The collection is the FortiOS Ansible Automation project. It includes the modules that are able to configure FortiOS and FortiGate by allowing the user to configure firewall features.
This collection is distributed via ansible-galaxy, the installation steps are as follows:
- Install or upgrade to Ansible 2.9+
- Download this collection from galaxy:
ansible-galaxy collection install fortinet.fortios
- Ansible 2.9+ is required to support the newer Ansible Collections format
- fortiosapi>=0.9.8
Tested with FOS v6.0.5
The collection provides the following modules:
fortios_alertemail_settingConfigure alert email settings in Fortinet's FortiOS and FortiGate.fortios_antivirus_heuristicConfigure global heuristic options in Fortinet's FortiOS and FortiGate.fortios_antivirus_profileConfigure AntiVirus profiles in Fortinet's FortiOS and FortiGate.fortios_antivirus_quarantineConfigure quarantine options in Fortinet's FortiOS and FortiGate.fortios_antivirus_settingsConfigure AntiVirus settings in Fortinet's FortiOS and FortiGate.fortios_application_customConfigure custom application signatures in Fortinet's FortiOS and FortiGate.fortios_application_groupConfigure firewall application groups in Fortinet's FortiOS and FortiGate.fortios_application_listConfigure application control lists in Fortinet's FortiOS and FortiGate.fortios_application_nameConfigure application signatures in Fortinet's FortiOS and FortiGate.fortios_application_rule_settingsConfigure application rule settings in Fortinet's FortiOS and FortiGate.fortios_authentication_ruleConfigure Authentication Rules in Fortinet's FortiOS and FortiGate.fortios_authentication_schemeConfigure Authentication Schemes in Fortinet's FortiOS and FortiGate.fortios_authentication_settingConfigure authentication setting in Fortinet's FortiOS and FortiGate.fortios_dlp_filepatternConfigure file patterns used by DLP blocking in Fortinet's FortiOS and FortiGate.fortios_dlp_fp_doc_sourceCreate a DLP fingerprint database by allowing the FortiGate to access a file server containing files from which to create fingerprints in Fortinet's FortiOS and FortiGate.fortios_dlp_fp_sensitivityCreate self-explanatory DLP sensitivity levels to be used when setting sensitivity under config fp-doc-source in Fortinet's FortiOS and FortiGate.fortios_dlp_sensorConfigure DLP sensors in Fortinet's FortiOS and FortiGate.fortios_dlp_settingsDesignate logical storage for DLP fingerprint database in Fortinet's FortiOS and FortiGate.fortios_dnsfilter_domain_filterConfigure DNS domain filters in Fortinet's FortiOS and FortiGate.fortios_dnsfilter_profileConfigure DNS domain filter profiles in Fortinet's FortiOS and FortiGate.fortios_endpoint_control_clientConfigure endpoint control client lists in Fortinet's FortiOS and FortiGate.fortios_endpoint_control_forticlient_emsConfigure FortiClient Enterprise Management Server (EMS) entries in Fortinet's FortiOS and FortiGate.fortios_endpoint_control_forticlient_registration_syncConfigure FortiClient registration synchronization settings in Fortinet's FortiOS and FortiGate.fortios_endpoint_control_profileConfigure FortiClient endpoint control profiles in Fortinet's FortiOS and FortiGate.fortios_endpoint_control_settingsConfigure endpoint control settings in Fortinet's FortiOS and FortiGate.fortios_extender_controller_extenderExtender controller configuration in Fortinet's FortiOS and FortiGate.fortios_factsGet facts about fortios devices.fortios_firewall_addressConfigure IPv4 addresses in Fortinet's FortiOS and FortiGate.fortios_firewall_address6_templateConfigure IPv6 address templates in Fortinet's FortiOS and FortiGate.fortios_firewall_address6Configure IPv6 firewall addresses in Fortinet's FortiOS and FortiGate.fortios_firewall_addrgrpConfigure IPv4 address groups in Fortinet's FortiOS and FortiGate.fortios_firewall_addrgrp6Configure IPv6 address groups in Fortinet's FortiOS and FortiGate.fortios_firewall_auth_portalConfigure firewall authentication portals in Fortinet's FortiOS and FortiGate.fortios_firewall_central_snat_mapConfigure central SNAT policies in Fortinet's FortiOS and FortiGate.fortios_firewall_dnstranslationConfigure DNS translation in Fortinet's FortiOS and FortiGate.fortios_firewall_dos_policyConfigure IPv4 DoS policies in Fortinet's FortiOS and FortiGate.fortios_firewall_dos_policy6Configure IPv6 DoS policies in Fortinet's FortiOS and FortiGate.fortios_firewall_identity_based_routeConfigure identity based routing in Fortinet's FortiOS and FortiGate.fortios_firewall_interface_policyConfigure IPv4 interface policies in Fortinet's FortiOS and FortiGate.fortios_firewall_interface_policy6Configure IPv6 interface policies in Fortinet's FortiOS and FortiGate.fortios_firewall_internet_service_customConfigure custom Internet Services in Fortinet's FortiOS and FortiGate.fortios_firewall_internet_service_groupConfigure group of Internet Service in Fortinet's FortiOS and FortiGate.fortios_firewall_internet_serviceShow Internet Service application in Fortinet's FortiOS and FortiGate.fortios_firewall_ip_translationConfigure firewall IP-translation in Fortinet's FortiOS and FortiGate.fortios_firewall_ipmacbinding_settingConfigure IP to MAC binding settings in Fortinet's FortiOS and FortiGate.fortios_firewall_ipmacbinding_tableConfigure IP to MAC address pairs in the IP/MAC binding table in Fortinet's FortiOS and FortiGate.fortios_firewall_ippoolConfigure IPv4 IP pools