Docs Packages
  1. Packages
  2. Fortios
  3. API Docs
  4. vpn
  5. vpn/ssl
  6. getSettings
Fortios v0.0.5 published on Tuesday, Apr 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

fortios.vpn/ssl.getSettings

Explore with Pulumi AI

fortios logo
Fortios v0.0.5 published on Tuesday, Apr 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

    Use this data source to get information on fortios vpnssl settings

    Using getSettings

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getSettings(args: GetSettingsArgs, opts?: InvokeOptions): Promise<GetSettingsResult>
function getSettingsOutput(args: GetSettingsOutputArgs, opts?: InvokeOptions): Output<GetSettingsResult>
    def get_settings(vdomparam: Optional[str] = None,
                 opts: Optional[InvokeOptions] = None) -> GetSettingsResult
def get_settings_output(vdomparam: Optional[pulumi.Input[str]] = None,
                 opts: Optional[InvokeOptions] = None) -> Output[GetSettingsResult]
    func LookupSettings(ctx *Context, args *LookupSettingsArgs, opts ...InvokeOption) (*LookupSettingsResult, error)
func LookupSettingsOutput(ctx *Context, args *LookupSettingsOutputArgs, opts ...InvokeOption) LookupSettingsResultOutput

    > Note: This function is named LookupSettings in the Go SDK.

    public static class GetSettings 
{
    public static Task<GetSettingsResult> InvokeAsync(GetSettingsArgs args, InvokeOptions? opts = null)
    public static Output<GetSettingsResult> Invoke(GetSettingsInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetSettingsResult> getSettings(GetSettingsArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet

    fn::invoke:
  function: fortios:vpn/ssl/getSettings:getSettings
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Vdomparam string
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    Vdomparam string
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    vdomparam String
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    vdomparam string
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    vdomparam str
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    vdomparam String
    Specifies the vdom to which the data source will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.

    getSettings Result

    The following output properties are available:

