admin_ssh_v1 (Alias name: admin-ssh-v1) Enable/disable ssh v1 compatibility. type: str choices: [disable, enable]
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- admin_telnet_port (Alias name: admin-telnet-port) Administrative access port for telnet. type: int
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> v7.2.4, v7.2.6 -> v7.4.1, v7.4.3 -> latest
- admintimeout Number of minutes before an idle administrator session times out (5 - 480 minutes (8 hours), default = 5). type: int
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- gui_ipv6 (Alias name: gui-ipv6) Enable/disable ipv6 settings on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- gui_lines_per_page (Alias name: gui-lines-per-page) Number of lines to display per page for web administration. type: int
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- gui_theme (Alias name: gui-theme) Color scheme for the administration gui. type: str choices: [blue, green, melongene, red, mariner, neutrino, jade, graphite, dark-matter, onyx, eclipse, retro, fpx, jet-stream, security-fabric]
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- language Gui display language. type: str choices: [english, simch, japanese, korean, spanish, trach, french, portuguese]
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> latest
- switch_controller (Alias name: switch-controller) Enable/disable switch controller feature. type: str choices: [disable, enable]
more...
Supported Version Ranges: v6.0.0 -> v6.2.5, v6.2.7 -> v6.4.1, v6.4.3 -> v7.2.0, v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_device_latitude (Alias name: gui-device-latitude) Support meta variable type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_device_longitude (Alias name: gui-device-longitude) Support meta variable type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- hostname Support meta variable type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- timezone Support meta variable type: list choices: [00, 01, 02, 03, 04, 05, 06, 07, 08, 09, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- check_reset_range (Alias name: check-reset-range) Configure icmp error message verification. type: str choices: [disable, strict]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- pmtu_discovery (Alias name: pmtu-discovery) Enable/disable path mtu discovery. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_allow_incompatible_fabric_fgt (Alias name: gui-allow-incompatible-fabric-fgt) Enable/disable allow fgt with incompatible firmware to be treated as compatible in security fabric on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_restrict_local (Alias name: admin-restrict-local) Enable/disable local admin authentication restriction when remote authenticator is up and running (default = disable). type: str choices: [disable, enable, all, non-console-only]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_workflow_management (Alias name: gui-workflow-management) Enable/disable workflow management features on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- send_pmtu_icmp (Alias name: send-pmtu-icmp) Enable/disable sending of path maximum transmission unit (pmtu) - icmp destination unreachable packet and to support pmtud protocol on your network to reduce fragmentation of packets. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- tcp_halfclose_timer (Alias name: tcp-halfclose-timer) Number of seconds the fortigate unit should wait to close a session after one peer has sent a fin packet but the other has not responded (1 - 86400 sec (1 day), default = 120). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_server_cert (Alias name: admin-server-cert) Server certificate that the fortigate uses for https administrative connections. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- dnsproxy_worker_count (Alias name: dnsproxy-worker-count) Dns proxy worker count. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- show_backplane_intf (Alias name: show-backplane-intf) Show/hide backplane interfaces type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_custom_language (Alias name: gui-custom-language) Enable/disable custom languages in gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ldapconntimeout Global timeout for connections with remote ldap servers in milliseconds (1 - 300000, default 500). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- auth_https_port (Alias name: auth-https-port) User authentication https port. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- revision_backup_on_logout (Alias name: revision-backup-on-logout) Enable/disable back-up of the latest configuration revision when an administrator logs out of the cli or gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- arp_max_entry (Alias name: arp-max-entry) Maximum number of dynamically learned mac addresses that can be added to the arp table (131072 - 2147483647, default = 131072). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- long_vdom_name (Alias name: long-vdom-name) Enable/disable long vdom name support. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- pre_login_banner (Alias name: pre-login-banner) Enable/disable displaying the administrator access disclaimer message on the login page before an administrator logs in. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- qsfpdd_split8_port (Alias name: qsfpdd-split8-port) Split qsfpddd port(s) as 8 ports type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- max_route_cache_size (Alias name: max-route-cache-size) Maximum number of ip route cache entries (0 - 2147483647). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortitoken_cloud_push_status (Alias name: fortitoken-cloud-push-status) Enable/disable ftm push service of fortitoken cloud. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.3 -> latest
- ssh_hostkey_override (Alias name: ssh-hostkey-override) Enable/disable ssh host key override in ssh daemon. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.3 -> latest
- proxy_hardware_acceleration (Alias name: proxy-hardware-acceleration) Enable/disable email proxy hardware acceleration. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- switch_controller_reserved_network (Alias name: switch-controller-reserved-network) Configure reserved network subnet for managed switches. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssd_trim_date (Alias name: ssd-trim-date) Date within a month to run ssd trim. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wad_worker_count (Alias name: wad-worker-count) Number of explicit proxy wan optimization daemon (wad) processes. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssh_hostkey (Alias name: ssh-hostkey) Config ssh host key. type: str
more...
Supported Version Ranges: v7.4.3 -> latest
- wireless_controller_port (Alias name: wireless-controller-port) Port used for the control channel in wireless controller mode (wireless-mode is ac). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fgd_alert_subscription (Alias name: fgd-alert-subscription) Type of alert to retrieve from fortiguard. type: list choices: [advisory, latest-threat, latest-virus, latest-attack, new-antivirus-db, new-attack-db]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- forticontroller_proxy_port (Alias name: forticontroller-proxy-port) Forticontroller proxy port (1024 - 49150). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- dh_params (Alias name: dh-params) Number of bits to use in the diffie-hellman exchange for https/ssh protocols. type: str choices: [1024, 1536, 2048, 3072, 4096, 6144, 8192]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- memory_use_threshold_green (Alias name: memory-use-threshold-green) Threshold at which memory usage forces the fortigate to exit conserve mode (% of total ram, default = 82). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- proxy_cert_use_mgmt_vdom (Alias name: proxy-cert-use-mgmt-vdom) Enable/disable using management vdom to send requests. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- proxy_auth_lifetime_timeout (Alias name: proxy-auth-lifetime-timeout) Lifetime timeout in minutes for authenticated users (5 - 65535 min, default=480 (8 hours)). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_auto_upgrade_setup_warning (Alias name: gui-auto-upgrade-setup-warning) Enable/disable the automatic patch upgrade setup prompt on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_cdn_usage (Alias name: gui-cdn-usage) Enable/disable load gui static files from a cdn. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- two_factor_email_expiry (Alias name: two-factor-email-expiry) Email-based two-factor authentication session timeout (30 - 300 seconds (5 minutes), default = 60). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- udp_idle_timer (Alias name: udp-idle-timer) Udp connection session timeout. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- interface_subnet_usage (Alias name: interface-subnet-usage) Enable/disable allowing use of interface-subnet setting in firewall addresses (default = enable). type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- forticontroller_proxy (Alias name: forticontroller-proxy) Enable/disable forticontroller proxy. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssh_enc_algo (Alias name: ssh-enc-algo) Select one or more ssh ciphers. type: list choices: [chacha20-poly1305@openssh.com, aes128-ctr, aes192-ctr, aes256-ctr, arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, rijndael-cbc@lysator.liu.se, aes128-gcm@openssh.com, aes256-gcm@openssh.com]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- block_session_timer (Alias name: block-session-timer) Duration in seconds for blocked sessions (1 - 300 sec (5 minutes), default = 30). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- quic_pmtud (Alias name: quic-pmtud) Enable/disable path mtu discovery (default = enable). type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.3 -> latest