in Fortinet's FortiOS and FortiGate.fortios_firewall_ippool6Configure IPv6 IP pools in Fortinet's FortiOS and FortiGate.fortios_firewall_ipv6_eh_filterConfigure IPv6 extension header filter in Fortinet's FortiOS and FortiGate.fortios_firewall_ldb_monitorConfigure server load balancing health monitors in Fortinet's FortiOS and FortiGate.fortios_firewall_local_in_policyConfigure user defined IPv4 local-in policies in Fortinet's FortiOS and FortiGate.fortios_firewall_local_in_policy6Configure user defined IPv6 local-in policies in Fortinet's FortiOS and FortiGate.fortios_firewall_multicast_addressConfigure multicast addresses in Fortinet's FortiOS and FortiGate.fortios_firewall_multicast_address6Configure IPv6 multicast address in Fortinet's FortiOS and FortiGate.fortios_firewall_multicast_policyConfigure multicast NAT policies in Fortinet's FortiOS and FortiGate.fortios_firewall_multicast_policy6Configure IPv6 multicast NAT policies in Fortinet's FortiOS and FortiGate.fortios_firewall_policyConfigure IPv4 policies in Fortinet's FortiOS and FortiGate.fortios_firewall_policy46Configure IPv4 to IPv6 policies in Fortinet's FortiOS and FortiGate.fortios_firewall_policy6Configure IPv6 policies in Fortinet's FortiOS and FortiGate.fortios_firewall_policy64Configure IPv6 to IPv4 policies in Fortinet's FortiOS and FortiGate.fortios_firewall_profile_groupConfigure profile groups in Fortinet's FortiOS and FortiGate.fortios_firewall_profile_protocol_optionsConfigure protocol options in Fortinet's FortiOS and FortiGate.fortios_firewall_proxy_addressWeb proxy address configuration in Fortinet's FortiOS and FortiGate.fortios_firewall_proxy_addrgrpWeb proxy address group configuration in Fortinet's FortiOS and FortiGate.fortios_firewall_proxy_policyConfigure proxy policies in Fortinet's FortiOS and FortiGate.fortios_firewall_schedule_groupSchedule group configuration in Fortinet's FortiOS and FortiGate.fortios_firewall_schedule_onetimeOnetime schedule configuration in Fortinet's FortiOS and FortiGate.fortios_firewall_schedule_recurringRecurring schedule configuration in Fortinet's FortiOS and FortiGate.fortios_firewall_service_categoryConfigure service categories in Fortinet's FortiOS and FortiGate.fortios_firewall_service_customConfigure custom services in Fortinet's FortiOS and FortiGate.fortios_firewall_service_groupConfigure service groups in Fortinet's FortiOS and FortiGate.fortios_firewall_shaper_per_ip_shaperConfigure per-IP traffic shaper in Fortinet's FortiOS and FortiGate.fortios_firewall_shaper_traffic_shaperConfigure shared traffic shaper in Fortinet's FortiOS and FortiGate.fortios_firewall_shaping_policyConfigure shaping policies in Fortinet's FortiOS and FortiGate.fortios_firewall_shaping_profileConfigure shaping profiles in Fortinet's FortiOS and FortiGate.fortios_firewall_snifferConfigure sniffer in Fortinet's FortiOS and FortiGate.fortios_firewall_ssh_host_keySSH proxy host public keys in Fortinet's FortiOS and FortiGate.fortios_firewall_ssh_local_caSSH proxy local CA in Fortinet's FortiOS and FortiGate.fortios_firewall_ssh_local_keySSH proxy local keys in Fortinet's FortiOS and FortiGate.fortios_firewall_ssh_settingSSH proxy settings in Fortinet's FortiOS and FortiGate.fortios_firewall_ssl_serverConfigure SSL servers in Fortinet's FortiOS and FortiGate.fortios_firewall_ssl_settingSSL proxy settings in Fortinet's FortiOS and FortiGate.fortios_firewall_ssl_ssh_profileConfigure SSL/SSH protocol options in Fortinet's FortiOS and FortiGate.fortios_firewall_ttl_policyConfigure TTL policies in Fortinet's FortiOS and FortiGate.fortios_firewall_vipConfigure virtual IP for IPv4 in Fortinet's FortiOS and FortiGate.fortios_firewall_vip46Configure IPv4 to IPv6 virtual IPs in Fortinet's FortiOS and FortiGate.fortios_firewall_vip6Configure virtual IP for IPv6 in Fortinet's FortiOS and FortiGate.fortios_firewall_vip64Configure IPv6 to IPv4 virtual IPs in Fortinet's FortiOS and FortiGate.fortios_firewall_vipgrpConfigure IPv4 virtual IP groups in Fortinet's FortiOS and FortiGate.fortios_firewall_vipgrp46Configure IPv4 to IPv6 virtual IP groups in Fortinet's FortiOS and FortiGate.fortios_firewall_vipgrp6Configure IPv6 virtual IP groups in Fortinet's FortiOS and FortiGate.fortios_firewall_vipgrp64Configure IPv6 to IPv4 virtual IP groups in Fortinet's FortiOS and FortiGate.fortios_firewall_wildcard_fqdn_customConfig global/VDOM Wildcard FQDN address in Fortinet's FortiOS and FortiGate.fortios_firewall_wildcard_fqdn_groupConfig global Wildcard FQDN address groups in Fortinet's FortiOS and FortiGate.fortios_ftp_proxy_explicitConfigure explicit FTP proxy settings in Fortinet's FortiOS and FortiGate.fortios_icap_profileConfigure ICAP profiles in Fortinet's FortiOS and FortiGate.fortios_icap_serverConfigure ICAP servers in Fortinet's FortiOS and FortiGate.fortios_ips_customConfigure IPS custom signature in Fortinet's FortiOS and FortiGate.fortios_ips_decoderConfigure IPS decoder in Fortinet's FortiOS and FortiGate.fortios_ips_globalConfigure IPS global parameter in Fortinet's FortiOS and FortiGate.fortios_ips_rule_settingsConfigure IPS rule setting in Fortinet's FortiOS and FortiGate.fortios_ips_ruleConfigure IPS rules in Fortinet's FortiOS and FortiGate.fortios_ips_sensorConfigure IPS sensor in Fortinet's FortiOS and FortiGate.fortios_ips_settingsConfigure IPS VDOM parameter in Fortinet's FortiOS and FortiGate.fortios_log_custom_fieldConfigure