    Algorithm string
    Force the SSL-VPN security level. High allows only high. Medium allows medium and high. Low allows any.
    AuthSessionCheckSourceIp string
    Enable/disable checking of source IP for authentication session.
    AuthTimeout int
    SSL-VPN authentication timeout (1 - 259200 sec (3 days), 0 for no timeout).
    AuthenticationRules List<Pulumiverse.Fortios.Vpn.Ssl.Outputs.GetSettingsAuthenticationRule>
    Authentication rule for SSL VPN. The structure of authentication_rule block is documented below.
    AutoTunnelStaticRoute string
    Enable to auto-create static routes for the SSL-VPN tunnel IP addresses.
    BannedCipher string
    Select one or more cipher technologies that cannot be used in SSL-VPN negotiations.
    BrowserLanguageDetection string
    Enable/disable overriding the configured system language based on the preferred language of the browser.
    CheckReferer string
    Enable/disable verification of referer field in HTTP request header.
    Ciphersuite string
    Select one or more TLS 1.3 ciphersuites to enable. Does not affect ciphers in TLS 1.2 and below. At least one must be enabled. To disable all, set ssl-max-proto-ver to tls1-2 or below.
    ClientSigalgs string
    Set signature algorithms related to client authentication. Affects TLS version <= 1.2 only.
    DefaultPortal string
    Default SSL VPN portal.
    DeflateCompressionLevel int
    Compression level (0~9).
    DeflateMinDataSize int
    Minimum amount of data that triggers compression (200 - 65535 bytes).
    DnsServer1 string
    DNS server 1.
    DnsServer2 string
    DNS server 2.
    DnsSuffix string
    DNS suffix used for SSL-VPN clients.
    DtlsHeartbeatFailCount int
    Number of missing heartbeats before the connection is considered dropped.
    DtlsHeartbeatIdleTimeout int
    Idle timeout before DTLS heartbeat is sent.
    DtlsHeartbeatInterval int
    Interval between DTLS heartbeat.
    DtlsHelloTimeout int
    SSLVPN maximum DTLS hello timeout (10 - 60 sec, default = 10).
    DtlsMaxProtoVer string
    DTLS maximum protocol version.
    DtlsMinProtoVer string
    DTLS minimum protocol version.
    DtlsTunnel string
    Enable DTLS to prevent eavesdropping, tampering, or message forgery.
    DualStackMode string
    Tunnel mode: enable parallel IPv4 and IPv6 tunnel. Web mode: support IPv4 and IPv6 bookmarks in the portal.
    Encode2fSequence string
    Encode \2F sequence to forward slash in URLs.
    EncryptAndStorePassword string
    Encrypt and store user passwords for SSL-VPN web sessions.
    ForceTwoFactorAuth string
    Enable to force two-factor authentication for all SSL-VPNs.
    HeaderXForwardedFor string
    Forward the same, add, or remove HTTP header.
    HstsIncludeSubdomains string
    Add HSTS includeSubDomains response header.
    HttpCompression string
    Enable to allow HTTP compression over SSL-VPN tunnels.
    HttpOnlyCookie string
    Enable/disable SSL-VPN support for HttpOnly cookies.
    HttpRequestBodyTimeout int
    SSL-VPN session is disconnected if an HTTP request body is not received within this time (1 - 60 sec, default = 20).
    HttpRequestHeaderTimeout int
    SSL-VPN session is disconnected if an HTTP request header is not received within this time (1 - 60 sec, default = 20).
    HttpsRedirect string
    Enable/disable redirect of port 80 to SSL-VPN port.
    Id string
    The provider-assigned unique ID for this managed resource.
    IdleTimeout int
    SSL VPN disconnects if idle for specified time in seconds.
    Ipv6DnsServer1 string
    IPv6 DNS server 1.
    Ipv6DnsServer2 string
    IPv6 DNS server 2.
    Ipv6WinsServer1 string
    IPv6 WINS server 1.
    Ipv6WinsServer2 string
    IPv6 WINS server 2.
    LoginAttemptLimit int
    SSL VPN maximum login attempt times before block (0 - 10, default = 2, 0 = no limit).
    LoginBlockTime int
    Time for which a user is blocked from logging in after too many failed login attempts (0 - 86400 sec, default = 60).
    LoginTimeout int
    SSLVPN maximum login timeout (10 - 180 sec, default = 30).
    Port int
    SSL-VPN access port (1 - 65535).
    PortPrecedence string
    Enable means that if SSL-VPN connections are allowed on an interface admin GUI connections are blocked on that interface.
    Reqclientcert string
    Enable to require client certificates for all SSL-VPN users.
    RouteSourceInterface string
    Enable to allow SSL-VPN sessions to bypass routing and bind to the incoming interface.
    SamlRedirectPort int
    SAML local redirect port in the machine running FCT (0 - 65535). 0 is to disable redirection on FGT side.
    ServerHostname string
    Server hostname for HTTPS. When set, will be used for SSL VPN web proxy host header for any redirection.
    Servercert string
    Name of the server certificate to be used for SSL-VPNs.
    SourceAddress6Negate string
    Enable/disable negated source IPv6 address match.
    SourceAddress6s List<Pulumiverse.Fortios.Vpn.Ssl.Outputs.GetSettingsSourceAddress6>
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    SourceAddressNegate string
    Enable/disable negated source address match.
    SourceAddresses List<Pulumiverse.Fortios.Vpn.Ssl.Outputs.GetSettingsSourceAddress>
    Source address of incoming traffic. The structure of source_address block is documented below.
    SourceInterfaces List<Pulumiverse.Fortios.Vpn.Ssl.Outputs.GetSettingsSourceInterface>
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    SslClientRenegotiation string
    Enable to allow client renegotiation by the server if the tunnel goes down.
    SslInsertEmptyFragment string
    Enable/disable insertion of empty fragment.
    SslMaxProtoVer string
    SSL maximum protocol version.
    SslMinProtoVer string
    SSL minimum protocol version.
    Status string
    Enable/disable SSL-VPN.
    Tlsv10 string
    Enable/disable TLSv1.0.
    Tlsv11 string
    Enable/disable TLSv1.1.
    Tlsv12 string
    Enable/disable TLSv1.2.
    Tlsv13 string
    Enable/disable TLSv1.3.
    TransformBackwardSlashes string
    Transform backward slashes to forward slashes in URLs.
    TunnelAddrAssignedMethod string
    Method used for assigning address for tunnel.
    TunnelConnectWithoutReauth string
    Enable/disable tunnel connection without re-authorization if previous connection dropped.
    TunnelIpPools List<Pulumiverse.Fortios.Vpn.Ssl.Outputs.GetSettingsTunnelIpPool>
    Names of the IPv4 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ip_pools block is documented below.
    TunnelIpv6Pools List<Pulumiverse.Fortios.Vpn.Ssl.Outputs.GetSettingsTunnelIpv6Pool>
    Names of the IPv6 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ipv6_pools block is documented below.
    TunnelUserSessionTimeout int
    Time out value to clean up user session after tunnel connection is dropped (1 - 255 sec, default=30).
    UnsafeLegacyRenegotiation string
    Enable/disable unsafe legacy re-negotiation.
    UrlObscuration string
    Enable to obscure the host name of the URL of the web browser display.
    UserPeer string
    Name of user peer.
    WebModeSnat string
    Enable/disable use of IP pools defined in firewall policy while using web-mode.
    WinsServer1 string
    WINS server 1.
    WinsServer2 string
    WINS server 2.
    XContentTypeOptions string