- admin_https_ssl_ciphersuites (Alias name: admin-https-ssl-ciphersuites) Select one or more tls 1. type: list choices: [TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-AES-128-CCM-SHA256, TLS-AES-128-CCM-8-SHA256]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- security_rating_result_submission (Alias name: security-rating-result-submission) Enable/disable the submission of security rating results to fortiguard. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- user_device_store_max_unified_mem (Alias name: user-device-store-max-unified-mem) Maximum unified memory allowed in user device store. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- management_port (Alias name: management-port) Overriding port for management connection (overrides admin port). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortigslb_integration (Alias name: fortigslb-integration) Enable/disable integration with the fortigslb cloud service. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.3 -> latest
- admin_https_ssl_versions (Alias name: admin-https-ssl-versions) Allowed tls versions for web administration. type: list choices: [tlsv1-0, tlsv1-1, tlsv1-2, sslv3, tlsv1-3]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- cert_chain_max (Alias name: cert-chain-max) Maximum number of certificates that can be traversed in a certificate chain. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- qsfp28_40g_port (Alias name: qsfp28-40g-port) Set port(s) to 40gbps type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- strong_crypto (Alias name: strong-crypto) Enable to use strong encryption and only allow strong ciphers and digest for https/ssh/tls/ssl functions. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- multi_factor_authentication (Alias name: multi-factor-authentication) Enforce all login methods to require an additional authentication factor (default = optional). type: str choices: [optional, mandatory]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fds_statistics (Alias name: fds-statistics) Enable/disable sending ips, application control, and antivirus data to fortiguard. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_display_hostname (Alias name: gui-display-hostname) Enable/disable displaying the fortigates hostname on the gui login page. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- two_factor_ftk_expiry (Alias name: two-factor-ftk-expiry) Fortitoken authentication session timeout (60 - 600 sec (10 minutes), default = 60). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wad_source_affinity (Alias name: wad-source-affinity) Enable/disable dispatching traffic to wad workers based on source affinity. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssl_static_key_ciphers (Alias name: ssl-static-key-ciphers) Enable/disable static key ciphers in ssl/tls connections (e. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- daily_restart (Alias name: daily-restart) Enable/disable daily restart of fortigate unit. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- snat_route_change (Alias name: snat-route-change) Enable/disable the ability to change the source nat route. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- tcp_rst_timer (Alias name: tcp-rst-timer) Length of the tcp close state in seconds (5 - 300 sec, default = 5). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- anti_replay (Alias name: anti-replay) Level of checking for packet replay and tcp sequence checking. type: str choices: [disable, loose, strict]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssl_min_proto_version (Alias name: ssl-min-proto-version) Minimum supported protocol version for ssl/tls connections (default = tlsv1. type: str choices: [TLSv1, TLSv1-1, TLSv1-2, SSLv3, TLSv1-3]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- speedtestd_server_port (Alias name: speedtestd-server-port) Speedtest server port number. type: int
more...
Supported Version Ranges: v7.4.3 -> latest
- cpu_use_threshold (Alias name: cpu-use-threshold) Threshold at which cpu usage is reported (% of total cpu, default = 90). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_host (Alias name: admin-host) Administrative host for http and https. type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- csr_ca_attribute (Alias name: csr-ca-attribute) Enable/disable the ca attribute in certificates. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortiservice_port (Alias name: fortiservice-port) Fortiservice port (1 - 65535, default = 8013). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssd_trim_hour (Alias name: ssd-trim-hour) Hour of the day on which to run ssd trim (0 - 23, default = 1). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- purdue_level (Alias name: purdue-level) Purdue level of this fortigate. type: str choices: [1, 2, 3, 4, 5, 1.5, 2.5, 3.5, 5.5]
more...
Supported Version Ranges: v7.4.3 -> latest
- management_vdom (Alias name: management-vdom) Management virtual domain name. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- quic_ack_thresold (Alias name: quic-ack-thresold) Maximum number of unacknowledged packets before sending ack (2 - 5, default = 3). type: int
more...
Supported Version Ranges: v7.4.3 -> latest
- qsfpdd_100g_port (Alias name: qsfpdd-100g-port) Split qsfpddd port(s) as 100g ports type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ips_affinity (Alias name: ips-affinity) Affinity setting for ips (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx; allowed cpus must be less than total number of ips engine daemons). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- vip_arp_range (Alias name: vip-arp-range) Controls the number of arps that the fortigate sends for a virtual ip (vip) address range. type: str choices: [restricted, unlimited]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- internet_service_database (Alias name: internet-service-database) Configure which internet service database size to download from fortiguard and use. type: str choices: [mini, standard, full, on-demand]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- revision_image_auto_backup (Alias name: revision-image-auto-backup) Enable/disable back-up of the latest image revision after the firmware is upgraded. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- sflowd_max_children_num (Alias name: sflowd-max-children-num) Maximum number of sflowd child processes allowed to run. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_https_pki_required (Alias name: admin-https-pki-required) Enable/disable admin login method. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- special_file_23_support (Alias name: special-file-23-support) Enable/disable detection of those special format files when using data loss prevention. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- npu_neighbor_update (Alias name: npu-neighbor-update) Enable/disable sending of arp/icmp6 probing packets to update neighbors for offloaded sessions. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- log_single_cpu_high (Alias name: log-single-cpu-high) Enable/disable logging the event of a single cpu core reaching cpu usage threshold. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- management_ip (Alias name: management-ip) Management ip address of this fortigate. type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- proxy_resource_mode (Alias name: proxy-resource-mode) Enable/disable use of the maximum memory usage on the fortigate units proxy processing of resources, such as block lists, allow lists, and external resources. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_ble_button (Alias name: admin-ble-button) Press the ble button can enable ble function type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_firmware_upgrade_warning (Alias name: gui-firmware-upgrade-warning) Enable/disable the firmware upgrade warning on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- dp_tcp_normal_timer (Alias name: dp-tcp-normal-timer) Dp tcp normal timeout (1 - 65535 sec, default = 3605). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipv6_allow_traffic_redirect (Alias name: ipv6-allow-traffic-redirect) Disable to prevent ipv6 traffic with same local ingress and egress interface from being forwarded without policy check. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- cli_audit_log (Alias name: cli-audit-log) Enable/disable cli audit log. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- memory_use_threshold_extreme (Alias name: memory-use-threshold-extreme) Threshold at which memory usage is considered extreme (new sessions are dropped) (% of total ram, default = 95). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ha_affinity (Alias name: ha-affinity) Affinity setting for ha daemons (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- restart_time (Alias name: restart-time) Daily restart time (hh:mm). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- speedtestd_ctrl_port (Alias name: speedtestd-ctrl-port) Speedtest server controller port number. type: int
more...