custom log fields in Fortinet's FortiOS and FortiGate.fortios_log_disk_filterConfigure filters for local disk logging. Use these filters to determine the log messages to record according to severity and type in Fortinet's FortiOS and FortiGate.fortios_log_disk_settingSettings for local disk logging in Fortinet's FortiOS and FortiGate.fortios_log_eventfilterConfigure log event filters in Fortinet's FortiOS and FortiGate.fortios_log_fortianalyzer_filterFilters for FortiAnalyzer in Fortinet's FortiOS and FortiGate.fortios_log_fortianalyzer_override_filterOverride filters for FortiAnalyzer in Fortinet's FortiOS and FortiGate.fortios_log_fortianalyzer_override_settingOverride FortiAnalyzer settings in Fortinet's FortiOS and FortiGate.fortios_log_fortianalyzer_settingGlobal FortiAnalyzer settings in Fortinet's FortiOS and FortiGate.fortios_log_fortianalyzer2_filterFilters for FortiAnalyzer in Fortinet's FortiOS and FortiGate.fortios_log_fortianalyzer2_settingGlobal FortiAnalyzer settings in Fortinet's FortiOS and FortiGate.fortios_log_fortianalyzer3_filterFilters for FortiAnalyzer in Fortinet's FortiOS and FortiGate.fortios_log_fortianalyzer3_settingGlobal FortiAnalyzer settings in Fortinet's FortiOS and FortiGate.fortios_log_fortiguard_filterFilters for FortiCloud in Fortinet's FortiOS and FortiGate.fortios_log_fortiguard_override_filterOverride filters for FortiCloud in Fortinet's FortiOS and FortiGate.fortios_log_fortiguard_override_settingOverride global FortiCloud logging settings for this VDOM in Fortinet's FortiOS and FortiGate.fortios_log_fortiguard_settingConfigure logging to FortiCloud in Fortinet's FortiOS and FortiGate.fortios_log_gui_displayConfigure how log messages are displayed on the GUI in Fortinet's FortiOS and FortiGate.fortios_log_memory_filterFilters for memory buffer in Fortinet's FortiOS and FortiGate.fortios_log_memory_global_settingGlobal settings for memory logging in Fortinet's FortiOS and FortiGate.fortios_log_memory_settingSettings for memory buffer in Fortinet's FortiOS and FortiGate.fortios_log_null_device_filterFilters for null device logging in Fortinet's FortiOS and FortiGate.fortios_log_null_device_settingSettings for null device logging in Fortinet's FortiOS and FortiGate.fortios_log_settingConfigure general log settings in Fortinet's FortiOS and FortiGate.fortios_log_syslogd_filterFilters for remote system server in Fortinet's FortiOS and FortiGate.fortios_log_syslogd_override_filterOverride filters for remote system server in Fortinet's FortiOS and FortiGate.fortios_log_syslogd_override_settingOverride settings for remote syslog server in Fortinet's FortiOS and FortiGate.fortios_log_syslogd_settingGlobal settings for remote syslog server in Fortinet's FortiOS and FortiGate.fortios_log_syslogd2_filterFilters for remote system server in Fortinet's FortiOS and FortiGate.fortios_log_syslogd2_settingGlobal settings for remote syslog server in Fortinet's FortiOS and FortiGate.fortios_log_syslogd3_filterFilters for remote system server in Fortinet's FortiOS and FortiGate.fortios_log_syslogd3_settingGlobal settings for remote syslog server in Fortinet's FortiOS and FortiGate.fortios_log_syslogd4_filterFilters for remote system server in Fortinet's FortiOS and FortiGate.fortios_log_syslogd4_settingGlobal settings for remote syslog server in Fortinet's FortiOS and FortiGate.fortios_log_threat_weightConfigure threat weight settings in Fortinet's FortiOS and FortiGate.fortios_log_webtrends_filterFilters for WebTrends in Fortinet's FortiOS and FortiGate.fortios_log_webtrends_settingSettings for WebTrends in Fortinet's FortiOS and FortiGate.fortios_report_chartReport chart widget configuration in Fortinet's FortiOS and FortiGate.fortios_report_datasetReport dataset configuration in Fortinet's FortiOS and FortiGate.fortios_report_layoutReport layout configuration in Fortinet's FortiOS and FortiGate.fortios_report_settingReport setting configuration in Fortinet's FortiOS and FortiGate.fortios_report_styleReport style configuration in Fortinet's FortiOS and FortiGate.fortios_report_themeReport themes configuration in Fortinet's FortiOS and FortiGate.fortios_router_access_listConfigure access lists in Fortinet's FortiOS and FortiGate.fortios_router_access_list6Configure IPv6 access lists in Fortinet's FortiOS and FortiGate.fortios_router_aspath_listConfigure Autonomous System (AS) path lists in Fortinet's FortiOS and FortiGate.fortios_router_auth_pathConfigure authentication based routing in Fortinet's FortiOS and FortiGate.fortios_router_bfdConfigure BFD in Fortinet's FortiOS and FortiGate.fortios_router_bfd6Configure IPv6 BFD in Fortinet's FortiOS and FortiGate.fortios_router_bgpConfigure BGP in Fortinet's FortiOS and FortiGate.fortios_router_community_listConfigure community lists in Fortinet's FortiOS and FortiGate.fortios_router_isisConfigure IS-IS in Fortinet's FortiOS and FortiGate.fortios_router_key_chainConfigure key-chain in Fortinet's FortiOS and FortiGate.fortios_router_multicast_flowConfigure multicast-flow in Fortinet's FortiOS and FortiGate.fortios_router_multicastConfigure router multicast in Fortinet's FortiOS and FortiGate.fortios_router_multicast6Configure IPv6 multicast in Fortinet's FortiOS and FortiGate.fortios_router_ospfConfigure OSPF in Fortinet's FortiOS and FortiGate.fortios_router_ospf6Configure IPv6 OSPF in Fortinet's FortiOS and FortiGate.fortios_router_policyConfigure