    Add HTTP X-Content-Type-Options header.
    ZtnaTrustedClient string
    Enable/disable verification of device certificate for SSLVPN ZTNA session.
    Vdomparam string
    Algorithm string
    Force the SSL-VPN security level. High allows only high. Medium allows medium and high. Low allows any.
    AuthSessionCheckSourceIp string
    Enable/disable checking of source IP for authentication session.
    AuthTimeout int
    SSL-VPN authentication timeout (1 - 259200 sec (3 days), 0 for no timeout).
    AuthenticationRules []GetSettingsAuthenticationRule
    Authentication rule for SSL VPN. The structure of authentication_rule block is documented below.
    AutoTunnelStaticRoute string
    Enable to auto-create static routes for the SSL-VPN tunnel IP addresses.
    BannedCipher string
    Select one or more cipher technologies that cannot be used in SSL-VPN negotiations.
    BrowserLanguageDetection string
    Enable/disable overriding the configured system language based on the preferred language of the browser.
    CheckReferer string
    Enable/disable verification of referer field in HTTP request header.
    Ciphersuite string
    Select one or more TLS 1.3 ciphersuites to enable. Does not affect ciphers in TLS 1.2 and below. At least one must be enabled. To disable all, set ssl-max-proto-ver to tls1-2 or below.
    ClientSigalgs string
    Set signature algorithms related to client authentication. Affects TLS version <= 1.2 only.
    DefaultPortal string
    Default SSL VPN portal.
    DeflateCompressionLevel int
    Compression level (0~9).
    DeflateMinDataSize int
    Minimum amount of data that triggers compression (200 - 65535 bytes).
    DnsServer1 string
    DNS server 1.
    DnsServer2 string
    DNS server 2.
    DnsSuffix string
    DNS suffix used for SSL-VPN clients.
    DtlsHeartbeatFailCount int
    Number of missing heartbeats before the connection is considered dropped.
    DtlsHeartbeatIdleTimeout int
    Idle timeout before DTLS heartbeat is sent.
    DtlsHeartbeatInterval int
    Interval between DTLS heartbeat.
    DtlsHelloTimeout int
    SSLVPN maximum DTLS hello timeout (10 - 60 sec, default = 10).
    DtlsMaxProtoVer string
    DTLS maximum protocol version.
    DtlsMinProtoVer string
    DTLS minimum protocol version.
    DtlsTunnel string
    Enable DTLS to prevent eavesdropping, tampering, or message forgery.
    DualStackMode string
    Tunnel mode: enable parallel IPv4 and IPv6 tunnel. Web mode: support IPv4 and IPv6 bookmarks in the portal.
    Encode2fSequence string
    Encode \2F sequence to forward slash in URLs.
    EncryptAndStorePassword string
    Encrypt and store user passwords for SSL-VPN web sessions.
    ForceTwoFactorAuth string
    Enable to force two-factor authentication for all SSL-VPNs.
    HeaderXForwardedFor string
    Forward the same, add, or remove HTTP header.
    HstsIncludeSubdomains string
    Add HSTS includeSubDomains response header.
    HttpCompression string
    Enable to allow HTTP compression over SSL-VPN tunnels.
    HttpOnlyCookie string
    Enable/disable SSL-VPN support for HttpOnly cookies.
    HttpRequestBodyTimeout int
    SSL-VPN session is disconnected if an HTTP request body is not received within this time (1 - 60 sec, default = 20).
    HttpRequestHeaderTimeout int
    SSL-VPN session is disconnected if an HTTP request header is not received within this time (1 - 60 sec, default = 20).
    HttpsRedirect string
    Enable/disable redirect of port 80 to SSL-VPN port.
    Id string
    The provider-assigned unique ID for this managed resource.
    IdleTimeout int
    SSL VPN disconnects if idle for specified time in seconds.
    Ipv6DnsServer1 string
    IPv6 DNS server 1.
    Ipv6DnsServer2 string
    IPv6 DNS server 2.
    Ipv6WinsServer1 string
    IPv6 WINS server 1.
    Ipv6WinsServer2 string
    IPv6 WINS server 2.
    LoginAttemptLimit int
    SSL VPN maximum login attempt times before block (0 - 10, default = 2, 0 = no limit).
    LoginBlockTime int
    Time for which a user is blocked from logging in after too many failed login attempts (0 - 86400 sec, default = 60).
    LoginTimeout int
    SSLVPN maximum login timeout (10 - 180 sec, default = 30).
    Port int
    SSL-VPN access port (1 - 65535).
    PortPrecedence string
    Enable means that if SSL-VPN connections are allowed on an interface admin GUI connections are blocked on that interface.
    Reqclientcert string
    Enable to require client certificates for all SSL-VPN users.
    RouteSourceInterface string
    Enable to allow SSL-VPN sessions to bypass routing and bind to the incoming interface.
    SamlRedirectPort int
    SAML local redirect port in the machine running FCT (0 - 65535). 0 is to disable redirection on FGT side.
    ServerHostname string
    Server hostname for HTTPS. When set, will be used for SSL VPN web proxy host header for any redirection.
    Servercert string
    Name of the server certificate to be used for SSL-VPNs.
    SourceAddress6Negate string
    Enable/disable negated source IPv6 address match.
    SourceAddress6s []GetSettingsSourceAddress6
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    SourceAddressNegate string
    Enable/disable negated source address match.
    SourceAddresses []GetSettingsSourceAddress
    Source address of incoming traffic. The structure of source_address block is documented below.
    SourceInterfaces []GetSettingsSourceInterface
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    SslClientRenegotiation string
    Enable to allow client renegotiation by the server if the tunnel goes down.
    SslInsertEmptyFragment string
    Enable/disable insertion of empty fragment.
    SslMaxProtoVer string
    SSL maximum protocol version.
    SslMinProtoVer string
    SSL minimum protocol version.
    Status string
    Enable/disable SSL-VPN.
    Tlsv10 string
    Enable/disable TLSv1.0.
    Tlsv11 string
    Enable/disable TLSv1.1.
    Tlsv12 string
    Enable/disable TLSv1.2.
    Tlsv13 string
    Enable/disable TLSv1.3.
    TransformBackwardSlashes string
    Transform backward slashes to forward slashes in URLs.
    TunnelAddrAssignedMethod string
    Method used for assigning address for tunnel.
    TunnelConnectWithoutReauth string
    Enable/disable tunnel connection without re-authorization if previous connection dropped.
    TunnelIpPools []GetSettingsTunnelIpPool
    Names of the IPv4 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ip_pools block is documented below.
    TunnelIpv6Pools []GetSettingsTunnelIpv6Pool
    Names of the IPv6 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ipv6_pools block is documented below.
    TunnelUserSessionTimeout int
    Time out value to clean up user session after tunnel connection is dropped (1 - 255 sec, default=30).
    UnsafeLegacyRenegotiation string
    Enable/disable unsafe legacy re-negotiation.
    UrlObscuration string
    Enable to obscure the host name of the URL of the web browser display.
    UserPeer string
    Name of user peer.
    WebModeSnat string
    Enable/disable use of IP pools defined in firewall policy while using web-mode.
    WinsServer1 string
    WINS server 1.
    WinsServer2 string
    WINS server 2.
    XContentTypeOptions string
    Add HTTP X-Content-Type-Options header.
    ZtnaTrustedClient string