Supported Version Ranges: v7.4.3 -> latest
- gui_wireless_opensecurity (Alias name: gui-wireless-opensecurity) Enable/disable wireless open security option on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- memory_use_threshold_red (Alias name: memory-use-threshold-red) Threshold at which memory usage forces the fortigate to enter conserve mode (% of total ram, default = 88). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- dp_fragment_timer (Alias name: dp-fragment-timer) Dp fragment session timeout (1 - 65535 sec, default = 120). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wad_restart_start_time (Alias name: wad-restart-start-time) Wad workers daily restart time (hh:mm). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- proxy_re_authentication_time (Alias name: proxy-re-authentication-time) The time limit that users must re-authenticate if proxy-keep-alive-mode is set to re-authenticate (1 - 86400 sec, default=30s. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_app_detection_sdwan (Alias name: gui-app-detection-sdwan) Enable/disable allow app-detection based sd-wan. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- scanunit_count (Alias name: scanunit-count) Number of scanunits. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- tftp Enable/disable tftp. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- xstools_update_frequency (Alias name: xstools-update-frequency) Xenserver tools daemon update frequency (30 - 300 sec, default = 60). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- clt_cert_req (Alias name: clt-cert-req) Enable/disable requiring administrators to have a client certificate to log into the gui using https. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortiextender_vlan_mode (Alias name: fortiextender-vlan-mode) Enable/disable fortiextender vlan mode. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- auth_http_port (Alias name: auth-http-port) User authentication http port. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- per_user_bal (Alias name: per-user-bal) Enable/disable per-user block/allow list filter. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_date_format (Alias name: gui-date-format) Default date format used throughout gui. type: str choices: [yyyy/MM/dd, dd/MM/yyyy, MM/dd/yyyy, yyyy-MM-dd, dd-MM-yyyy, MM-dd-yyyy]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- log_uuid_address (Alias name: log-uuid-address) Enable/disable insertion of address uuids to traffic logs. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- cloud_communication (Alias name: cloud-communication) Enable/disable all cloud communication. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- lldp_reception (Alias name: lldp-reception) Enable/disable link layer discovery protocol (lldp) reception. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- two_factor_ftm_expiry (Alias name: two-factor-ftm-expiry) Fortitoken mobile session timeout (1 - 168 hours (7 days), default = 72). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- quic_udp_payload_size_shaping_per_cid (Alias name: quic-udp-payload-size-shaping-per-cid) Enable/disable udp payload size shaping per connection id (default = enable). type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.3 -> latest
- autorun_log_fsck (Alias name: autorun-log-fsck) Enable/disable automatic log partition check after ungraceful shutdown. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- vpn_ems_sn_check (Alias name: vpn-ems-sn-check) Enable/disable verification of ems serial number in ssl-vpn connection. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.3 -> latest
- admin_ssh_password (Alias name: admin-ssh-password) Enable/disable password authentication for ssh admin access. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- airplane_mode (Alias name: airplane-mode) Enable/disable airplane mode. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.3 -> latest
- batch_cmdb (Alias name: batch-cmdb) Enable/disable batch mode, allowing you to enter a series of cli commands that will execute as a group once they are loaded. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ip_src_port_range (Alias name: ip-src-port-range) Ip source port range used for traffic originating from the fortigate unit. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- strict_dirty_session_check (Alias name: strict-dirty-session-check) Enable to check the session against the original policy when revalidating. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- user_device_store_max_devices (Alias name: user-device-store-max-devices) Maximum number of devices allowed in user device store. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- dp_udp_idle_timer (Alias name: dp-udp-idle-timer) Dp udp idle timer (0 - 86400 sec, default = 0). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- internal_switch_speed (Alias name: internal-switch-speed) Internal port speed. type: list choices: [auto, 10full, 10half, 100full, 100half, 1000full, 1000auto]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- forticonverter_config_upload (Alias name: forticonverter-config-upload) Enable/disable config upload to forticonverter. type: str choices: [disable, once]
more...
Supported Version Ranges: v7.4.3 -> latest
- ipsec_round_robin (Alias name: ipsec-round-robin) Enable/disable round-robin redistribution to multiple cpus for ipsec vpn traffic. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wad_affinity (Alias name: wad-affinity) Affinity setting for wad (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wifi_ca_certificate (Alias name: wifi-ca-certificate) Ca certificate that verifies the wifi certificate. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wimax_4g_usb (Alias name: wimax-4g-usb) Enable/disable comparability with wimax 4g usb devices. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- miglog_affinity (Alias name: miglog-affinity) Affinity setting for logging (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- faz_disk_buffer_size (Alias name: faz-disk-buffer-size) Maximum disk buffer size to temporarily store logs destined for fortianalyzer. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssh_kex_algo (Alias name: ssh-kex-algo) Select one or more ssh kex algorithms. type: list choices: [diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, diffie-hellman-group-exchange-sha1, diffie-hellman-group-exchange-sha256, curve25519-sha256@libssh.org, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, diffie-hellman-group18-sha512]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- auto_auth_extension_device (Alias name: auto-auth-extension-device) Enable/disable automatic authorization of dedicated fortinet extension devices. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- forticarrier_bypass (Alias name: forticarrier-bypass) Forticarrier bypass. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- reset_sessionless_tcp (Alias name: reset-sessionless-tcp) Action to perform if the fortigate receives a tcp packet but cannot find a corresponding session in its session table. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- early_tcp_npu_session (Alias name: early-tcp-npu-session) Enable/disable early tcp npu session. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- http_unauthenticated_request_limit (Alias name: http-unauthenticated-request-limit) Http request body size limit before authentication. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_local_out (Alias name: gui-local-out) Enable/disable local-out traffic on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- tcp_option (Alias name: tcp-option) Enable sack, timestamp and mss tcp options. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- proxy_auth_timeout (Alias name: proxy-auth-timeout) Authentication timeout in minutes for authenticated users (1 - 300 min, default = 10). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortiextender_discovery_lockdown (Alias name: fortiextender-discovery-lockdown) Enable/disable fortiextender capwap lockdown. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- lldp_transmission (Alias name: lldp-transmission) Enable/disable link layer discovery protocol (lldp) transmission. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- split_port (Alias name: split-port) Split port(s) to multiple 10gbps ports. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_certificates (Alias name: gui-certificates) Enable/disable the system > certificate gui page, allowing you to add and configure certificates from the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- cfg_save (Alias name: cfg-save) Configuration file save mode for cli changes. type: str choices: [automatic, manual, revert]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- auth_keepalive (Alias name: auth-keepalive) Enable to prevent user authentication sessions from timing out when idle. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- split_port_mode (Alias name: split-port-mode) Split port mode. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- interface Split port interface. type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- split_mode (Alias name: split-mode) The configuration mode for the split port interface. type: str choices: [disable, 4x10G, 4x25G, 4x50G, 8x50G, 4x100G, 2x200G, 8x25G]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_forticloud_sso_login (Alias name: admin-forticloud-sso-login) Enable/disable forticloud admin login via sso. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- post_login_banner (Alias name: post-login-banner) Enable/disable displaying the administrator access disclaimer message after an administrator successfully logs in. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- br_fdb_max_entry (Alias name: br-fdb-max-entry) Maximum number of bridge forwarding database (fdb) entries. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ip_fragment_mem_thresholds (Alias name: ip-fragment-mem-thresholds) Maximum memory (mb) used to reassemble ipv4/ipv6 fragments. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortiextender_provision_on_authorization (Alias name: fortiextender-provision-on-authorization) Enable/disable automatic provisioning of latest fortiextender firmware on authorization. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- reboot_upon_config_restore (Alias name: reboot-upon-config-restore) Enable/disable reboot of system upon restoring configuration. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- syslog_affinity (Alias name: syslog-affinity) Affinity setting for syslog (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortiextender_data_port (Alias name: fortiextender-data-port) Fortiextender data port (1024 - 49150, default = 25246). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- quic_tls_handshake_timeout (Alias name: quic-tls-handshake-timeout) Time-to-live (ttl) for tls handshake in seconds (1 - 60, default = 5). type: int
more...
Supported Version Ranges: v7.4.3 -> latest
- forticonverter_integration (Alias name: forticonverter-integration) Enable/disable forticonverter integration service. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.3 -> latest
- proxy_keep_alive_mode (Alias name: proxy-keep-alive-mode) Control if users must re-authenticate after a session is closed, traffic has been idle, or from the point at which the user was authenticated. type: str choices: [session, traffic, re-authentication]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- cmdbsvr_affinity (Alias name: cmdbsvr-affinity) Affinity setting for cmdbsvr (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wad_memory_change_granularity (Alias name: wad-memory-change-granularity) Minimum percentage change in system memory usage detected by the wad daemon prior to adjusting tcp window size for any active connection. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- dhcp_lease_backup_interval (Alias name: dhcp-lease-backup-interval) Dhcp leases backup interval in seconds (10 - 3600, default = 60). type: int
more...