IPv4 routing policies in Fortinet's FortiOS and FortiGate.fortios_router_policy6Configure IPv6 routing policies in Fortinet's FortiOS and FortiGate.fortios_router_prefix_listConfigure IPv4 prefix lists in Fortinet's FortiOS and FortiGate.fortios_router_prefix_list6Configure IPv6 prefix lists in Fortinet's FortiOS and FortiGate.fortios_router_ripConfigure RIP in Fortinet's FortiOS and FortiGate.fortios_router_ripngConfigure RIPng in Fortinet's FortiOS and FortiGate.fortios_router_route_mapConfigure route maps in Fortinet's FortiOS and FortiGate.fortios_router_settingConfigure router settings in Fortinet's FortiOS and FortiGate.fortios_router_staticConfigure IPv4 static routing tables in Fortinet's FortiOS and FortiGate.fortios_router_static6Configure IPv6 static routing tables in Fortinet's FortiOS and FortiGate.fortios_spamfilter_bwlConfigure anti-spam black/white list in Fortinet's FortiOS and FortiGate.fortios_spamfilter_bwordConfigure AntiSpam banned word list in Fortinet's FortiOS and FortiGate.fortios_spamfilter_dnsblConfigure AntiSpam DNSBL/ORBL in Fortinet's FortiOS and FortiGate.fortios_spamfilter_fortishieldConfigure FortiGuard - AntiSpam in Fortinet's FortiOS and FortiGate.fortios_spamfilter_iptrustConfigure AntiSpam IP trust in Fortinet's FortiOS and FortiGate.fortios_spamfilter_mheaderConfigure AntiSpam MIME header in Fortinet's FortiOS and FortiGate.fortios_spamfilter_optionsConfigure AntiSpam options in Fortinet's FortiOS and FortiGate.fortios_spamfilter_profileConfigure AntiSpam profiles in Fortinet's FortiOS and FortiGate.fortios_ssh_filter_profileSSH filter profile in Fortinet's FortiOS and FortiGate.fortios_switch_controller_802_1x_settingsConfigure global 802.1X settings in Fortinet's FortiOS and FortiGate.fortios_switch_controller_custom_commandConfigure the FortiGate switch controller to send custom commands to managed FortiSwitch devices in Fortinet's FortiOS and FortiGate.fortios_switch_controller_globalConfigure FortiSwitch global settings in Fortinet's FortiOS and FortiGate.fortios_switch_controller_igmp_snoopingConfigure FortiSwitch IGMP snooping global settings in Fortinet's FortiOS and FortiGate.fortios_switch_controller_lldp_profileConfigure FortiSwitch LLDP profiles in Fortinet's FortiOS and FortiGate.fortios_switch_controller_lldp_settingsConfigure FortiSwitch LLDP settings in Fortinet's FortiOS and FortiGate.fortios_switch_controller_mac_sync_settingsConfigure global MAC synchronization settings in Fortinet's FortiOS and FortiGate.fortios_switch_controller_managed_switchConfigure FortiSwitch devices that are managed by this FortiGate in Fortinet's FortiOS and FortiGate.fortios_switch_controller_network_monitor_settingsConfigure network monitor settings in Fortinet's FortiOS and FortiGate.fortios_switch_controller_qos_dot1p_mapConfigure FortiSwitch QoS 802.1p in Fortinet's FortiOS and FortiGate.fortios_switch_controller_qos_ip_dscp_mapConfigure FortiSwitch QoS IP precedence/DSCP in Fortinet's FortiOS and FortiGate.fortios_switch_controller_qos_qos_policyConfigure FortiSwitch QoS policy in Fortinet's FortiOS and FortiGate.fortios_switch_controller_qos_queue_policyConfigure FortiSwitch QoS egress queue policy in Fortinet's FortiOS and FortiGate.fortios_switch_controller_quarantineConfigure FortiSwitch quarantine support in Fortinet's FortiOS and FortiGate.fortios_switch_controller_security_policy_802_1xConfigure 802.1x MAC Authentication Bypass (MAB) policies in Fortinet's FortiOS and FortiGate.fortios_switch_controller_security_policy_captive_portalNames of VLANs that use captive portal authentication in Fortinet's FortiOS and FortiGate.fortios_switch_controller_sflowConfigure FortiSwitch sFlow in Fortinet's FortiOS and FortiGate.fortios_switch_controller_storm_controlConfigure FortiSwitch storm control in Fortinet's FortiOS and FortiGate.fortios_switch_controller_stp_settingsConfigure FortiSwitch spanning tree protocol (STP) in Fortinet's FortiOS and FortiGate.fortios_switch_controller_switch_groupConfigure FortiSwitch switch groups in Fortinet's FortiOS and FortiGate.fortios_switch_controller_switch_interface_tagConfigure switch object tags in Fortinet's FortiOS and FortiGate.fortios_switch_controller_switch_logConfigure FortiSwitch logging (logs are transferred to and inserted into FortiGate event log) in Fortinet's FortiOS and FortiGate.fortios_switch_controller_switch_profileConfigure FortiSwitch switch profile in Fortinet's FortiOS and FortiGate.fortios_switch_controller_systemConfigure system-wide switch controller settings in Fortinet's FortiOS and FortiGate.fortios_switch_controller_virtual_port_poolConfigure virtual pool in Fortinet's FortiOS and FortiGate.fortios_switch_controller_vlanConfigure VLANs for switch controller in Fortinet's FortiOS and FortiGate.fortios_system_accprofileConfigure access profiles for system administrators in Fortinet's FortiOS and FortiGate.fortios_system_adminConfigure admin users in Fortinet's FortiOS and FortiGate.fortios_system_affinity_interruptConfigure interrupt affinity in Fortinet's FortiOS and FortiGate.fortios_system_affinity_packet_redistributionConfigure packet redistribution in Fortinet's FortiOS and FortiGate.fortios_system_alarmConfigure alarm in Fortinet's FortiOS and FortiGate.fortios_system_aliasConfigure alias command in Fortinet's FortiOS and FortiGate.fortios_system_api_userConfigure API users in Fortinet's FortiOS and