    Enable/disable verification of device certificate for SSLVPN ZTNA session.
    Vdomparam string
    algorithm String
    Force the SSL-VPN security level. High allows only high. Medium allows medium and high. Low allows any.
    authSessionCheckSourceIp String
    Enable/disable checking of source IP for authentication session.
    authTimeout Integer
    SSL-VPN authentication timeout (1 - 259200 sec (3 days), 0 for no timeout).
    authenticationRules List<GetSettingsAuthenticationRule>
    Authentication rule for SSL VPN. The structure of authentication_rule block is documented below.
    autoTunnelStaticRoute String
    Enable to auto-create static routes for the SSL-VPN tunnel IP addresses.
    bannedCipher String
    Select one or more cipher technologies that cannot be used in SSL-VPN negotiations.
    browserLanguageDetection String
    Enable/disable overriding the configured system language based on the preferred language of the browser.
    checkReferer String
    Enable/disable verification of referer field in HTTP request header.
    ciphersuite String
    Select one or more TLS 1.3 ciphersuites to enable. Does not affect ciphers in TLS 1.2 and below. At least one must be enabled. To disable all, set ssl-max-proto-ver to tls1-2 or below.
    clientSigalgs String
    Set signature algorithms related to client authentication. Affects TLS version <= 1.2 only.
    defaultPortal String
    Default SSL VPN portal.
    deflateCompressionLevel Integer
    Compression level (0~9).
    deflateMinDataSize Integer
    Minimum amount of data that triggers compression (200 - 65535 bytes).
    dnsServer1 String
    DNS server 1.
    dnsServer2 String
    DNS server 2.
    dnsSuffix String
    DNS suffix used for SSL-VPN clients.
    dtlsHeartbeatFailCount Integer
    Number of missing heartbeats before the connection is considered dropped.
    dtlsHeartbeatIdleTimeout Integer
    Idle timeout before DTLS heartbeat is sent.
    dtlsHeartbeatInterval Integer
    Interval between DTLS heartbeat.
    dtlsHelloTimeout Integer
    SSLVPN maximum DTLS hello timeout (10 - 60 sec, default = 10).
    dtlsMaxProtoVer String
    DTLS maximum protocol version.
    dtlsMinProtoVer String
    DTLS minimum protocol version.
    dtlsTunnel String
    Enable DTLS to prevent eavesdropping, tampering, or message forgery.
    dualStackMode String
    Tunnel mode: enable parallel IPv4 and IPv6 tunnel. Web mode: support IPv4 and IPv6 bookmarks in the portal.
    encode2fSequence String
    Encode \2F sequence to forward slash in URLs.
    encryptAndStorePassword String
    Encrypt and store user passwords for SSL-VPN web sessions.
    forceTwoFactorAuth String
    Enable to force two-factor authentication for all SSL-VPNs.
    headerXForwardedFor String
    Forward the same, add, or remove HTTP header.
    hstsIncludeSubdomains String
    Add HSTS includeSubDomains response header.
    httpCompression String
    Enable to allow HTTP compression over SSL-VPN tunnels.
    httpOnlyCookie String
    Enable/disable SSL-VPN support for HttpOnly cookies.
    httpRequestBodyTimeout Integer
    SSL-VPN session is disconnected if an HTTP request body is not received within this time (1 - 60 sec, default = 20).
    httpRequestHeaderTimeout Integer
    SSL-VPN session is disconnected if an HTTP request header is not received within this time (1 - 60 sec, default = 20).
    httpsRedirect String
    Enable/disable redirect of port 80 to SSL-VPN port.
    id String
    The provider-assigned unique ID for this managed resource.
    idleTimeout Integer
    SSL VPN disconnects if idle for specified time in seconds.
    ipv6DnsServer1 String
    IPv6 DNS server 1.
    ipv6DnsServer2 String
    IPv6 DNS server 2.
    ipv6WinsServer1 String
    IPv6 WINS server 1.
    ipv6WinsServer2 String
    IPv6 WINS server 2.
    loginAttemptLimit Integer
    SSL VPN maximum login attempt times before block (0 - 10, default = 2, 0 = no limit).
    loginBlockTime Integer
    Time for which a user is blocked from logging in after too many failed login attempts (0 - 86400 sec, default = 60).
    loginTimeout Integer
    SSLVPN maximum login timeout (10 - 180 sec, default = 30).
    port Integer
    SSL-VPN access port (1 - 65535).
    portPrecedence String
    Enable means that if SSL-VPN connections are allowed on an interface admin GUI connections are blocked on that interface.
    reqclientcert String
    Enable to require client certificates for all SSL-VPN users.
    routeSourceInterface String
    Enable to allow SSL-VPN sessions to bypass routing and bind to the incoming interface.
    samlRedirectPort Integer
    SAML local redirect port in the machine running FCT (0 - 65535). 0 is to disable redirection on FGT side.
    serverHostname String
    Server hostname for HTTPS. When set, will be used for SSL VPN web proxy host header for any redirection.
    servercert String
    Name of the server certificate to be used for SSL-VPNs.
    sourceAddress6Negate String
    Enable/disable negated source IPv6 address match.
    sourceAddress6s List<GetSettingsSourceAddress6>
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    sourceAddressNegate String
    Enable/disable negated source address match.
    sourceAddresses List<GetSettingsSourceAddress>
    Source address of incoming traffic. The structure of source_address block is documented below.
    sourceInterfaces List<GetSettingsSourceInterface>
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    sslClientRenegotiation String
    Enable to allow client renegotiation by the server if the tunnel goes down.
    sslInsertEmptyFragment String
    Enable/disable insertion of empty fragment.
    sslMaxProtoVer String
    SSL maximum protocol version.
    sslMinProtoVer String
    SSL minimum protocol version.
    status String
    Enable/disable SSL-VPN.
    tlsv10 String
    Enable/disable TLSv1.0.
    tlsv11 String
    Enable/disable TLSv1.1.
    tlsv12 String
    Enable/disable TLSv1.2.
    tlsv13 String
    Enable/disable TLSv1.3.
    transformBackwardSlashes String
    Transform backward slashes to forward slashes in URLs.
    tunnelAddrAssignedMethod String
    Method used for assigning address for tunnel.
    tunnelConnectWithoutReauth String
    Enable/disable tunnel connection without re-authorization if previous connection dropped.
    tunnelIpPools List<GetSettingsTunnelIpPool>
    Names of the IPv4 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ip_pools block is documented below.
    tunnelIpv6Pools List<GetSettingsTunnelIpv6Pool>
    Names of the IPv6 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ipv6_pools block is documented below.
    tunnelUserSessionTimeout Integer
    Time out value to clean up user session after tunnel connection is dropped (1 - 255 sec, default=30).
    unsafeLegacyRenegotiation String
    Enable/disable unsafe legacy re-negotiation.
    urlObscuration String
    Enable to obscure the host name of the URL of the web browser display.
    userPeer String
    Name of user peer.
    webModeSnat String
    Enable/disable use of IP pools defined in firewall policy while using web-mode.
    winsServer1 String
    WINS server 1.
    winsServer2 String
    WINS server 2.
    xContentTypeOptions String
    Add HTTP X-Content-Type-Options header.
    ztnaTrustedClient String