Supported Version Ranges: v7.4.3 -> latest
- check_protocol_header (Alias name: check-protocol-header) Level of checking performed on protocol headers. type: str choices: [loose, strict]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- av_failopen_session (Alias name: av-failopen-session) When enabled and a proxy for a protocol runs out of room in its session table, that protocol goes into failopen mode and enacts the action specified by av-failopen. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipsec_ha_seqjump_rate (Alias name: ipsec-ha-seqjump-rate) Esp jump ahead rate (1g - 10g pps equivalent). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_hsts_max_age (Alias name: admin-hsts-max-age) Https strict-transport-security header max-age in seconds. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- igmp_state_limit (Alias name: igmp-state-limit) Maximum number of igmp memberships (96 - 64000, default = 3200). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_login_max (Alias name: admin-login-max) Maximum number of administrators who can be logged in at the same time (1 - 100, default = 100). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipv6_allow_multicast_probe (Alias name: ipv6-allow-multicast-probe) Enable/disable ipv6 address probe through multicast. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- virtual_switch_vlan (Alias name: virtual-switch-vlan) Enable/disable virtual switch vlan. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_lockout_threshold (Alias name: admin-lockout-threshold) Number of failed login attempts before an administrator account is locked out for the admin-lockout-duration. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- dp_pinhole_timer (Alias name: dp-pinhole-timer) Dp pinhole session timeout (30 - 120 sec, default = 120). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wireless_controller (Alias name: wireless-controller) Enable/disable the wireless controller feature to use the fortigate unit to manage fortiaps. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- bfd_affinity (Alias name: bfd-affinity) Affinity setting for bfd daemon (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). type: str
more...
Supported Version Ranges: v7.4.3 -> latest
- ssd_trim_freq (Alias name: ssd-trim-freq) How often to run ssd trim (default = weekly). type: str choices: [daily, weekly, monthly, hourly, never]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- two_factor_sms_expiry (Alias name: two-factor-sms-expiry) Sms-based two-factor authentication session timeout (30 - 300 sec, default = 60). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- traffic_priority (Alias name: traffic-priority) Choose type of service (tos) or differentiated services code point (dscp) for traffic prioritization in traffic shaping. type: str choices: [tos, dscp]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- proxy_and_explicit_proxy (Alias name: proxy-and-explicit-proxy) Proxy and explicit proxy. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.3 -> latest
- sslvpn_web_mode (Alias name: sslvpn-web-mode) Enable/disable ssl-vpn web mode. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.3 -> latest
- ssh_hostkey_password (Alias name: ssh-hostkey-password) Password for ssh-hostkey. type: list
more...
Supported Version Ranges: v7.4.3 -> latest
- wad_csvc_db_count (Alias name: wad-csvc-db-count) Number of concurrent wad-cache-service byte-cache processes. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipv6_allow_anycast_probe (Alias name: ipv6-allow-anycast-probe) Enable/disable ipv6 address probe through anycast. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- honor_df (Alias name: honor-df) Enable/disable honoring of dont-fragment (df) flag. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- hyper_scale_vdom_num (Alias name: hyper-scale-vdom-num) Number of vdoms for hyper scale license. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wad_csvc_cs_count (Alias name: wad-csvc-cs-count) Number of concurrent wad-cache-service object-cache processes. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- internal_switch_mode (Alias name: internal-switch-mode) Internal switch mode. type: str choices: [switch, interface, hub]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- cfg_revert_timeout (Alias name: cfg-revert-timeout) Time-out for reverting to the last saved configuration. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_concurrent (Alias name: admin-concurrent) Enable/disable concurrent administrator logins. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipv6_allow_local_in_silent_drop (Alias name: ipv6-allow-local-in-silent-drop) Enable/disable silent drop of ipv6 local-in traffic. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- tcp_halfopen_timer (Alias name: tcp-halfopen-timer) Number of seconds the fortigate unit should wait to close a session after one peer has sent an open session packet but the other has not responded (1 - 86400 sec (1 day), default = 10). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- dp_rsync_timer (Alias name: dp-rsync-timer) Dp rsync session timeout (1 - 65535 sec, default = 300). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- management_port_use_admin_sport (Alias name: management-port-use-admin-sport) Enable/disable use of the admin-sport setting for the management port. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_forticare_registration_setup_warning (Alias name: gui-forticare-registration-setup-warning) Enable/disable the forticare registration setup warning on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_replacement_message_groups (Alias name: gui-replacement-message-groups) Enable/disable replacement message groups on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- security_rating_run_on_schedule (Alias name: security-rating-run-on-schedule) Enable/disable scheduled runs of security rating. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_lockout_duration (Alias name: admin-lockout-duration) Amount of time in seconds that an administrator account is locked out after reaching the admin-lockout-threshold for repeated failed login attempts. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- optimize_flow_mode (Alias name: optimize-flow-mode) Flow mode optimization option. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- private_data_encryption (Alias name: private-data-encryption) Enable/disable private data encryption using an aes 128-bit key or passpharse. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wireless_mode (Alias name: wireless-mode) Wireless mode setting. type: str choices: [ac, client, wtp, fwfap]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- alias Alias for your fortigate unit. type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssh_hostkey_algo (Alias name: ssh-hostkey-algo) Select one or more ssh hostkey algorithms. type: list choices: [ssh-rsa, ecdsa-sha2-nistp521, rsa-sha2-256, rsa-sha2-512, ssh-ed25519, ecdsa-sha2-nistp384, ecdsa-sha2-nistp256]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortitoken_cloud (Alias name: fortitoken-cloud) Enable/disable fortitoken cloud service. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- av_affinity (Alias name: av-affinity) Affinity setting for av scanning (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- proxy_worker_count (Alias name: proxy-worker-count) Proxy worker count. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipsec_asic_offload (Alias name: ipsec-asic-offload) Enable/disable asic offloading (hardware acceleration) for ipsec vpn traffic. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- miglogd_children (Alias name: miglogd-children) Number of logging (miglogd) processes to be allowed to run. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- sslvpn_max_worker_count (Alias name: sslvpn-max-worker-count) Maximum number of ssl-vpn processes. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssh_mac_algo (Alias name: ssh-mac-algo) Select one or more ssh mac algorithms. type: list choices: [hmac-md5, hmac-md5-etm@openssh.com, hmac-md5-96, hmac-md5-96-etm@openssh.com, hmac-sha1, hmac-sha1-etm@openssh.com, hmac-sha2-256, hmac-sha2-256-etm@openssh.com, hmac-sha2-512, hmac-sha2-512-etm@openssh.com, hmac-ripemd160, hmac-ripemd160@openssh.com, hmac-ripemd160-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, umac-64-etm@openssh.com, umac-128-etm@openssh.com]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- url_filter_count (Alias name: url-filter-count) Url filter daemon count. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wifi_certificate (Alias name: wifi-certificate) Certificate to use for wifi authentication. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- radius_port (Alias name: radius-port) Radius service port number. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- sys_perf_log_interval (Alias name: sys-perf-log-interval) Time in minutes between updates of performance statistics logging. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_fortigate_cloud_sandbox (Alias name: gui-fortigate-cloud-sandbox) Enable/disable displaying fortigate cloud sandbox on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- auth_cert (Alias name: auth-cert) Server certificate that the fortigate uses for https firewall authentication connections. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortiextender Enable/disable fortiextender. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_reset_button (Alias name: admin-reset-button) Press the reset button can reset to factory default. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- av_failopen (Alias name: av-failopen) Set the action to take if the fortigate is running low on memory or the proxy connection limit has been reached. type: str choices: [off, pass, one-shot, idledrop]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- user_device_store_max_users (Alias name: user-device-store-max-users) Maximum number of users allowed in user device store. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- auth_session_limit (Alias name: auth-session-limit) Action to take when the number of allowed user authenticated sessions is reached. type: str choices: [block-new, logout-inactive]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipv6_allow_local_in_slient_drop (Alias name: ipv6-allow-local-in-slient-drop) Enable/disable silent drop of ipv6 local-in traffic. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- quic_congestion_control_algo (Alias name: quic-congestion-control-algo) Quic congestion control algorithm (default = cubic). type: str choices: [cubic, bbr, bbr2, reno]
more...