FortiGate.fortios_system_arp_tableConfigure ARP table in Fortinet's FortiOS and FortiGate.fortios_system_auto_installConfigure USB auto installation in Fortinet's FortiOS and FortiGate.fortios_system_auto_scriptConfigure auto script in Fortinet's FortiOS and FortiGate.fortios_system_automation_actionAction for automation stitches in Fortinet's FortiOS and FortiGate.fortios_system_automation_destinationAutomation destinations in Fortinet's FortiOS and FortiGate.fortios_system_automation_stitchAutomation stitches in Fortinet's FortiOS and FortiGate.fortios_system_automation_triggerTrigger for automation stitches in Fortinet's FortiOS and FortiGate.fortios_system_autoupdate_push_updateConfigure push updates in Fortinet's FortiOS and FortiGate.fortios_system_autoupdate_scheduleConfigure update schedule in Fortinet's FortiOS and FortiGate.fortios_system_autoupdate_tunnelingConfigure web proxy tunnelling for the FDN in Fortinet's FortiOS and FortiGate.fortios_system_central_managementConfigure central management in Fortinet's FortiOS and FortiGate.fortios_system_cluster_syncConfigure FortiGate Session Life Support Protocol (FGSP) session synchronization in Fortinet's FortiOS and FortiGate.fortios_system_consoleConfigure console in Fortinet's FortiOS and FortiGate.fortios_system_csfAdd this FortiGate to a Security Fabric or set up a new Security Fabric on this FortiGate in Fortinet's FortiOS and FortiGate.fortios_system_custom_languageConfigure custom languages in Fortinet's FortiOS and FortiGate.fortios_system_ddnsConfigure DDNS in Fortinet's FortiOS and FortiGate.fortios_system_dedicated_mgmtConfigure dedicated management in Fortinet's FortiOS and FortiGate.fortios_system_dhcp_serverConfigure DHCP servers in Fortinet's FortiOS and FortiGate.fortios_system_dhcp6_serverConfigure DHCPv6 servers in Fortinet's FortiOS and FortiGate.fortios_system_dns_databaseConfigure DNS databases in Fortinet's FortiOS and FortiGate.fortios_system_dns_serverConfigure DNS servers in Fortinet's FortiOS and FortiGate.fortios_system_dnsConfigure DNS in Fortinet's FortiOS and FortiGate.fortios_system_dscp_based_priorityConfigure DSCP based priority table in Fortinet's FortiOS and FortiGate.fortios_system_email_serverConfigure the email server used by the FortiGate various things. For example, for sending email messages to users to support user authentication features in Fortinet's FortiOS and FortiGate.fortios_system_external_resourceConfigure external resource in Fortinet's FortiOS and FortiGate.fortios_system_fips_ccConfigure FIPS-CC mode in Fortinet's FortiOS and FortiGate.fortios_system_firmware_upgradePerform firmware upgrade on FortiGate or FortiOS (FOS) device.fortios_system_fmConfigure FM in Fortinet's FortiOS and FortiGate.fortios_system_fortiguardConfigure FortiGuard services in Fortinet's FortiOS and FortiGate.fortios_system_fortimanagerConfigure FortiManager in Fortinet's FortiOS and FortiGate.fortios_system_fortisandboxConfigure FortiSandbox in Fortinet's FortiOS and FortiGate.fortios_system_fsso_pollingConfigure Fortinet Single Sign On (FSSO) server in Fortinet's FortiOS and FortiGate.fortios_system_ftm_pushConfigure FortiToken Mobile push services in Fortinet's FortiOS and FortiGate.fortios_system_geoip_overrideConfigure geographical location mapping for IP address(es) to override mappings from FortiGuard in Fortinet's FortiOS and FortiGate.fortios_system_globalConfigure global attributes in Fortinet's FortiOS and FortiGate.fortios_system_gre_tunnelConfigure GRE tunnel in Fortinet's FortiOS and FortiGate.fortios_system_ha_monitorConfigure HA monitor in Fortinet's FortiOS and FortiGate.fortios_system_haConfigure HA in Fortinet's FortiOS and FortiGate.fortios_system_interfaceConfigure interfaces in Fortinet's FortiOS and FortiGate.fortios_system_ipip_tunnelConfigure IP in IP Tunneling in Fortinet's FortiOS and FortiGate.fortios_system_ips_urlfilter_dnsConfigure IPS URL filter DNS servers in Fortinet's FortiOS and FortiGate.fortios_system_ips_urlfilter_dns6Configure IPS URL filter IPv6 DNS servers in Fortinet's FortiOS and FortiGate.fortios_system_ipv6_neighbor_cacheConfigure IPv6 neighbor cache table in Fortinet's FortiOS and FortiGate.fortios_system_ipv6_tunnelConfigure IPv6/IPv4 in IPv6 tunnel in Fortinet's FortiOS and FortiGate.fortios_system_link_monitorConfigure Link Health Monitor in Fortinet's FortiOS and FortiGate.fortios_system_mac_address_tableConfigure MAC address tables in Fortinet's FortiOS and FortiGate.fortios_system_management_tunnelManagement tunnel configuration in Fortinet's FortiOS and FortiGate.fortios_system_mobile_tunnelConfigure Mobile tunnels, an implementation of Network Mobility (NEMO) extensions for Mobile IPv4 RFC5177 in Fortinet's FortiOS and FortiGate.fortios_system_nat64Configure NAT64 in Fortinet's FortiOS and FortiGate.fortios_system_nd_proxyConfigure IPv6 neighbor discovery proxy (RFC4389) in Fortinet's FortiOS and FortiGate.fortios_system_netflowConfigure NetFlow in Fortinet's FortiOS and FortiGate.fortios_system_network_visibilityConfigure network visibility settings in Fortinet's FortiOS and FortiGate.fortios_system_ntpConfigure system NTP information in Fortinet's FortiOS and FortiGate.fortios_system_object_taggingConfigure object tagging in Fortinet's FortiOS and FortiGate.fortios_system_password_policy_guest_adminConfigure the password policy for guest administrators in Fortinet's FortiOS and