    Enable/disable verification of device certificate for SSLVPN ZTNA session.
    vdomparam String
    algorithm string
    Force the SSL-VPN security level. High allows only high. Medium allows medium and high. Low allows any.
    authSessionCheckSourceIp string
    Enable/disable checking of source IP for authentication session.
    authTimeout number
    SSL-VPN authentication timeout (1 - 259200 sec (3 days), 0 for no timeout).
    authenticationRules GetSettingsAuthenticationRule[]
    Authentication rule for SSL VPN. The structure of authentication_rule block is documented below.
    autoTunnelStaticRoute string
    Enable to auto-create static routes for the SSL-VPN tunnel IP addresses.
    bannedCipher string
    Select one or more cipher technologies that cannot be used in SSL-VPN negotiations.
    browserLanguageDetection string
    Enable/disable overriding the configured system language based on the preferred language of the browser.
    checkReferer string
    Enable/disable verification of referer field in HTTP request header.
    ciphersuite string
    Select one or more TLS 1.3 ciphersuites to enable. Does not affect ciphers in TLS 1.2 and below. At least one must be enabled. To disable all, set ssl-max-proto-ver to tls1-2 or below.
    clientSigalgs string
    Set signature algorithms related to client authentication. Affects TLS version <= 1.2 only.
    defaultPortal string
    Default SSL VPN portal.
    deflateCompressionLevel number
    Compression level (0~9).
    deflateMinDataSize number
    Minimum amount of data that triggers compression (200 - 65535 bytes).
    dnsServer1 string
    DNS server 1.
    dnsServer2 string
    DNS server 2.
    dnsSuffix string
    DNS suffix used for SSL-VPN clients.
    dtlsHeartbeatFailCount number
    Number of missing heartbeats before the connection is considered dropped.
    dtlsHeartbeatIdleTimeout number
    Idle timeout before DTLS heartbeat is sent.
    dtlsHeartbeatInterval number
    Interval between DTLS heartbeat.
    dtlsHelloTimeout number
    SSLVPN maximum DTLS hello timeout (10 - 60 sec, default = 10).
    dtlsMaxProtoVer string
    DTLS maximum protocol version.
    dtlsMinProtoVer string
    DTLS minimum protocol version.
    dtlsTunnel string
    Enable DTLS to prevent eavesdropping, tampering, or message forgery.
    dualStackMode string
    Tunnel mode: enable parallel IPv4 and IPv6 tunnel. Web mode: support IPv4 and IPv6 bookmarks in the portal.
    encode2fSequence string
    Encode \2F sequence to forward slash in URLs.
    encryptAndStorePassword string
    Encrypt and store user passwords for SSL-VPN web sessions.
    forceTwoFactorAuth string
    Enable to force two-factor authentication for all SSL-VPNs.
    headerXForwardedFor string
    Forward the same, add, or remove HTTP header.
    hstsIncludeSubdomains string
    Add HSTS includeSubDomains response header.
    httpCompression string
    Enable to allow HTTP compression over SSL-VPN tunnels.
    httpOnlyCookie string
    Enable/disable SSL-VPN support for HttpOnly cookies.
    httpRequestBodyTimeout number
    SSL-VPN session is disconnected if an HTTP request body is not received within this time (1 - 60 sec, default = 20).
    httpRequestHeaderTimeout number
    SSL-VPN session is disconnected if an HTTP request header is not received within this time (1 - 60 sec, default = 20).
    httpsRedirect string
    Enable/disable redirect of port 80 to SSL-VPN port.
    id string
    The provider-assigned unique ID for this managed resource.
    idleTimeout number
    SSL VPN disconnects if idle for specified time in seconds.
    ipv6DnsServer1 string
    IPv6 DNS server 1.
    ipv6DnsServer2 string
    IPv6 DNS server 2.
    ipv6WinsServer1 string
    IPv6 WINS server 1.
    ipv6WinsServer2 string
    IPv6 WINS server 2.
    loginAttemptLimit number
    SSL VPN maximum login attempt times before block (0 - 10, default = 2, 0 = no limit).
    loginBlockTime number
    Time for which a user is blocked from logging in after too many failed login attempts (0 - 86400 sec, default = 60).
    loginTimeout number
    SSLVPN maximum login timeout (10 - 180 sec, default = 30).
    port number
    SSL-VPN access port (1 - 65535).
    portPrecedence string
    Enable means that if SSL-VPN connections are allowed on an interface admin GUI connections are blocked on that interface.
    reqclientcert string
    Enable to require client certificates for all SSL-VPN users.
    routeSourceInterface string
    Enable to allow SSL-VPN sessions to bypass routing and bind to the incoming interface.
    samlRedirectPort number
    SAML local redirect port in the machine running FCT (0 - 65535). 0 is to disable redirection on FGT side.
    serverHostname string
    Server hostname for HTTPS. When set, will be used for SSL VPN web proxy host header for any redirection.
    servercert string
    Name of the server certificate to be used for SSL-VPNs.
    sourceAddress6Negate string
    Enable/disable negated source IPv6 address match.
    sourceAddress6s GetSettingsSourceAddress6[]
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    sourceAddressNegate string
    Enable/disable negated source address match.
    sourceAddresses GetSettingsSourceAddress[]
    Source address of incoming traffic. The structure of source_address block is documented below.
    sourceInterfaces GetSettingsSourceInterface[]
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    sslClientRenegotiation string
    Enable to allow client renegotiation by the server if the tunnel goes down.
    sslInsertEmptyFragment string
    Enable/disable insertion of empty fragment.
    sslMaxProtoVer string
    SSL maximum protocol version.
    sslMinProtoVer string
    SSL minimum protocol version.
    status string
    Enable/disable SSL-VPN.
    tlsv10 string
    Enable/disable TLSv1.0.
    tlsv11 string
    Enable/disable TLSv1.1.
    tlsv12 string
    Enable/disable TLSv1.2.
    tlsv13 string
    Enable/disable TLSv1.3.
    transformBackwardSlashes string
    Transform backward slashes to forward slashes in URLs.
    tunnelAddrAssignedMethod string
    Method used for assigning address for tunnel.
    tunnelConnectWithoutReauth string
    Enable/disable tunnel connection without re-authorization if previous connection dropped.
    tunnelIpPools GetSettingsTunnelIpPool[]
    Names of the IPv4 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ip_pools block is documented below.
    tunnelIpv6Pools GetSettingsTunnelIpv6Pool[]
    Names of the IPv6 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ipv6_pools block is documented below.
    tunnelUserSessionTimeout number
    Time out value to clean up user session after tunnel connection is dropped (1 - 255 sec, default=30).
    unsafeLegacyRenegotiation string
    Enable/disable unsafe legacy re-negotiation.
    urlObscuration string
    Enable to obscure the host name of the URL of the web browser display.
    userPeer string
    Name of user peer.
    webModeSnat string
    Enable/disable use of IP pools defined in firewall policy while using web-mode.
    winsServer1 string
    WINS server 1.
    winsServer2 string
    WINS server 2.
    xContentTypeOptions string
    Add HTTP X-Content-Type-Options header.
    ztnaTrustedClient string