Supported Version Ranges: v7.4.3 -> latest
- auth_ike_saml_port (Alias name: auth-ike-saml-port) User ike saml authentication port (0 - 65535, default = 1001). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wad_restart_end_time (Alias name: wad-restart-end-time) Wad workers daily restart end time (hh:mm). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- http_request_limit (Alias name: http-request-limit) Http request body size limit. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- irq_time_accounting (Alias name: irq-time-accounting) Configure cpu irq time accounting mode. type: str choices: [auto, force]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- remoteauthtimeout Number of seconds that the fortigate waits for responses from remote radius, ldap, or tacacs+ authentication servers. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_https_ssl_banned_ciphers (Alias name: admin-https-ssl-banned-ciphers) Select one or more cipher technologies that cannot be used in gui https negotiations. type: list choices: [RSA, DHE, ECDHE, DSS, ECDSA, AES, AESGCM, CAMELLIA, 3DES, SHA1, SHA256, SHA384, STATIC, CHACHA20, ARIA, AESCCM]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- allow_traffic_redirect (Alias name: allow-traffic-redirect) Disable to prevent traffic with same local ingress and egress interface from being forwarded without policy check. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- legacy_poe_device_support (Alias name: legacy-poe-device-support) Enable/disable legacy poe device support. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- wad_restart_mode (Alias name: wad-restart-mode) Wad worker restart mode (default = none). type: str choices: [none, time, memory]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fds_statistics_period (Alias name: fds-statistics-period) Fortiguard statistics collection period in minutes. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_telnet (Alias name: admin-telnet) Enable/disable telnet service. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipv6_accept_dad (Alias name: ipv6-accept-dad) Enable/disable acceptance of ipv6 duplicate address detection (dad). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- tcp_timewait_timer (Alias name: tcp-timewait-timer) Length of the tcp time-wait state in seconds (1 - 300 sec, default = 1). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_console_timeout (Alias name: admin-console-timeout) Console login timeout that overrides the admin timeout value (15 - 300 seconds, default = 0, which disables the timeout). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- default_service_source_port (Alias name: default-service-source-port) Default service source port range (default = 1 - 65535). type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- quic_max_datagram_size (Alias name: quic-max-datagram-size) Maximum transmit datagram size (1200 - 1500, default = 1500). type: int
more...
Supported Version Ranges: v7.4.3 -> latest
- refresh Statistics refresh interval second(s) in gui. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- extender_controller_reserved_network (Alias name: extender-controller-reserved-network) Configure reserved network subnet for managed lan extension fortiextender units. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- url_filter_affinity (Alias name: url-filter-affinity) Url filter cpu affinity. type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- policy_auth_concurrent (Alias name: policy-auth-concurrent) Number of concurrent firewall use logins from the same user (1 - 100, default = 0 means no limit). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipsec_hmac_offload (Alias name: ipsec-hmac-offload) Enable/disable offloading (hardware acceleration) of hmac processing for ipsec vpn. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- traffic_priority_level (Alias name: traffic-priority-level) Default system-wide level of priority for traffic prioritization. type: str choices: [high, medium, low]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipsec_qat_offload (Alias name: ipsec-qat-offload) Enable/disable qat offloading (intel quickassist) for ipsec vpn traffic. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssd_trim_min (Alias name: ssd-trim-min) Minute of the hour on which to run ssd trim (0 - 59, 60 for random). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_date_time_source (Alias name: gui-date-time-source) Source from which the fortigate gui uses to display date and time entries. type: str choices: [system, browser]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- log_ssl_connection (Alias name: log-ssl-connection) Enable/disable logging of ssl connection events. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ndp_max_entry (Alias name: ndp-max-entry) Maximum number of ndp table entries (set to 65,536 or higher; if set to 0, kernel holds 65,536 entries). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- vdom_mode (Alias name: vdom-mode) Enable/disable support for multiple virtual domains (vdoms). type: str choices: [no-vdom, multi-vdom, split-vdom]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- internet_service_download_list (Alias name: internet-service-download-list) Configure which on-demand internet service ids are to be downloaded. type: list
more...
Supported Version Ranges: v7.4.3 -> latest
- fortitoken_cloud_sync_interval (Alias name: fortitoken-cloud-sync-interval) Interval in which to clean up remote users in fortitoken cloud (0 - 336 hours (14 days), default = 24, disable = 0). type: int
more...
Supported Version Ranges: v7.4.3 -> latest
- ssd_trim_weekday (Alias name: ssd-trim-weekday) Day of week to run ssd trim. type: str choices: [sunday, monday, tuesday, wednesday, thursday, friday, saturday]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- two_factor_fac_expiry (Alias name: two-factor-fac-expiry) Fortiauthenticator token authentication session timeout (10 - 3600 seconds (1 hour), default = 60). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_rest_api_cache (Alias name: gui-rest-api-cache) Enable/disable rest api result caching on fortigate. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_forticloud_sso_default_profile (Alias name: admin-forticloud-sso-default-profile) Override access profile. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- proxy_auth_lifetime (Alias name: proxy-auth-lifetime) Enable/disable authenticated users lifetime control. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- device_idle_timeout (Alias name: device-idle-timeout) Time in seconds that a device must be idle to automatically log the device user out. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- login_timestamp (Alias name: login-timestamp) Enable/disable login time recording. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- speedtest_server (Alias name: speedtest-server) Enable/disable speed test server. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- edit_vdom_prompt (Alias name: edit-vdom-prompt) Enable/disable edit new vdom prompt. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_cdn_domain_override (Alias name: gui-cdn-domain-override) Domain of cdn server. type: str
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_ssh_grace_time (Alias name: admin-ssh-grace-time) Maximum time in seconds permitted between making an ssh connection to the fortigate unit and authenticating (10 - 3600 sec (1 hour), default 120). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- sslvpn_ems_sn_check (Alias name: sslvpn-ems-sn-check) Enable/disable verification of ems serial number in ssl-vpn connection. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- user_server_cert (Alias name: user-server-cert) Certificate to use for https user authentication. type: list
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_allow_default_hostname (Alias name: gui-allow-default-hostname) Enable/disable the factory default hostname warning on the gui setup wizard. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- proxy_re_authentication_mode (Alias name: proxy-re-authentication-mode) Control if users must re-authenticate after a session is closed, traffic has been idle, or from the point at which the user was first created. type: str choices: [session, traffic, absolute]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ipsec_soft_dec_async (Alias name: ipsec-soft-dec-async) Enable/disable software decryption asynchronization (using multiple cpus to do decryption) for ipsec vpn traffic. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- admin_maintainer (Alias name: admin-maintainer) Enable/disable maintainer administrator login. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- dst Enable/disable daylight saving time. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fec_port (Alias name: fec-port) Local udp port for forward error correction (49152 - 65535). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssh_kex_sha1 (Alias name: ssh-kex-sha1) Enable/disable sha1 key exchange for ssh access. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssh_mac_weak (Alias name: ssh-mac-weak) Enable/disable hmac-sha1 and umac-64-etm for ssh access. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- sslvpn_cipher_hardware_acceleration (Alias name: sslvpn-cipher-hardware-acceleration) Enable/disable ssl-vpn hardware acceleration. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- sys_file_check_interval (Alias name: sys-file-check-interval) Set scheduled system file checking interval in minutes (10 - 10080 min, default = 60, 0 = disabled). type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssh_hmac_md5 (Alias name: ssh-hmac-md5) Enable/disable hmac-md5 for ssh access. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- ssh_cbc_cipher (Alias name: ssh-cbc-cipher) Enable/disable cbc cipher for ssh access. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_fortiguard_resource_fetch (Alias name: gui-fortiguard-resource-fetch) Enable/disable retrieving static gui resources from fortiguard. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- sslvpn_kxp_hardware_acceleration (Alias name: sslvpn-kxp-hardware-acceleration) Enable/disable ssl-vpn kxp hardware acceleration. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- sslvpn_plugin_version_check (Alias name: sslvpn-plugin-version-check) Enable/disable checking browsers plugin version by ssl-vpn. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortiipam_integration (Alias name: fortiipam-integration) Enable/disable integration with the fortiipam cloud service. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_firmware_upgrade_setup_warning (Alias name: gui-firmware-upgrade-setup-warning) Gui firmware upgrade setup warning. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- log_uuid_policy (Alias name: log-uuid-policy) Enable/disable insertion of policy uuids to traffic logs. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- per_user_bwl (Alias name: per-user-bwl) Enable/disable per-user black/white list filter. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- gui_fortisandbox_cloud (Alias name: gui-fortisandbox-cloud) Enable/disable displaying fortisandbox cloud on the gui. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> latest
- fortitoken_cloud_service (Alias name: fortitoken-cloud-service) Fortitoken cloud service. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> v7.6.2
- hw_switch_ether_filter (Alias name: hw-switch-ether-filter) Enable/disable hardware filter for certain ethernet packet types. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> v7.6.2
- virtual_server_count (Alias name: virtual-server-count) Maximum number of virtual server processes to create. type: int
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> v7.6.2
- endpoint_control_fds_access (Alias name: endpoint-control-fds-access) Endpoint control fds access. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> v7.6.2
- proxy_cipher_hardware_acceleration (Alias name: proxy-cipher-hardware-acceleration) Enable/disable using content processor (cp8 or cp9) hardware acceleration to encrypt and decrypt ipsec and ssl traffic. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> v7.6.2
- proxy_kxp_hardware_acceleration (Alias name: proxy-kxp-hardware-acceleration) Enable/disable using the content processor to accelerate kxp traffic. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> v7.6.2
- virtual_server_hardware_acceleration (Alias name: virtual-server-hardware-acceleration) Enable/disable virtual server hardware acceleration. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.6 -> v7.2.12, v7.4.3 -> v7.6.2
- user_history_password_threshold (Alias name: user-history-password-threshold) Maximum number of previous passwords saved per admin/user (3 - 15, default = 3). type: int
more...