FortiGate.fortios_system_password_policyConfigure password policy for locally defined administrator passwords and IPsec VPN pre-shared keys in Fortinet's FortiOS and FortiGate.fortios_system_pppoe_interfaceConfigure the PPPoE interfaces in Fortinet's FortiOS and FortiGate.fortios_system_probe_responseConfigure system probe response in Fortinet's FortiOS and FortiGate.fortios_system_proxy_arpConfigure proxy-ARP in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_adminReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_alertmailReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_authReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_device_detection_portalReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_ecReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_fortiguard_wfReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_ftpReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_groupConfigure replacement message groups in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_httpReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_icapReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_imageConfigure replacement message images in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_mailReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_nac_quarReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_nntpReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_spamReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_sslvpnReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_traffic_quotaReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_utmReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_replacemsg_webproxyReplacement messages in Fortinet's FortiOS and FortiGate.fortios_system_resource_limitsConfigure resource limits in Fortinet's FortiOS and FortiGate.fortios_system_sdn_connectorConfigure connection to SDN Connector in Fortinet's FortiOS and FortiGate.fortios_system_session_helperConfigure session helper in Fortinet's FortiOS and FortiGate.fortios_system_session_ttlConfigure global session TTL timers for this FortiGate in Fortinet's FortiOS and FortiGate.fortios_system_settingsConfigure VDOM settings in Fortinet's FortiOS and FortiGate.fortios_system_sflowConfigure sFlow in Fortinet's FortiOS and FortiGate.fortios_system_sit_tunnelConfigure IPv6 tunnel over IPv4 in Fortinet's FortiOS and FortiGate.fortios_system_sms_serverConfigure SMS server for sending SMS messages to support user authentication in Fortinet's FortiOS and FortiGate.fortios_system_snmp_communitySNMP community configuration in Fortinet's FortiOS and FortiGate.fortios_system_snmp_sysinfoSNMP system info configuration in Fortinet's FortiOS and FortiGate.fortios_system_snmp_userSNMP user configuration in Fortinet's FortiOS and FortiGate.fortios_system_storageConfigure logical storage in Fortinet's FortiOS and FortiGate.fortios_system_switch_interfaceConfigure software switch interfaces by grouping physical and WiFi interfaces in Fortinet's FortiOS and FortiGate.fortios_system_tos_based_priorityConfigure Type of Service (ToS) based priority table to set network traffic priorities in Fortinet's FortiOS and FortiGate.fortios_system_vdom_dnsConfigure DNS servers for a non-management VDOM in Fortinet's FortiOS and FortiGate.fortios_system_vdom_exceptionGlobal configuration objects that can be configured independently for all VDOMs or for the defined VDOM scope in Fortinet's FortiOS and FortiGate.fortios_system_vdom_linkConfigure VDOM links in Fortinet's FortiOS and FortiGate.fortios_system_vdom_netflowConfigure NetFlow per VDOM in Fortinet's FortiOS and FortiGate.fortios_system_vdom_propertyConfigure VDOM property in Fortinet's FortiOS and FortiGate.fortios_system_vdom_radius_serverConfigure a RADIUS server to use as a RADIUS Single Sign On (RSSO) server for this VDOM in Fortinet's FortiOS and FortiGate.fortios_system_vdom_sflowConfigure sFlow per VDOM to add or change the IP address and UDP port that FortiGate sFlow agents in this VDOM use to send sFlow datagrams to an sFlow collector in Fortinet's FortiOS and FortiGate.fortios_system_vdomConfigure virtual domain in Fortinet's FortiOS and FortiGate.fortios_system_virtual_wan_linkConfigure redundant internet connections using SD-WAN (formerly virtual WAN link) in Fortinet's FortiOS and FortiGate.fortios_system_virtual_wire_pairConfigure virtual wire pairs in Fortinet's FortiOS and FortiGate.fortios_system_vxlanConfigure VXLAN devices in Fortinet's FortiOS and FortiGate.fortios_system_wccpConfigure WCCP in Fortinet's FortiOS and FortiGate.fortios_system_zoneConfigure zones to group two or more interfaces. When a zone is created you can configure policies for the zone instead of individual interfaces in the zone in Fortinet's FortiOS and FortiGate.fortios_user_adgrpConfigure FSSO groups in Fortinet's FortiOS and FortiGate.fortios_user_device_access_listConfigure device access control lists in Fortinet's FortiOS and FortiGate.fortios_user_device_categoryConfigure device categories in Fortinet's FortiOS and FortiGate.fortios_user_device_groupConfigure device groups in Fortinet's FortiOS and FortiGate.fortios_user_deviceConfigure devices in Fortinet's FortiOS and FortiGate.fortios_user_domain_controllerConfigure domain controller entries in Fortinet's FortiOS and FortiGate.fortios_user_fortitokenConfigure FortiToken in Fortinet's FortiOS and