    Enable/disable verification of device certificate for SSLVPN ZTNA session.
    vdomparam string
    algorithm str
    Force the SSL-VPN security level. High allows only high. Medium allows medium and high. Low allows any.
    auth_session_check_source_ip str
    Enable/disable checking of source IP for authentication session.
    auth_timeout int
    SSL-VPN authentication timeout (1 - 259200 sec (3 days), 0 for no timeout).
    authentication_rules Sequence[GetSettingsAuthenticationRule]
    Authentication rule for SSL VPN. The structure of authentication_rule block is documented below.
    auto_tunnel_static_route str
    Enable to auto-create static routes for the SSL-VPN tunnel IP addresses.
    banned_cipher str
    Select one or more cipher technologies that cannot be used in SSL-VPN negotiations.
    browser_language_detection str
    Enable/disable overriding the configured system language based on the preferred language of the browser.
    check_referer str
    Enable/disable verification of referer field in HTTP request header.
    ciphersuite str
    Select one or more TLS 1.3 ciphersuites to enable. Does not affect ciphers in TLS 1.2 and below. At least one must be enabled. To disable all, set ssl-max-proto-ver to tls1-2 or below.
    client_sigalgs str
    Set signature algorithms related to client authentication. Affects TLS version <= 1.2 only.
    default_portal str
    Default SSL VPN portal.
    deflate_compression_level int
    Compression level (0~9).
    deflate_min_data_size int
    Minimum amount of data that triggers compression (200 - 65535 bytes).
    dns_server1 str
    DNS server 1.
    dns_server2 str
    DNS server 2.
    dns_suffix str
    DNS suffix used for SSL-VPN clients.
    dtls_heartbeat_fail_count int
    Number of missing heartbeats before the connection is considered dropped.
    dtls_heartbeat_idle_timeout int
    Idle timeout before DTLS heartbeat is sent.
    dtls_heartbeat_interval int
    Interval between DTLS heartbeat.
    dtls_hello_timeout int
    SSLVPN maximum DTLS hello timeout (10 - 60 sec, default = 10).
    dtls_max_proto_ver str
    DTLS maximum protocol version.
    dtls_min_proto_ver str
    DTLS minimum protocol version.
    dtls_tunnel str
    Enable DTLS to prevent eavesdropping, tampering, or message forgery.
    dual_stack_mode str
    Tunnel mode: enable parallel IPv4 and IPv6 tunnel. Web mode: support IPv4 and IPv6 bookmarks in the portal.
    encode2f_sequence str
    Encode \2F sequence to forward slash in URLs.
    encrypt_and_store_password str
    Encrypt and store user passwords for SSL-VPN web sessions.
    force_two_factor_auth str
    Enable to force two-factor authentication for all SSL-VPNs.
    header_x_forwarded_for str
    Forward the same, add, or remove HTTP header.
    hsts_include_subdomains str
    Add HSTS includeSubDomains response header.
    http_compression str
    Enable to allow HTTP compression over SSL-VPN tunnels.
    http_only_cookie str
    Enable/disable SSL-VPN support for HttpOnly cookies.
    http_request_body_timeout int
    SSL-VPN session is disconnected if an HTTP request body is not received within this time (1 - 60 sec, default = 20).
    http_request_header_timeout int
    SSL-VPN session is disconnected if an HTTP request header is not received within this time (1 - 60 sec, default = 20).
    https_redirect str
    Enable/disable redirect of port 80 to SSL-VPN port.
    id str
    The provider-assigned unique ID for this managed resource.
    idle_timeout int
    SSL VPN disconnects if idle for specified time in seconds.
    ipv6_dns_server1 str
    IPv6 DNS server 1.
    ipv6_dns_server2 str
    IPv6 DNS server 2.
    ipv6_wins_server1 str
    IPv6 WINS server 1.
    ipv6_wins_server2 str
    IPv6 WINS server 2.
    login_attempt_limit int
    SSL VPN maximum login attempt times before block (0 - 10, default = 2, 0 = no limit).
    login_block_time int
    Time for which a user is blocked from logging in after too many failed login attempts (0 - 86400 sec, default = 60).
    login_timeout int
    SSLVPN maximum login timeout (10 - 180 sec, default = 30).
    port int
    SSL-VPN access port (1 - 65535).
    port_precedence str
    Enable means that if SSL-VPN connections are allowed on an interface admin GUI connections are blocked on that interface.
    reqclientcert str
    Enable to require client certificates for all SSL-VPN users.
    route_source_interface str
    Enable to allow SSL-VPN sessions to bypass routing and bind to the incoming interface.
    saml_redirect_port int
    SAML local redirect port in the machine running FCT (0 - 65535). 0 is to disable redirection on FGT side.
    server_hostname str
    Server hostname for HTTPS. When set, will be used for SSL VPN web proxy host header for any redirection.
    servercert str
    Name of the server certificate to be used for SSL-VPNs.
    source_address6_negate str
    Enable/disable negated source IPv6 address match.
    source_address6s Sequence[GetSettingsSourceAddress6]
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    source_address_negate str
    Enable/disable negated source address match.
    source_addresses Sequence[GetSettingsSourceAddress]
    Source address of incoming traffic. The structure of source_address block is documented below.
    source_interfaces Sequence[GetSettingsSourceInterface]
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    ssl_client_renegotiation str
    Enable to allow client renegotiation by the server if the tunnel goes down.
    ssl_insert_empty_fragment str
    Enable/disable insertion of empty fragment.
    ssl_max_proto_ver str
    SSL maximum protocol version.
    ssl_min_proto_ver str
    SSL minimum protocol version.
    status str
    Enable/disable SSL-VPN.
    tlsv10 str
    Enable/disable TLSv1.0.
    tlsv11 str
    Enable/disable TLSv1.1.
    tlsv12 str
    Enable/disable TLSv1.2.
    tlsv13 str
    Enable/disable TLSv1.3.
    transform_backward_slashes str
    Transform backward slashes to forward slashes in URLs.
    tunnel_addr_assigned_method str
    Method used for assigning address for tunnel.
    tunnel_connect_without_reauth str
    Enable/disable tunnel connection without re-authorization if previous connection dropped.
    tunnel_ip_pools Sequence[GetSettingsTunnelIpPool]
    Names of the IPv4 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ip_pools block is documented below.
    tunnel_ipv6_pools Sequence[GetSettingsTunnelIpv6Pool]
    Names of the IPv6 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ipv6_pools block is documented below.
    tunnel_user_session_timeout int
    Time out value to clean up user session after tunnel connection is dropped (1 - 255 sec, default=30).
    unsafe_legacy_renegotiation str
    Enable/disable unsafe legacy re-negotiation.
    url_obscuration str
    Enable to obscure the host name of the URL of the web browser display.
    user_peer str
    Name of user peer.
    web_mode_snat str
    Enable/disable use of IP pools defined in firewall policy while using web-mode.
    wins_server1 str
    WINS server 1.
    wins_server2 str
    WINS server 2.
    x_content_type_options str
    Add HTTP X-Content-Type-Options header.
    ztna_trusted_client str
    Enable/disable verification of device certificate for SSLVPN ZTNA session.