Supported Version Ranges: v7.6.0 -> latest
- delay_tcp_npu_session (Alias name: delay-tcp-npu-session) Enable tcp npu session delay to guarantee packet order of 3-way handshake. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.4 -> latest
- auth_session_auto_backup_interval (Alias name: auth-session-auto-backup-interval) Configure automatic authentication session backup interval in minutes (default = 15). type: str choices: [1min, 5min, 15min, 30min, 1hr]
more...
Supported Version Ranges: v7.6.0 -> latest
- ip_conflict_detection (Alias name: ip-conflict-detection) Enable/disable logging of ipv4 address conflict detection. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.7 -> latest
- gtpu_dynamic_source_port (Alias name: gtpu-dynamic-source-port) Enable/disable gtp-u dynamic source port support. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.6 -> latest
- ip_fragment_timeout (Alias name: ip-fragment-timeout) Timeout value in seconds for any fragment not being reassembled type: int
more...
Supported Version Ranges: v7.6.0 -> latest
- ipv6_fragment_timeout (Alias name: ipv6-fragment-timeout) Timeout value in seconds for any ipv6 fragment not being reassembled type: int
more...
Supported Version Ranges: v7.6.0 -> latest
- scim_server_cert (Alias name: scim-server-cert) Server certificate that the fortigate uses for scim connections. type: list
more...
Supported Version Ranges: v7.6.0 -> latest
- scim_http_port (Alias name: scim-http-port) Scim http port (0 - 65535, default = 44558). type: int
more...
Supported Version Ranges: v7.6.0 -> latest
- auth_session_auto_backup (Alias name: auth-session-auto-backup) Enable/disable automatic and periodic backup of authentication sessions (default = disable). type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.6.0 -> latest
- scim_https_port (Alias name: scim-https-port) Scim port (0 - 65535, default = 44559). type: int
more...
Supported Version Ranges: v7.6.0 -> latest
- httpd_max_worker_count (Alias name: httpd-max-worker-count) Maximum number of simultaneous http requests that will be served. type: int
more...
Supported Version Ranges: v7.6.0 -> latest
- rest_api_key_url_query (Alias name: rest-api-key-url-query) Enable/disable support for passing rest api keys through url query parameters. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.4 -> v7.4.10, v7.6.2 -> latest
- single_vdom_npuvlink (Alias name: single-vdom-npuvlink) Enable/disable npu vdoms links for single vdom. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.6.2 -> latest
- slbc_fragment_mem_thresholds (Alias name: slbc-fragment-mem-thresholds) Maximum memory (mb) used to reassemble slbc ipv4/ipv6 fragments. type: int
more...
Supported Version Ranges: v7.6.2 -> latest
- upgrade_report (Alias name: upgrade-report) Enable/disable the generation of an upgrade report when upgrading the firmware. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.6.2 -> latest
- application_bandwidth_tracking (Alias name: application-bandwidth-tracking) Enable/disable application bandwidth tracking. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.6.2 -> latest
- fortitoken_cloud_region (Alias name: fortitoken-cloud-region) Region domain of fortitoken cloud(unset to non-region). type: str
more...
Supported Version Ranges: v7.4.7 -> v7.4.10, v7.6.4 -> latest
- black_box_interval (Alias name: black-box-interval) Black box recording interval (seconds). type: int
more...
Supported Version Ranges: v7.2.10 -> v7.2.12, v7.4.7 -> v7.4.10, v7.6.3 -> latest
- black_box (Alias name: black-box) Enable/disable the black box. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.2.10 -> v7.2.12, v7.4.7 -> v7.4.10, v7.6.3 -> latest
- tls_session_cache (Alias name: tls-session-cache) Enable/disable tls session cache. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.6.3 -> latest
- wad_p2s_max_body_size (Alias name: wad-p2s-max-body-size) Maximum size of the body of the local out http request (1 - 32 mbytes, default = 4). type: int
more...
Supported Version Ranges: v7.6.3 -> latest
- telemetry_controller (Alias name: telemetry-controller) Enable/disable fortitelemetry controller to manage fortitelemetry agents. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.6.3 -> latest
- telemetry_data_port (Alias name: telemetry-data-port) Fortitelemetry data channel port (1024 - 49150, default = 35246). type: int
more...
Supported Version Ranges: v7.6.3 -> latest
- user_device_store_max_device_mem (Alias name: user-device-store-max-device-mem) Maximum percentage of total system memory allowed to be used for devices in the user device store. type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.3 -> latest
- sslvpn_affinity (Alias name: sslvpn-affinity) Agentless vpn cpu affinity. type: str
more...