FortiGate.fortios_user_fsso_pollingConfigure FSSO active directory servers for polling mode in Fortinet's FortiOS and FortiGate.fortios_user_fssoConfigure Fortinet Single Sign On (FSSO) agents in Fortinet's FortiOS and FortiGate.fortios_user_groupConfigure user groups in Fortinet's FortiOS and FortiGate.fortios_user_krb_keytabConfigure Kerberos keytab entries in Fortinet's FortiOS and FortiGate.fortios_user_ldapConfigure LDAP server entries in Fortinet's FortiOS and FortiGate.fortios_user_localConfigure local users in Fortinet's FortiOS and FortiGate.fortios_user_password_policyConfigure user password policy in Fortinet's FortiOS and FortiGate.fortios_user_peerConfigure peer users in Fortinet's FortiOS and FortiGate.fortios_user_peergrpConfigure peer groups in Fortinet's FortiOS and FortiGate.fortios_user_pop3POP3 server entry configuration in Fortinet's FortiOS and FortiGate.fortios_user_quarantineConfigure quarantine support in Fortinet's FortiOS and FortiGate.fortios_user_radiusConfigure RADIUS server entries in Fortinet's FortiOS and FortiGate.fortios_user_security_exempt_listConfigure security exemption list in Fortinet's FortiOS and FortiGate.fortios_user_settingConfigure user authentication setting in Fortinet's FortiOS and FortiGate.fortios_user_tacacsplusConfigure TACACS+ server entries in Fortinet's FortiOS and FortiGate.fortios_voip_profileConfigure VoIP profiles in Fortinet's FortiOS and FortiGate.fortios_vpn_certificate_caCA certificate in Fortinet's FortiOS and FortiGate.fortios_vpn_certificate_crlCertificate Revocation List as a PEM file in Fortinet's FortiOS and FortiGate.fortios_vpn_certificate_localLocal keys and certificates in Fortinet's FortiOS and FortiGate.fortios_vpn_certificate_ocsp_serverOCSP server configuration in Fortinet's FortiOS and FortiGate.fortios_vpn_certificate_remoteRemote certificate as a PEM file in Fortinet's FortiOS and FortiGate.fortios_vpn_certificate_settingVPN certificate setting in Fortinet's FortiOS and FortiGate.fortios_vpn_ipsec_concentratorConcentrator configuration in Fortinet's FortiOS and FortiGate.fortios_vpn_ipsec_forticlientConfigure FortiClient policy realm in Fortinet's FortiOS and FortiGate.fortios_vpn_ipsec_manualkey_interfaceConfigure IPsec manual keys in Fortinet's FortiOS and FortiGate.fortios_vpn_ipsec_manualkeyConfigure IPsec manual keys in Fortinet's FortiOS and FortiGate.fortios_vpn_ipsec_phase1_interfaceConfigure VPN remote gateway in Fortinet's FortiOS and FortiGate.fortios_vpn_ipsec_phase1Configure VPN remote gateway in Fortinet's FortiOS and FortiGate.fortios_vpn_ipsec_phase2_interfaceConfigure VPN autokey tunnel in Fortinet's FortiOS and FortiGate.fortios_vpn_ipsec_phase2Configure VPN autokey tunnel in Fortinet's FortiOS and FortiGate.fortios_vpn_l2tpConfigure L2TP in Fortinet's FortiOS and FortiGate.fortios_vpn_pptpConfigure PPTP in Fortinet's FortiOS and FortiGate.fortios_vpn_ssl_settingsConfigure SSL VPN in Fortinet's FortiOS and FortiGate.fortios_vpn_ssl_web_host_check_softwareSSL-VPN host check software in Fortinet's FortiOS and FortiGate.fortios_vpn_ssl_web_portalPortal in Fortinet's FortiOS and FortiGate.fortios_vpn_ssl_web_realmRealm in Fortinet's FortiOS and FortiGate.fortios_vpn_ssl_web_user_bookmarkConfigure SSL VPN user bookmark in Fortinet's FortiOS and FortiGate.fortios_vpn_ssl_web_user_group_bookmarkConfigure SSL VPN user group bookmark in Fortinet's FortiOS and FortiGate.fortios_waf_main_classHidden table for datasource in Fortinet's FortiOS and FortiGate.fortios_waf_profileWeb application firewall configuration in Fortinet's FortiOS and FortiGate.fortios_waf_signatureHidden table for datasource in Fortinet's FortiOS and FortiGate.fortios_waf_sub_classHidden table for datasource in Fortinet's FortiOS and FortiGate.fortios_wanopt_auth_groupConfigure WAN optimization authentication groups in Fortinet's FortiOS and FortiGate.fortios_wanopt_cache_serviceDesignate cache-service for wan-optimization and webcache in Fortinet's FortiOS and FortiGate.fortios_wanopt_content_delivery_network_ruleConfigure WAN optimization content delivery network rules in Fortinet's FortiOS and FortiGate.fortios_wanopt_peerConfigure WAN optimization peers in Fortinet's FortiOS and FortiGate.fortios_wanopt_profileConfigure WAN optimization profiles in Fortinet's FortiOS and FortiGate.fortios_wanopt_remote_storageConfigure a remote cache device as Web cache storage in Fortinet's FortiOS and FortiGate.fortios_wanopt_settingsConfigure WAN optimization settings in Fortinet's FortiOS and FortiGate.fortios_wanopt_webcacheConfigure global Web cache settings in Fortinet's FortiOS and FortiGate.fortios_web_proxy_debug_urlConfigure debug URL addresses in Fortinet's FortiOS and FortiGate.fortios_web_proxy_explicitConfigure explicit Web proxy settings in Fortinet's FortiOS and FortiGate.fortios_web_proxy_forward_server_groupConfigure a forward server group consisting or multiple forward servers. Supports failover and load balancing in Fortinet's FortiOS and FortiGate.fortios_web_proxy_forward_serverConfigure forward-server addresses in Fortinet's FortiOS and FortiGate.fortios_web_proxy_globalConfigure Web proxy global settings in Fortinet's FortiOS and FortiGate.fortios_web_proxy_profileConfigure web proxy profiles in Fortinet's FortiOS and FortiGate.fortios_web_proxy_url_matchExempt URLs from web proxy forwarding and caching in Fortinet's FortiOS and FortiGate.fortios_web_proxy_wispConfigure Wireless Internet service provider (WISP) servers in Fortinet's FortiOS and FortiGate.fortios_webfilter_content_headerConfigure content types used by Web filter in Fortinet's FortiOS and FortiGate.fortios_webfilter_contentConfigure Web filter banned word table in Fortinet's FortiOS and FortiGate.fortios_webfilter_fortiguardConfigure FortiGuard Web Filter service in Fortinet's FortiOS and FortiGate.fortios_webfilter_ftgd_local_catConfigure FortiGuard Web Filter local categories in Fortinet's FortiOS and FortiGate.fortios_webfilter_ftgd_local_ratingConfigure local FortiGuard Web Filter local ratings in Fortinet's FortiOS and FortiGate.fortios_webfilter_ips_urlfilter_cache_settingConfigure IPS URL filter cache settings in Fortinet's FortiOS and FortiGate.fortios_webfilter_ips_urlfilter_settingConfigure IPS URL filter settings in Fortinet's FortiOS and FortiGate.fortios_webfilter_ips_urlfilter_setting6Configure IPS URL filter settings for IPv6 in Fortinet's FortiOS and FortiGate.fortios_webfilter_overrideConfigure FortiGuard Web Filter administrative overrides in Fortinet's FortiOS and FortiGate.fortios_webfilter_profileConfigure Web filter profiles in Fortinet's FortiOS and FortiGate.fortios_webfilter_search_engineConfigure web filter search engines in Fortinet's FortiOS and FortiGate.fortios_webfilter_urlfilterConfigure URL filter lists in Fortinet's FortiOS and FortiGate.fortios_webfilterConfigure webfilter capabilities of FortiGate and FortiOS.fortios_wireless_controller_ap_statusConfigure access point status (rogue | accepted | suppressed) in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_ble_profileConfigure Bluetooth Low Energy profile in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_bonjour_profileConfigure Bonjour profiles. Bonjour is Apple's zero configuration networking protocol. Bonjour profiles allow APs and FortiAPs to connect to networks using Bonjour in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_globalConfigure wireless controller global settings in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_anqp_3gpp_cellularConfigure 3GPP public land mobile network (PLMN) in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_anqp_ip_address_typeConfigure IP address type availability in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_anqp_nai_realmConfigure network access identifier (NAI) realm in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_anqp_network_auth_typeConfigure network authentication type in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_anqp_roaming_consortiumConfigure roaming consortium in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_anqp_venue_nameConfigure venue name duple in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_h2qp_conn_capabilityConfigure connection capability in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_h2qp_operator_nameConfigure operator friendly name in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_h2qp_osu_providerConfigure online sign up (OSU) provider list in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_h2qp_wan_metricConfigure WAN metrics in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_hs_profileConfigure hotspot profile in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_iconConfigure OSU provider icon in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_hotspot20_qos_mapConfigure QoS map set in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_inter_controllerConfigure inter wireless controller operation in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_qos_profileConfigure WiFi quality of service (QoS) profiles in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_settingVDOM wireless controller configuration in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_timersConfigure CAPWAP timers in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_utm_profileConfigure UTM (Unified Threat Management) profile in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_vap_groupConfigure virtual Access Point (VAP) groups in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_vapConfigure Virtual Access Points (VAPs) in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_wids_profileConfigure wireless intrusion detection system (WIDS) profiles in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_wtp_groupConfigure WTP groups in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_wtp_profileConfigure WTP profiles or FortiAP profiles that define radio settings for manageable FortiAP platforms in Fortinet's FortiOS and FortiGate.fortios_wireless_controller_wtpConfigure Wireless Termination Points (WTPs), that is, FortiAPs or APs to be managed by FortiGate in Fortinet's FortiOS and FortiGate.
The following example is used to configure global attributes in Fortinet's FortiOS and FortiGate.
Create fw_global_set.yml with the following template:
---
- hosts: localhost
collections:
- fortinet.fortios
vars:
host: "fwhostname"
username: "fwadmin"
password: "fwpasswd"
vdom: "root"
ssl_verify: "False"
tasks:
- name: Configure global attributes.
fortios_system_global:
host: "{{ host }}"
username: "{{ username }}"
password: "{{ password }}"
vdom: "{{ vdom }}"
https: "True"
ssl_verify: "{{ ssl_verify }}"
system_global:
admintimeout: "23"
hostname: "FortiGate02"Run the test:
ansible-playbook fw_global_set.ymlThis will configure the firewall's hostname and admin timeout.