    vdomparam str
    algorithm String
    Force the SSL-VPN security level. High allows only high. Medium allows medium and high. Low allows any.
    authSessionCheckSourceIp String
    Enable/disable checking of source IP for authentication session.
    authTimeout Number
    SSL-VPN authentication timeout (1 - 259200 sec (3 days), 0 for no timeout).
    authenticationRules List<Property Map>
    Authentication rule for SSL VPN. The structure of authentication_rule block is documented below.
    autoTunnelStaticRoute String
    Enable to auto-create static routes for the SSL-VPN tunnel IP addresses.
    bannedCipher String
    Select one or more cipher technologies that cannot be used in SSL-VPN negotiations.
    browserLanguageDetection String
    Enable/disable overriding the configured system language based on the preferred language of the browser.
    checkReferer String
    Enable/disable verification of referer field in HTTP request header.
    ciphersuite String
    Select one or more TLS 1.3 ciphersuites to enable. Does not affect ciphers in TLS 1.2 and below. At least one must be enabled. To disable all, set ssl-max-proto-ver to tls1-2 or below.
    clientSigalgs String
    Set signature algorithms related to client authentication. Affects TLS version <= 1.2 only.
    defaultPortal String
    Default SSL VPN portal.
    deflateCompressionLevel Number
    Compression level (0~9).
    deflateMinDataSize Number
    Minimum amount of data that triggers compression (200 - 65535 bytes).
    dnsServer1 String
    DNS server 1.
    dnsServer2 String
    DNS server 2.
    dnsSuffix String
    DNS suffix used for SSL-VPN clients.
    dtlsHeartbeatFailCount Number
    Number of missing heartbeats before the connection is considered dropped.
    dtlsHeartbeatIdleTimeout Number
    Idle timeout before DTLS heartbeat is sent.
    dtlsHeartbeatInterval Number
    Interval between DTLS heartbeat.
    dtlsHelloTimeout Number
    SSLVPN maximum DTLS hello timeout (10 - 60 sec, default = 10).
    dtlsMaxProtoVer String
    DTLS maximum protocol version.
    dtlsMinProtoVer String
    DTLS minimum protocol version.
    dtlsTunnel String
    Enable DTLS to prevent eavesdropping, tampering, or message forgery.
    dualStackMode String
    Tunnel mode: enable parallel IPv4 and IPv6 tunnel. Web mode: support IPv4 and IPv6 bookmarks in the portal.
    encode2fSequence String
    Encode \2F sequence to forward slash in URLs.
    encryptAndStorePassword String
    Encrypt and store user passwords for SSL-VPN web sessions.
    forceTwoFactorAuth String
    Enable to force two-factor authentication for all SSL-VPNs.
    headerXForwardedFor String
    Forward the same, add, or remove HTTP header.
    hstsIncludeSubdomains String
    Add HSTS includeSubDomains response header.
    httpCompression String
    Enable to allow HTTP compression over SSL-VPN tunnels.
    httpOnlyCookie String
    Enable/disable SSL-VPN support for HttpOnly cookies.
    httpRequestBodyTimeout Number
    SSL-VPN session is disconnected if an HTTP request body is not received within this time (1 - 60 sec, default = 20).
    httpRequestHeaderTimeout Number
    SSL-VPN session is disconnected if an HTTP request header is not received within this time (1 - 60 sec, default = 20).
    httpsRedirect String
    Enable/disable redirect of port 80 to SSL-VPN port.
    id String
    The provider-assigned unique ID for this managed resource.
    idleTimeout Number
    SSL VPN disconnects if idle for specified time in seconds.
    ipv6DnsServer1 String
    IPv6 DNS server 1.
    ipv6DnsServer2 String
    IPv6 DNS server 2.
    ipv6WinsServer1 String
    IPv6 WINS server 1.
    ipv6WinsServer2 String
    IPv6 WINS server 2.
    loginAttemptLimit Number
    SSL VPN maximum login attempt times before block (0 - 10, default = 2, 0 = no limit).
    loginBlockTime Number
    Time for which a user is blocked from logging in after too many failed login attempts (0 - 86400 sec, default = 60).
    loginTimeout Number
    SSLVPN maximum login timeout (10 - 180 sec, default = 30).
    port Number
    SSL-VPN access port (1 - 65535).
    portPrecedence String
    Enable means that if SSL-VPN connections are allowed on an interface admin GUI connections are blocked on that interface.
    reqclientcert String
    Enable to require client certificates for all SSL-VPN users.
    routeSourceInterface String
    Enable to allow SSL-VPN sessions to bypass routing and bind to the incoming interface.
    samlRedirectPort Number
    SAML local redirect port in the machine running FCT (0 - 65535). 0 is to disable redirection on FGT side.
    serverHostname String
    Server hostname for HTTPS. When set, will be used for SSL VPN web proxy host header for any redirection.
    servercert String
    Name of the server certificate to be used for SSL-VPNs.
    sourceAddress6Negate String
    Enable/disable negated source IPv6 address match.
    sourceAddress6s List<Property Map>
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    sourceAddressNegate String
    Enable/disable negated source address match.
    sourceAddresses List<Property Map>
    Source address of incoming traffic. The structure of source_address block is documented below.
    sourceInterfaces List<Property Map>
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    sslClientRenegotiation String
    Enable to allow client renegotiation by the server if the tunnel goes down.
    sslInsertEmptyFragment String
    Enable/disable insertion of empty fragment.
    sslMaxProtoVer String
    SSL maximum protocol version.
    sslMinProtoVer String
    SSL minimum protocol version.
    status String
    Enable/disable SSL-VPN.
    tlsv10 String
    Enable/disable TLSv1.0.
    tlsv11 String
    Enable/disable TLSv1.1.
    tlsv12 String
    Enable/disable TLSv1.2.
    tlsv13 String
    Enable/disable TLSv1.3.
    transformBackwardSlashes String
    Transform backward slashes to forward slashes in URLs.
    tunnelAddrAssignedMethod String
    Method used for assigning address for tunnel.
    tunnelConnectWithoutReauth String
    Enable/disable tunnel connection without re-authorization if previous connection dropped.
    tunnelIpPools List<Property Map>
    Names of the IPv4 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ip_pools block is documented below.
    tunnelIpv6Pools List<Property Map>
    Names of the IPv6 IP Pool firewall objects that define the IP addresses reserved for remote clients. The structure of tunnel_ipv6_pools block is documented below.
    tunnelUserSessionTimeout Number
    Time out value to clean up user session after tunnel connection is dropped (1 - 255 sec, default=30).
    unsafeLegacyRenegotiation String
    Enable/disable unsafe legacy re-negotiation.
    urlObscuration String
    Enable to obscure the host name of the URL of the web browser display.
    userPeer String
    Name of user peer.
    webModeSnat String
    Enable/disable use of IP pools defined in firewall policy while using web-mode.
    winsServer1 String
    WINS server 1.
    winsServer2 String
    WINS server 2.
    xContentTypeOptions String
    Add HTTP X-Content-Type-Options header.
    ztnaTrustedClient String
    Enable/disable verification of device certificate for SSLVPN ZTNA session.
    vdomparam String

    Supporting Types

    GetSettingsAuthenticationRule

    Auth string
    SSL VPN authentication method restriction.
    Cipher string
    SSL VPN cipher strength.
    ClientCert string
    Enable/disable SSL VPN client certificate restrictive.
    Groups List<Pulumiverse.Fortios.Vpn.Ssl.Inputs.GetSettingsAuthenticationRuleGroup>
    User groups. The structure of groups block is documented below.
    Id int
    ID (0 - 4294967295).
    Portal string
    SSL VPN portal.
    Realm string
    SSL VPN realm.
    SourceAddress6Negate string
    Enable/disable negated source IPv6 address match.
    SourceAddress6s List<Pulumiverse.Fortios.Vpn.Ssl.Inputs.GetSettingsAuthenticationRuleSourceAddress6>
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    SourceAddressNegate string
    Enable/disable negated source address match.
    SourceAddresses List<Pulumiverse.Fortios.Vpn.Ssl.Inputs.GetSettingsAuthenticationRuleSourceAddress>
    Source address of incoming traffic. The structure of source_address block is documented below.
    SourceInterfaces List<Pulumiverse.Fortios.Vpn.Ssl.Inputs.GetSettingsAuthenticationRuleSourceInterface>
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    UserPeer string
    Name of user peer.
    Users List<Pulumiverse.Fortios.Vpn.Ssl.Inputs.GetSettingsAuthenticationRuleUser>
    User name. The structure of users block is documented below.
    Auth string
    SSL VPN authentication method restriction.
    Cipher string
    SSL VPN cipher strength.
    ClientCert string
    Enable/disable SSL VPN client certificate restrictive.
    Groups []GetSettingsAuthenticationRuleGroup
    User groups. The structure of groups block is documented below.
    Id int
    ID (0 - 4294967295).
    Portal string
    SSL VPN portal.
    Realm string
    SSL VPN realm.
    SourceAddress6Negate string
    Enable/disable negated source IPv6 address match.
    SourceAddress6s []GetSettingsAuthenticationRuleSourceAddress6
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    SourceAddressNegate string
    Enable/disable negated source address match.
    SourceAddresses []GetSettingsAuthenticationRuleSourceAddress
    Source address of incoming traffic. The structure of source_address block is documented below.
    SourceInterfaces []GetSettingsAuthenticationRuleSourceInterface
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    UserPeer string
    Name of user peer.
    Users []GetSettingsAuthenticationRuleUser
    User name. The structure of users block is documented below.
    auth String
    SSL VPN authentication method restriction.
    cipher String
    SSL VPN cipher strength.
    clientCert String
    Enable/disable SSL VPN client certificate restrictive.
    groups List<GetSettingsAuthenticationRuleGroup>
    User groups. The structure of groups block is documented below.
    id Integer
    ID (0 - 4294967295).
    portal String
    SSL VPN portal.
    realm String
    SSL VPN realm.
    sourceAddress6Negate String
    Enable/disable negated source IPv6 address match.
    sourceAddress6s List<GetSettingsAuthenticationRuleSourceAddress6>
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    sourceAddressNegate String
    Enable/disable negated source address match.
    sourceAddresses List<GetSettingsAuthenticationRuleSourceAddress>
    Source address of incoming traffic. The structure of source_address block is documented below.
    sourceInterfaces List<GetSettingsAuthenticationRuleSourceInterface>
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    userPeer String
    Name of user peer.
    users List<GetSettingsAuthenticationRuleUser>
    User name. The structure of users block is documented below.
    auth string
    SSL VPN authentication method restriction.
    cipher string
    SSL VPN cipher strength.
    clientCert string
    Enable/disable SSL VPN client certificate restrictive.
    groups GetSettingsAuthenticationRuleGroup[]
    User groups. The structure of groups block is documented below.
    id number
    ID (0 - 4294967295).
    portal string
    SSL VPN portal.
    realm string
    SSL VPN realm.
    sourceAddress6Negate string
    Enable/disable negated source IPv6 address match.
    sourceAddress6s GetSettingsAuthenticationRuleSourceAddress6[]
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    sourceAddressNegate string
    Enable/disable negated source address match.
    sourceAddresses GetSettingsAuthenticationRuleSourceAddress[]
    Source address of incoming traffic. The structure of source_address block is documented below.
    sourceInterfaces GetSettingsAuthenticationRuleSourceInterface[]
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    userPeer string
    Name of user peer.
    users GetSettingsAuthenticationRuleUser[]
    User name. The structure of users block is documented below.
    auth str
    SSL VPN authentication method restriction.
    cipher str
    SSL VPN cipher strength.
    client_cert str
    Enable/disable SSL VPN client certificate restrictive.
    groups Sequence[GetSettingsAuthenticationRuleGroup]
    User groups. The structure of groups block is documented below.
    id int
    ID (0 - 4294967295).
    portal str
    SSL VPN portal.
    realm str
    SSL VPN realm.
    source_address6_negate str
    Enable/disable negated source IPv6 address match.
    source_address6s Sequence[GetSettingsAuthenticationRuleSourceAddress6]
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    source_address_negate str
    Enable/disable negated source address match.
    source_addresses Sequence[GetSettingsAuthenticationRuleSourceAddress]
    Source address of incoming traffic. The structure of source_address block is documented below.
    source_interfaces Sequence[GetSettingsAuthenticationRuleSourceInterface]
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    user_peer str
    Name of user peer.
    users Sequence[GetSettingsAuthenticationRuleUser]
    User name. The structure of users block is documented below.
    auth String
    SSL VPN authentication method restriction.
    cipher String
    SSL VPN cipher strength.
    clientCert String
    Enable/disable SSL VPN client certificate restrictive.
    groups List<Property Map>
    User groups. The structure of groups block is documented below.
    id Number
    ID (0 - 4294967295).
    portal String
    SSL VPN portal.
    realm String
    SSL VPN realm.
    sourceAddress6Negate String
    Enable/disable negated source IPv6 address match.
    sourceAddress6s List<Property Map>
    IPv6 source address of incoming traffic. The structure of source_address6 block is documented below.
    sourceAddressNegate String
    Enable/disable negated source address match.
    sourceAddresses List<Property Map>
    Source address of incoming traffic. The structure of source_address block is documented below.
    sourceInterfaces List<Property Map>
    SSL VPN source interface of incoming traffic. The structure of source_interface block is documented below.
    userPeer String
    Name of user peer.
    users List<Property Map>
    User name. The structure of users block is documented below.

    GetSettingsAuthenticationRuleGroup

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    GetSettingsAuthenticationRuleSourceAddress

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    GetSettingsAuthenticationRuleSourceAddress6

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    GetSettingsAuthenticationRuleSourceInterface

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    GetSettingsAuthenticationRuleUser

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    GetSettingsSourceAddress

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    GetSettingsSourceAddress6

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    GetSettingsSourceInterface

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    GetSettingsTunnelIpPool

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    GetSettingsTunnelIpv6Pool

    Name string
    Group name.
    Name string
    Group name.
    name String
    Group name.
    name string
    Group name.
    name str
    Group name.
    name String
    Group name.

    Package Details

    Repository
    fortios pulumiverse/pulumi-fortios
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the fortios Terraform Provider.
    fortios logo
    Fortios v0.0.5 published on Tuesday, Apr 9, 2024 by pulumiverse
    pulumiverse/pulumi-fortios