Supported Version Ranges: v7.6.3 -> latest
- admin_timeout (Alias name: admin-timeout) Number of minutes before an idle administrator session times out (5 - 480 minutes (8 hours), default = 5). type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- username_case_sensitivity (Alias name: username-case-sensitivity) Username case sensitivity. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- proxy_auth_machine_timeout (Alias name: proxy-auth-machine-timeout) Proxy auth machine timeout. type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- fin_wait_timeout (Alias name: fin-wait-timeout) Default fin-wait timeout (seconds). type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- udp_stream_timeout (Alias name: udp-stream-timeout) Default last-ack timeout (seconds). type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- license_overlimit (Alias name: license-overlimit) System behaviour when max licensed proxy user is reached. type: str choices: [block, bypass]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- tcp_random_source_port (Alias name: tcp-random-source-port) Tcp random source port. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- close_wait_timeout (Alias name: close-wait-timeout) Default close-wait timeout (seconds). type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- img_cache_mode (Alias name: img-cache-mode) Img cache mode. type: str choices: [stop, rolling]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- max_session_per_user (Alias name: max-session-per-user) Max utm sessions per user. type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- update_tls_finger_print (Alias name: update-tls-finger-print) Update tls finger print. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- kernel_panic_debug (Alias name: kernel-panic-debug) Kernel panic debug. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- syn_recv_timeout (Alias name: syn-recv-timeout) Default syn-recv timeout (seconds). type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- resigned_pkey_period (Alias name: resigned-pkey-period) Resigned pkey period. type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- kernel_panic_timeout (Alias name: kernel-panic-timeout) Kernel panic timeout. type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- v_tpm (Alias name: v-tpm) V tpm. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- time_wait_timeout (Alias name: time-wait-timeout) Default time-wait timeout (seconds). type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- established_timeout (Alias name: established-timeout) Default established session timeout (seconds). type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- syn_sent_timeout (Alias name: syn-sent-timeout) Default syn-sent timeout (seconds). type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- last_ack_timeout (Alias name: last-ack-timeout) Default last-ack timeout (seconds). type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- max_img_cache_size (Alias name: max-img-cache-size) Max img cache size. type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- http_view (Alias name: http-view) Enable/disable logging and viewing of http/s cache traffic. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- conntrack Max numbers of conntrack. type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- kernel_panic_on_warn (Alias name: kernel-panic-on-warn) Kernel panic on warn. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- crwl_log (Alias name: crwl-log) Enable/disable http transaction log of crawler. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- udp_timeout (Alias name: udp-timeout) Default last-ack timeout (seconds). type: int
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.4 -> latest
- geoip_full_db (Alias name: geoip-full-db) When enabled, the full geographic database will be loaded into the kernel which enables geographic information in traffic logs - required for fortiview countries. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10, v7.6.5 -> latest
- fortiguard_audit_result_submission (Alias name: fortiguard-audit-result-submission) Enable/disable the submission of security audit results to fortiguard. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10
- ldap_server_algorithm (Alias name: ldap-server-algorithm) Ldap server selection algorithm. type: str choices: [primary-secondary, round-robin]
more...
Supported Version Ranges: v7.4.8 -> v7.4.10
- router_affinity (Alias name: router-affinity) Affinity setting for bfd/vrrp/bgp/ospf daemons (hexadecimal value up to 256 bits in the format of xxxxxxxxxxxxxxxx). type: str
more...
Supported Version Ranges: v7.6.4 -> latest
- ipv6_snat_route_change (Alias name: ipv6-snat-route-change) Enable/disable the ability to change the ipv6 source nat route. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.6.4 -> latest
- web_svc_auto_restart_time_threshold (Alias name: web-svc-auto-restart-time-threshold) Uptime, in minutes, that the web-svc daemon should be running for in order to trigger an auto-restart. type: int
more...
Supported Version Ranges: v7.4.9 -> v7.4.10, v7.6.5 -> latest
- web_svc_auto_restart_mem_threshold (Alias name: web-svc-auto-restart-mem-threshold) Memory threshold, in mb, for the periodic auto-restarting of the web-svc daemon (0 = default based on system memory). type: int
more...
Supported Version Ranges: v7.4.9 -> v7.4.10, v7.6.5 -> latest
- web_svc_auto_restart (Alias name: web-svc-auto-restart) Enable/disable periodic restarting of the web-svc daemon. type: str choices: [disable, enable]
more...
Supported Version Ranges: v7.4.9 -> v7.4.10, v7.6.5 -> latest
- log_daemon_cpu_threshold (Alias name: log-daemon-cpu-threshold) Configure syslog daemon process spawning threshold. type: int
more...
Supported Version Ranges: v7.6.5 -> latest
- wad_worker_dev_cache (Alias name: wad-worker-dev-cache) Number of cached devices for each ztna proxy worker. type: int
more...
Supported Version Ranges: v7.6.5 -> latest
Notes
-----
.. note::
- Running in workspace locking mode is supported in this FortiManager module, the top level parameters workspace_locking_adom and workspace_locking_timeout help do the work.
- To create or update an object, use state: present directive.
- To delete an object, use state: absent directive
- Normally, running one module can fail when a non-zero rc is returned. you can also override the conditions to fail or succeed with parameters rc_failed and rc_succeeded
Examples
--------
.. code-block:: yaml+jinja
- name: Example playbook (generated based on argument schema)
hosts: fortimanagers
connection: httpapi
gather_facts: false
tasks:
- name: Configure global attributes.
fortinet.fortimanager.fmgr_devprof_system_global:
# workspace_locking_adom:
adom:
devprof:
devprof_system_global:
# admin_https_redirect:
# admin_port:
# admin_scp:
# admin_sport:
# admin_ssh_port:
# admin_ssh_v1:
# admin_telnet_port:
# admintimeout:
# gui_ipv6:
# gui_lines_per_page:
# gui_theme:
# language:
# switch_controller:
# gui_device_latitude:
# gui_device_longitude:
# hostname:
# timezone: ["00", "01", "02", "03", "04", "05", "06", "07", "08", "09", "10", "11",
# "12", "13", "14", "15", "16", "17", "18", "19", "20", "21", "22", "23",
# "24", "25", "26", "27", "28", "29", "30", "31", "32", "33", "34", "35",
# "36", "37", "38", "39", "40", "41", "42", "43", "44", "45", "46", "47",
# "48", "49", "50", "51", "52", "53", "54", "55", "56", "57", "58", "59",
# "60", "61", "62", "63", "64", "65", "66", "67", "68", "69", "70", "71",
# "72", "73", "74", "75", "76", "77", "78", "79", "80", "81", "82", "83",
# "84", "85", "86", "87"]
# check_reset_range:
# pmtu_discovery:
# gui_allow_incompatible_fabric_fgt:
# admin_restrict_local:
# gui_workflow_management:
# send_pmtu_icmp:
# tcp_halfclose_timer:
# admin_server_cert:
# dnsproxy_worker_count:
# show_backplane_intf:
# gui_custom_language:
# ldapconntimeout:
# auth_https_port:
# revision_backup_on_logout:
# arp_max_entry:
# long_vdom_name:
# pre_login_banner:
# qsfpdd_split8_port:
# max_route_cache_size:
# fortitoken_cloud_push_status:
# ssh_hostkey_override:
# proxy_hardware_acceleration:
# switch_controller_reserved_network:
# ssd_trim_date:
# wad_worker_count:
# ssh_hostkey:
# wireless_controller_port:
# fgd_alert_subscription: ["advisory", "latest-threat", "latest-virus", "latest-attack",
# "new-antivirus-db", "new-attack-db"]
# forticontroller_proxy_port:
# dh_params:
# memory_use_threshold_green:
# proxy_cert_use_mgmt_vdom:
# proxy_auth_lifetime_timeout:
# gui_auto_upgrade_setup_warning:
# gui_cdn_usage:
# two_factor_email_expiry:
# udp_idle_timer:
# interface_subnet_usage:
# forticontroller_proxy:
# ssh_enc_algo: ["chacha20-poly1305@openssh.com", "aes128-ctr", "aes192-ctr",
# "aes256-ctr", "arcfour256", "arcfour128", "aes128-cbc", "3des-cbc",
# "blowfish-cbc", "cast128-cbc", "aes192-cbc", "aes256-cbc", "arcfour",
# "rijndael-cbc@lysator.liu.se", "aes128-gcm@openssh.com",
# "aes256-gcm@openssh.com"]
# block_session_timer:
# quic_pmtud:
# admin_https_ssl_ciphersuites: ["TLS-AES-128-GCM-SHA256", "TLS-AES-256-GCM-SHA384",
# "TLS-CHACHA20-POLY1305-SHA256",
# "TLS-AES-128-CCM-SHA256", "TLS-AES-128-CCM-8-SHA256"]
# security_rating_result_submission:
# user_device_store_max_unified_mem:
# management_port:
# fortigslb_integration:
# admin_https_ssl_versions: ["tlsv1-0", "tlsv1-1", "tlsv1-2", "sslv3", "tlsv1-3"]
# cert_chain_max:
# qsfp28_40g_port:
# strong_crypto:
# multi_factor_authentication:
# fds_statistics:
# gui_display_hostname:
# two_factor_ftk_expiry:
# wad_source_affinity:
# ssl_static_key_ciphers:
# daily_restart:
# snat_route_change:
# tcp_rst_timer:
# anti_replay:
# ssl_min_proto_version:
# speedtestd_server_port:
# cpu_use_threshold:
# admin_host:
# csr_ca_attribute:
# fortiservice_port:
# ssd_trim_hour:
# purdue_level:
# management_vdom:
# quic_ack_thresold:
# qsfpdd_100g_port:
# ips_affinity:
# vip_arp_range:
# internet_service_database:
# revision_image_auto_backup:
# sflowd_max_children_num:
# admin_https_pki_required:
# special_file_23_support:
# npu_neighbor_update:
# log_single_cpu_high:
# management_ip:
# proxy_resource_mode:
# admin_ble_button:
# gui_firmware_upgrade_warning:
# dp_tcp_normal_timer:
# ipv6_allow_traffic_redirect:
# cli_audit_log:
# memory_use_threshold_extreme:
# ha_affinity:
# restart_time:
# speedtestd_ctrl_port:
# gui_wireless_opensecurity:
# memory_use_threshold_red:
# dp_fragment_timer:
# wad_restart_start_time:
# proxy_re_authentication_time:
# gui_app_detection_sdwan:
# scanunit_count:
# tftp:
# xstools_update_frequency:
# clt_cert_req:
# fortiextender_vlan_mode:
# auth_http_port:
# per_user_bal:
# gui_date_format:
# log_uuid_address:
# cloud_communication:
# lldp_reception:
# two_factor_ftm_expiry:
# quic_udp_payload_size_shaping_per_cid:
# autorun_log_fsck:
# vpn_ems_sn_check:
# admin_ssh_password:
# airplane_mode:
# batch_cmdb:
# ip_src_port_range:
# strict_dirty_session_check:
# user_device_store_max_devices:
# dp_udp_idle_timer:
# internal_switch_speed: ["auto", "10full", "10half", "100full", "100half", "1000full",
# "1000auto"]
# forticonverter_config_upload:
# ipsec_round_robin:
# wad_affinity:
# wifi_ca_certificate:
# wimax_4g_usb:
# miglog_affinity:
# faz_disk_buffer_size:
# ssh_kex_algo: ["diffie-hellman-group1-sha1", "diffie-hellman-group14-sha1",
# "diffie-hellman-group-exchange-sha1",
# "diffie-hellman-group-exchange-sha256", "curve25519-sha256@libssh.org",
# "ecdh-sha2-nistp256", "ecdh-sha2-nistp384", "ecdh-sha2-nistp521",
# "diffie-hellman-group14-sha256", "diffie-hellman-group16-sha512",
# "diffie-hellman-group18-sha512"]
# auto_auth_extension_device:
# forticarrier_bypass:
# reset_sessionless_tcp:
# early_tcp_npu_session:
# http_unauthenticated_request_limit:
# gui_local_out:
# tcp_option:
# proxy_auth_timeout:
# fortiextender_discovery_lockdown:
# lldp_transmission:
# split_port:
# gui_certificates:
# cfg_save:
# auth_keepalive:
# split_port_mode:
# - interface:
# split_mode:
# admin_forticloud_sso_login:
# post_login_banner:
# br_fdb_max_entry:
# ip_fragment_mem_thresholds:
# fortiextender_provision_on_authorization:
# reboot_upon_config_restore:
# syslog_affinity:
# fortiextender_data_port:
# quic_tls_handshake_timeout:
# forticonverter_integration:
# proxy_keep_alive_mode:
# cmdbsvr_affinity:
# wad_memory_change_granularity:
# dhcp_lease_backup_interval:
# check_protocol_header:
# av_failopen_session:
# ipsec_ha_seqjump_rate:
# admin_hsts_max_age:
# igmp_state_limit:
# admin_login_max:
# ipv6_allow_multicast_probe:
# virtual_switch_vlan:
# admin_lockout_threshold:
# dp_pinhole_timer:
# wireless_controller:
# bfd_affinity:
# ssd_trim_freq:
# two_factor_sms_expiry:
# traffic_priority:
# proxy_and_explicit_proxy:
# sslvpn_web_mode:
# ssh_hostkey_password:
# wad_csvc_db_count:
# ipv6_allow_anycast_probe:
# honor_df:
# hyper_scale_vdom_num:
# wad_csvc_cs_count:
# internal_switch_mode:
# cfg_revert_timeout:
# admin_concurrent:
# ipv6_allow_local_in_silent_drop:
# tcp_halfopen_timer:
# dp_rsync_timer:
# management_port_use_admin_sport:
# gui_forticare_registration_setup_warning:
# gui_replacement_message_groups:
# security_rating_run_on_schedule:
# admin_lockout_duration:
# optimize_flow_mode:
# private_data_encryption:
# wireless_mode:
# alias:
# ssh_hostkey_algo: ["ssh-rsa", "ecdsa-sha2-nistp521", "rsa-sha2-256", "rsa-sha2-512",
# "ssh-ed25519", "ecdsa-sha2-nistp384", "ecdsa-sha2-nistp256"]
# fortitoken_cloud:
# av_affinity:
# proxy_worker_count:
# ipsec_asic_offload:
# miglogd_children:
# sslvpn_max_worker_count:
# ssh_mac_algo: ["hmac-md5", "hmac-md5-etm@openssh.com", "hmac-md5-96",
# "hmac-md5-96-etm@openssh.com", "hmac-sha1",
# "hmac-sha1-etm@openssh.com", "hmac-sha2-256",
# "hmac-sha2-256-etm@openssh.com", "hmac-sha2-512",
# "hmac-sha2-512-etm@openssh.com", "hmac-ripemd160",
# "hmac-ripemd160@openssh.com", "hmac-ripemd160-etm@openssh.com",
# "umac-64@openssh.com", "umac-128@openssh.com",
# "umac-64-etm@openssh.com", "umac-128-etm@openssh.com"]
# url_filter_count:
# wifi_certificate:
# radius_port:
# sys_perf_log_interval:
# gui_fortigate_cloud_sandbox:
# auth_cert:
# fortiextender:
# admin_reset_button:
# av_failopen:
# user_device_store_max_users:
# auth_session_limit:
# ipv6_allow_local_in_slient_drop:
# quic_congestion_control_algo:
# auth_ike_saml_port:
# wad_restart_end_time:
# http_request_limit:
# irq_time_accounting:
# remoteauthtimeout:
# admin_https_ssl_banned_ciphers: ["RSA", "DHE", "ECDHE", "DSS", "ECDSA", "AES",
# "AESGCM", "CAMELLIA", "3DES", "SHA1", "SHA256",
# "SHA384", "STATIC", "CHACHA20", "ARIA", "AESCCM"]
# allow_traffic_redirect:
# legacy_poe_device_support:
# wad_restart_mode:
# fds_statistics_period:
# admin_telnet:
# ipv6_accept_dad:
# tcp_timewait_timer:
# admin_console_timeout:
# default_service_source_port:
# quic_max_datagram_size:
# refresh:
# extender_controller_reserved_network:
# url_filter_affinity:
# policy_auth_concurrent:
# ipsec_hmac_offload:
# traffic_priority_level:
# ipsec_qat_offload:
# ssd_trim_min:
# gui_date_time_source:
# log_ssl_connection: