fortios.webproxy.Explicit
Explore with Pulumi AI
Configure explicit Web proxy settings.
Create Explicit Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Explicit(name: string, args?: ExplicitArgs, opts?: CustomResourceOptions);@overload
def Explicit(resource_name: str,
             args: Optional[ExplicitArgs] = None,
             opts: Optional[ResourceOptions] = None)
@overload
def Explicit(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             client_cert: Optional[str] = None,
             dynamic_sort_subtable: Optional[str] = None,
             empty_cert_action: Optional[str] = None,
             ftp_incoming_port: Optional[str] = None,
             ftp_over_http: Optional[str] = None,
             get_all_tables: Optional[str] = None,
             http_connection_mode: Optional[str] = None,
             http_incoming_port: Optional[str] = None,
             https_incoming_port: Optional[str] = None,
             https_replacement_message: Optional[str] = None,
             incoming_ip: Optional[str] = None,
             incoming_ip6: Optional[str] = None,
             ipv6_status: Optional[str] = None,
             message_upon_server_error: Optional[str] = None,
             outgoing_ip: Optional[str] = None,
             outgoing_ip6: Optional[str] = None,
             pac_file_data: Optional[str] = None,
             pac_file_name: Optional[str] = None,
             pac_file_server_port: Optional[str] = None,
             pac_file_server_status: Optional[str] = None,
             pac_file_through_https: Optional[str] = None,
             pac_file_url: Optional[str] = None,
             pac_policies: Optional[Sequence[ExplicitPacPolicyArgs]] = None,
             pref_dns_result: Optional[str] = None,
             realm: Optional[str] = None,
             sec_default_action: Optional[str] = None,
             secure_web_proxy: Optional[str] = None,
             secure_web_proxy_certs: Optional[Sequence[ExplicitSecureWebProxyCertArgs]] = None,
             socks: Optional[str] = None,
             socks_incoming_port: Optional[str] = None,
             ssl_algorithm: Optional[str] = None,
             ssl_dh_bits: Optional[str] = None,
             status: Optional[str] = None,
             strict_guest: Optional[str] = None,
             trace_auth_no_rsp: Optional[str] = None,
             unknown_http_version: Optional[str] = None,
             user_agent_detect: Optional[str] = None,
             vdomparam: Optional[str] = None)func NewExplicit(ctx *Context, name string, args *ExplicitArgs, opts ...ResourceOption) (*Explicit, error)public Explicit(string name, ExplicitArgs? args = null, CustomResourceOptions? opts = null)
public Explicit(String name, ExplicitArgs args)
public Explicit(String name, ExplicitArgs args, CustomResourceOptions options)
type: fortios:webproxy:Explicit
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ExplicitArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ExplicitArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ExplicitArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ExplicitArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ExplicitArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var fortiosExplicitResource = new Fortios.Webproxy.Explicit("fortiosExplicitResource", new()
{
    ClientCert = "string",
    DynamicSortSubtable = "string",
    EmptyCertAction = "string",
    FtpIncomingPort = "string",
    FtpOverHttp = "string",
    GetAllTables = "string",
    HttpConnectionMode = "string",
    HttpIncomingPort = "string",
    HttpsIncomingPort = "string",
    HttpsReplacementMessage = "string",
    IncomingIp = "string",
    IncomingIp6 = "string",
    Ipv6Status = "string",
    MessageUponServerError = "string",
    OutgoingIp = "string",
    OutgoingIp6 = "string",
    PacFileData = "string",
    PacFileName = "string",
    PacFileServerPort = "string",
    PacFileServerStatus = "string",
    PacFileThroughHttps = "string",
    PacFileUrl = "string",
    PacPolicies = new[]
    {
        new Fortios.Webproxy.Inputs.ExplicitPacPolicyArgs
        {
            Comments = "string",
            Dstaddrs = new[]
            {
                new Fortios.Webproxy.Inputs.ExplicitPacPolicyDstaddrArgs
                {
                    Name = "string",
                },
            },
            PacFileData = "string",
            PacFileName = "string",
            Policyid = 0,
            Srcaddr6s = new[]
            {
                new Fortios.Webproxy.Inputs.ExplicitPacPolicySrcaddr6Args
                {
                    Name = "string",
                },
            },
            Srcaddrs = new[]
            {
                new Fortios.Webproxy.Inputs.ExplicitPacPolicySrcaddrArgs
                {
                    Name = "string",
                },
            },
            Status = "string",
        },
    },
    PrefDnsResult = "string",
    Realm = "string",
    SecDefaultAction = "string",
    SecureWebProxy = "string",
    SecureWebProxyCerts = new[]
    {
        new Fortios.Webproxy.Inputs.ExplicitSecureWebProxyCertArgs
        {
            Name = "string",
        },
    },
    Socks = "string",
    SocksIncomingPort = "string",
    SslAlgorithm = "string",
    SslDhBits = "string",
    Status = "string",
    StrictGuest = "string",
    TraceAuthNoRsp = "string",
    UnknownHttpVersion = "string",
    UserAgentDetect = "string",
    Vdomparam = "string",
});
example, err := webproxy.NewExplicit(ctx, "fortiosExplicitResource", &webproxy.ExplicitArgs{
	ClientCert:              pulumi.String("string"),
	DynamicSortSubtable:     pulumi.String("string"),
	EmptyCertAction:         pulumi.String("string"),
	FtpIncomingPort:         pulumi.String("string"),
	FtpOverHttp:             pulumi.String("string"),
	GetAllTables:            pulumi.String("string"),
	HttpConnectionMode:      pulumi.String("string"),
	HttpIncomingPort:        pulumi.String("string"),
	HttpsIncomingPort:       pulumi.String("string"),
	HttpsReplacementMessage: pulumi.String("string"),
	IncomingIp:              pulumi.String("string"),
	IncomingIp6:             pulumi.String("string"),
	Ipv6Status:              pulumi.String("string"),
	MessageUponServerError:  pulumi.String("string"),
	OutgoingIp:              pulumi.String("string"),
	OutgoingIp6:             pulumi.String("string"),
	PacFileData:             pulumi.String("string"),
	PacFileName:             pulumi.String("string"),
	PacFileServerPort:       pulumi.String("string"),
	PacFileServerStatus:     pulumi.String("string"),
	PacFileThroughHttps:     pulumi.String("string"),
	PacFileUrl:              pulumi.String("string"),
	PacPolicies: webproxy.ExplicitPacPolicyArray{
		&webproxy.ExplicitPacPolicyArgs{
			Comments: pulumi.String("string"),
			Dstaddrs: webproxy.ExplicitPacPolicyDstaddrArray{
				&webproxy.ExplicitPacPolicyDstaddrArgs{
					Name: pulumi.String("string"),
				},
			},
			PacFileData: pulumi.String("string"),
			PacFileName: pulumi.String("string"),
			Policyid:    pulumi.Int(0),
			Srcaddr6s: webproxy.ExplicitPacPolicySrcaddr6Array{
				&webproxy.ExplicitPacPolicySrcaddr6Args{
					Name: pulumi.String("string"),
				},
			},
			Srcaddrs: webproxy.ExplicitPacPolicySrcaddrArray{
				&webproxy.ExplicitPacPolicySrcaddrArgs{
					Name: pulumi.String("string"),
				},
			},
			Status: pulumi.String("string"),
		},
	},
	PrefDnsResult:    pulumi.String("string"),
	Realm:            pulumi.String("string"),
	SecDefaultAction: pulumi.String("string"),
	SecureWebProxy:   pulumi.String("string"),
	SecureWebProxyCerts: webproxy.ExplicitSecureWebProxyCertArray{
		&webproxy.ExplicitSecureWebProxyCertArgs{
			Name: pulumi.String("string"),
		},
	},
	Socks:              pulumi.String("string"),
	SocksIncomingPort:  pulumi.String("string"),
	SslAlgorithm:       pulumi.String("string"),
	SslDhBits:          pulumi.String("string"),
	Status:             pulumi.String("string"),
	StrictGuest:        pulumi.String("string"),
	TraceAuthNoRsp:     pulumi.String("string"),
	UnknownHttpVersion: pulumi.String("string"),
	UserAgentDetect:    pulumi.String("string"),
	Vdomparam:          pulumi.String("string"),
})
var fortiosExplicitResource = new Explicit("fortiosExplicitResource", ExplicitArgs.builder()
    .clientCert("string")
    .dynamicSortSubtable("string")
    .emptyCertAction("string")
    .ftpIncomingPort("string")
    .ftpOverHttp("string")
    .getAllTables("string")
    .httpConnectionMode("string")
    .httpIncomingPort("string")
    .httpsIncomingPort("string")
    .httpsReplacementMessage("string")
    .incomingIp("string")
    .incomingIp6("string")
    .ipv6Status("string")
    .messageUponServerError("string")
    .outgoingIp("string")
    .outgoingIp6("string")
    .pacFileData("string")
    .pacFileName("string")
    .pacFileServerPort("string")
    .pacFileServerStatus("string")
    .pacFileThroughHttps("string")
    .pacFileUrl("string")
    .pacPolicies(ExplicitPacPolicyArgs.builder()
        .comments("string")
        .dstaddrs(ExplicitPacPolicyDstaddrArgs.builder()
            .name("string")
            .build())
        .pacFileData("string")
        .pacFileName("string")
        .policyid(0)
        .srcaddr6s(ExplicitPacPolicySrcaddr6Args.builder()
            .name("string")
            .build())
        .srcaddrs(ExplicitPacPolicySrcaddrArgs.builder()
            .name("string")
            .build())
        .status("string")
        .build())
    .prefDnsResult("string")
    .realm("string")
    .secDefaultAction("string")
    .secureWebProxy("string")
    .secureWebProxyCerts(ExplicitSecureWebProxyCertArgs.builder()
        .name("string")
        .build())
    .socks("string")
    .socksIncomingPort("string")
    .sslAlgorithm("string")
    .sslDhBits("string")
    .status("string")
    .strictGuest("string")
    .traceAuthNoRsp("string")
    .unknownHttpVersion("string")
    .userAgentDetect("string")
    .vdomparam("string")
    .build());
fortios_explicit_resource = fortios.webproxy.Explicit("fortiosExplicitResource",
    client_cert="string",
    dynamic_sort_subtable="string",
    empty_cert_action="string",
    ftp_incoming_port="string",
    ftp_over_http="string",
    get_all_tables="string",
    http_connection_mode="string",
    http_incoming_port="string",
    https_incoming_port="string",
    https_replacement_message="string",
    incoming_ip="string",
    incoming_ip6="string",
    ipv6_status="string",
    message_upon_server_error="string",
    outgoing_ip="string",
    outgoing_ip6="string",
    pac_file_data="string",
    pac_file_name="string",
    pac_file_server_port="string",
    pac_file_server_status="string",
    pac_file_through_https="string",
    pac_file_url="string",
    pac_policies=[{
        "comments": "string",
        "dstaddrs": [{
            "name": "string",
        }],
        "pac_file_data": "string",
        "pac_file_name": "string",
        "policyid": 0,
        "srcaddr6s": [{
            "name": "string",
        }],
        "srcaddrs": [{
            "name": "string",
        }],
        "status": "string",
    }],
    pref_dns_result="string",
    realm="string",
    sec_default_action="string",
    secure_web_proxy="string",
    secure_web_proxy_certs=[{
        "name": "string",
    }],
    socks="string",
    socks_incoming_port="string",
    ssl_algorithm="string",
    ssl_dh_bits="string",
    status="string",
    strict_guest="string",
    trace_auth_no_rsp="string",
    unknown_http_version="string",
    user_agent_detect="string",
    vdomparam="string")
const fortiosExplicitResource = new fortios.webproxy.Explicit("fortiosExplicitResource", {
    clientCert: "string",
    dynamicSortSubtable: "string",
    emptyCertAction: "string",
    ftpIncomingPort: "string",
    ftpOverHttp: "string",
    getAllTables: "string",
    httpConnectionMode: "string",
    httpIncomingPort: "string",
    httpsIncomingPort: "string",
    httpsReplacementMessage: "string",
    incomingIp: "string",
    incomingIp6: "string",
    ipv6Status: "string",
    messageUponServerError: "string",
    outgoingIp: "string",
    outgoingIp6: "string",
    pacFileData: "string",
    pacFileName: "string",
    pacFileServerPort: "string",
    pacFileServerStatus: "string",
    pacFileThroughHttps: "string",
    pacFileUrl: "string",
    pacPolicies: [{
        comments: "string",
        dstaddrs: [{
            name: "string",
        }],
        pacFileData: "string",
        pacFileName: "string",
        policyid: 0,
        srcaddr6s: [{
            name: "string",
        }],
        srcaddrs: [{
            name: "string",
        }],
        status: "string",
    }],
    prefDnsResult: "string",
    realm: "string",
    secDefaultAction: "string",
    secureWebProxy: "string",
    secureWebProxyCerts: [{
        name: "string",
    }],
    socks: "string",
    socksIncomingPort: "string",
    sslAlgorithm: "string",
    sslDhBits: "string",
    status: "string",
    strictGuest: "string",
    traceAuthNoRsp: "string",
    unknownHttpVersion: "string",
    userAgentDetect: "string",
    vdomparam: "string",
});
type: fortios:webproxy:Explicit
properties:
    clientCert: string
    dynamicSortSubtable: string
    emptyCertAction: string
    ftpIncomingPort: string
    ftpOverHttp: string
    getAllTables: string
    httpConnectionMode: string
    httpIncomingPort: string
    httpsIncomingPort: string
    httpsReplacementMessage: string
    incomingIp: string
    incomingIp6: string
    ipv6Status: string
    messageUponServerError: string
    outgoingIp: string
    outgoingIp6: string
    pacFileData: string
    pacFileName: string
    pacFileServerPort: string
    pacFileServerStatus: string
    pacFileThroughHttps: string
    pacFileUrl: string
    pacPolicies:
        - comments: string
          dstaddrs:
            - name: string
          pacFileData: string
          pacFileName: string
          policyid: 0
          srcaddr6s:
            - name: string
          srcaddrs:
            - name: string
          status: string
    prefDnsResult: string
    realm: string
    secDefaultAction: string
    secureWebProxy: string
    secureWebProxyCerts:
        - name: string
    socks: string
    socksIncomingPort: string
    sslAlgorithm: string
    sslDhBits: string
    status: string
    strictGuest: string
    traceAuthNoRsp: string
    unknownHttpVersion: string
    userAgentDetect: string
    vdomparam: string
Explicit Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Explicit resource accepts the following input properties:
- ClientCert string
- Enable/disable to request client certificate. Valid values: disable,enable.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- EmptyCert stringAction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- FtpIncoming stringPort 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- FtpOver stringHttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- HttpConnection stringMode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- HttpIncoming stringPort 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- HttpsIncoming stringPort 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- HttpsReplacement stringMessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- IncomingIp string
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- IncomingIp6 string
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- Ipv6Status string
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- MessageUpon stringServer Error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- OutgoingIp string
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- OutgoingIp6 string
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- PacFile stringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- PacFile stringName 
- Pac file name.
- PacFile stringServer Port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- PacFile stringServer Status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- PacFile stringThrough Https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- PacFile stringUrl 
- PAC file access URL.
- PacPolicies List<Pulumiverse.Fortios. Webproxy. Inputs. Explicit Pac Policy> 
- PAC policies. The structure of pac_policyblock is documented below.
- PrefDns stringResult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- Realm string
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- SecDefault stringAction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- SecureWeb stringProxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- SecureWeb List<Pulumiverse.Proxy Certs Fortios. Webproxy. Inputs. Explicit Secure Web Proxy Cert> 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- Socks string
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- SocksIncoming stringPort 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- SslAlgorithm string
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- SslDh stringBits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- Status string
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- StrictGuest string
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- TraceAuth stringNo Rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- UnknownHttp stringVersion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- UserAgent stringDetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- ClientCert string
- Enable/disable to request client certificate. Valid values: disable,enable.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- EmptyCert stringAction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- FtpIncoming stringPort 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- FtpOver stringHttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- HttpConnection stringMode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- HttpIncoming stringPort 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- HttpsIncoming stringPort 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- HttpsReplacement stringMessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- IncomingIp string
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- IncomingIp6 string
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- Ipv6Status string
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- MessageUpon stringServer Error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- OutgoingIp string
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- OutgoingIp6 string
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- PacFile stringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- PacFile stringName 
- Pac file name.
- PacFile stringServer Port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- PacFile stringServer Status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- PacFile stringThrough Https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- PacFile stringUrl 
- PAC file access URL.
- PacPolicies []ExplicitPac Policy Args 
- PAC policies. The structure of pac_policyblock is documented below.
- PrefDns stringResult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- Realm string
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- SecDefault stringAction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- SecureWeb stringProxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- SecureWeb []ExplicitProxy Certs Secure Web Proxy Cert Args 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- Socks string
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- SocksIncoming stringPort 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- SslAlgorithm string
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- SslDh stringBits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- Status string
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- StrictGuest string
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- TraceAuth stringNo Rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- UnknownHttp stringVersion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- UserAgent stringDetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- clientCert String
- Enable/disable to request client certificate. Valid values: disable,enable.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- emptyCert StringAction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- ftpIncoming StringPort 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- ftpOver StringHttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- httpConnection StringMode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- httpIncoming StringPort 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- httpsIncoming StringPort 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- httpsReplacement StringMessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- incomingIp String
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- incomingIp6 String
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- ipv6Status String
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- messageUpon StringServer Error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- outgoingIp String
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- outgoingIp6 String
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- pacFile StringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pacFile StringName 
- Pac file name.
- pacFile StringServer Port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- pacFile StringServer Status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- pacFile StringThrough Https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- pacFile StringUrl 
- PAC file access URL.
- pacPolicies List<ExplicitPac Policy> 
- PAC policies. The structure of pac_policyblock is documented below.
- prefDns StringResult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- realm String
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- secDefault StringAction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- secureWeb StringProxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- secureWeb List<ExplicitProxy Certs Secure Web Proxy Cert> 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- socks String
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- socksIncoming StringPort 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- sslAlgorithm String
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- sslDh StringBits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- status String
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- strictGuest String
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- traceAuth StringNo Rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- unknownHttp StringVersion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- userAgent StringDetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- clientCert string
- Enable/disable to request client certificate. Valid values: disable,enable.
- dynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- emptyCert stringAction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- ftpIncoming stringPort 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- ftpOver stringHttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- getAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- httpConnection stringMode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- httpIncoming stringPort 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- httpsIncoming stringPort 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- httpsReplacement stringMessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- incomingIp string
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- incomingIp6 string
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- ipv6Status string
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- messageUpon stringServer Error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- outgoingIp string
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- outgoingIp6 string
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- pacFile stringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pacFile stringName 
- Pac file name.
- pacFile stringServer Port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- pacFile stringServer Status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- pacFile stringThrough Https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- pacFile stringUrl 
- PAC file access URL.
- pacPolicies ExplicitPac Policy[] 
- PAC policies. The structure of pac_policyblock is documented below.
- prefDns stringResult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- realm string
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- secDefault stringAction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- secureWeb stringProxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- secureWeb ExplicitProxy Certs Secure Web Proxy Cert[] 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- socks string
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- socksIncoming stringPort 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- sslAlgorithm string
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- sslDh stringBits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- status string
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- strictGuest string
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- traceAuth stringNo Rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- unknownHttp stringVersion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- userAgent stringDetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- client_cert str
- Enable/disable to request client certificate. Valid values: disable,enable.
- dynamic_sort_ strsubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- empty_cert_ straction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- ftp_incoming_ strport 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- ftp_over_ strhttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- get_all_ strtables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- http_connection_ strmode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- http_incoming_ strport 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- https_incoming_ strport 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- https_replacement_ strmessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- incoming_ip str
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- incoming_ip6 str
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- ipv6_status str
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- message_upon_ strserver_ error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- outgoing_ip str
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- outgoing_ip6 str
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- pac_file_ strdata 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pac_file_ strname 
- Pac file name.
- pac_file_ strserver_ port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- pac_file_ strserver_ status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- pac_file_ strthrough_ https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- pac_file_ strurl 
- PAC file access URL.
- pac_policies Sequence[ExplicitPac Policy Args] 
- PAC policies. The structure of pac_policyblock is documented below.
- pref_dns_ strresult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- realm str
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- sec_default_ straction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- secure_web_ strproxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- secure_web_ Sequence[Explicitproxy_ certs Secure Web Proxy Cert Args] 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- socks str
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- socks_incoming_ strport 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- ssl_algorithm str
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- ssl_dh_ strbits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- status str
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- strict_guest str
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- trace_auth_ strno_ rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- unknown_http_ strversion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- user_agent_ strdetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- clientCert String
- Enable/disable to request client certificate. Valid values: disable,enable.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- emptyCert StringAction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- ftpIncoming StringPort 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- ftpOver StringHttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- httpConnection StringMode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- httpIncoming StringPort 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- httpsIncoming StringPort 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- httpsReplacement StringMessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- incomingIp String
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- incomingIp6 String
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- ipv6Status String
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- messageUpon StringServer Error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- outgoingIp String
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- outgoingIp6 String
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- pacFile StringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pacFile StringName 
- Pac file name.
- pacFile StringServer Port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- pacFile StringServer Status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- pacFile StringThrough Https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- pacFile StringUrl 
- PAC file access URL.
- pacPolicies List<Property Map>
- PAC policies. The structure of pac_policyblock is documented below.
- prefDns StringResult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- realm String
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- secDefault StringAction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- secureWeb StringProxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- secureWeb List<Property Map>Proxy Certs 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- socks String
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- socksIncoming StringPort 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- sslAlgorithm String
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- sslDh StringBits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- status String
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- strictGuest String
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- traceAuth StringNo Rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- unknownHttp StringVersion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- userAgent StringDetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
Outputs
All input properties are implicitly available as output properties. Additionally, the Explicit resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Explicit Resource
Get an existing Explicit resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ExplicitState, opts?: CustomResourceOptions): Explicit@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        client_cert: Optional[str] = None,
        dynamic_sort_subtable: Optional[str] = None,
        empty_cert_action: Optional[str] = None,
        ftp_incoming_port: Optional[str] = None,
        ftp_over_http: Optional[str] = None,
        get_all_tables: Optional[str] = None,
        http_connection_mode: Optional[str] = None,
        http_incoming_port: Optional[str] = None,
        https_incoming_port: Optional[str] = None,
        https_replacement_message: Optional[str] = None,
        incoming_ip: Optional[str] = None,
        incoming_ip6: Optional[str] = None,
        ipv6_status: Optional[str] = None,
        message_upon_server_error: Optional[str] = None,
        outgoing_ip: Optional[str] = None,
        outgoing_ip6: Optional[str] = None,
        pac_file_data: Optional[str] = None,
        pac_file_name: Optional[str] = None,
        pac_file_server_port: Optional[str] = None,
        pac_file_server_status: Optional[str] = None,
        pac_file_through_https: Optional[str] = None,
        pac_file_url: Optional[str] = None,
        pac_policies: Optional[Sequence[ExplicitPacPolicyArgs]] = None,
        pref_dns_result: Optional[str] = None,
        realm: Optional[str] = None,
        sec_default_action: Optional[str] = None,
        secure_web_proxy: Optional[str] = None,
        secure_web_proxy_certs: Optional[Sequence[ExplicitSecureWebProxyCertArgs]] = None,
        socks: Optional[str] = None,
        socks_incoming_port: Optional[str] = None,
        ssl_algorithm: Optional[str] = None,
        ssl_dh_bits: Optional[str] = None,
        status: Optional[str] = None,
        strict_guest: Optional[str] = None,
        trace_auth_no_rsp: Optional[str] = None,
        unknown_http_version: Optional[str] = None,
        user_agent_detect: Optional[str] = None,
        vdomparam: Optional[str] = None) -> Explicitfunc GetExplicit(ctx *Context, name string, id IDInput, state *ExplicitState, opts ...ResourceOption) (*Explicit, error)public static Explicit Get(string name, Input<string> id, ExplicitState? state, CustomResourceOptions? opts = null)public static Explicit get(String name, Output<String> id, ExplicitState state, CustomResourceOptions options)resources:  _:    type: fortios:webproxy:Explicit    get:      id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- ClientCert string
- Enable/disable to request client certificate. Valid values: disable,enable.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- EmptyCert stringAction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- FtpIncoming stringPort 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- FtpOver stringHttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- HttpConnection stringMode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- HttpIncoming stringPort 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- HttpsIncoming stringPort 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- HttpsReplacement stringMessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- IncomingIp string
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- IncomingIp6 string
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- Ipv6Status string
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- MessageUpon stringServer Error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- OutgoingIp string
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- OutgoingIp6 string
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- PacFile stringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- PacFile stringName 
- Pac file name.
- PacFile stringServer Port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- PacFile stringServer Status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- PacFile stringThrough Https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- PacFile stringUrl 
- PAC file access URL.
- PacPolicies List<Pulumiverse.Fortios. Webproxy. Inputs. Explicit Pac Policy> 
- PAC policies. The structure of pac_policyblock is documented below.
- PrefDns stringResult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- Realm string
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- SecDefault stringAction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- SecureWeb stringProxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- SecureWeb List<Pulumiverse.Proxy Certs Fortios. Webproxy. Inputs. Explicit Secure Web Proxy Cert> 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- Socks string
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- SocksIncoming stringPort 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- SslAlgorithm string
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- SslDh stringBits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- Status string
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- StrictGuest string
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- TraceAuth stringNo Rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- UnknownHttp stringVersion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- UserAgent stringDetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- ClientCert string
- Enable/disable to request client certificate. Valid values: disable,enable.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- EmptyCert stringAction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- FtpIncoming stringPort 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- FtpOver stringHttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- HttpConnection stringMode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- HttpIncoming stringPort 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- HttpsIncoming stringPort 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- HttpsReplacement stringMessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- IncomingIp string
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- IncomingIp6 string
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- Ipv6Status string
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- MessageUpon stringServer Error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- OutgoingIp string
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- OutgoingIp6 string
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- PacFile stringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- PacFile stringName 
- Pac file name.
- PacFile stringServer Port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- PacFile stringServer Status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- PacFile stringThrough Https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- PacFile stringUrl 
- PAC file access URL.
- PacPolicies []ExplicitPac Policy Args 
- PAC policies. The structure of pac_policyblock is documented below.
- PrefDns stringResult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- Realm string
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- SecDefault stringAction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- SecureWeb stringProxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- SecureWeb []ExplicitProxy Certs Secure Web Proxy Cert Args 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- Socks string
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- SocksIncoming stringPort 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- SslAlgorithm string
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- SslDh stringBits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- Status string
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- StrictGuest string
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- TraceAuth stringNo Rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- UnknownHttp stringVersion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- UserAgent stringDetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- clientCert String
- Enable/disable to request client certificate. Valid values: disable,enable.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- emptyCert StringAction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- ftpIncoming StringPort 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- ftpOver StringHttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- httpConnection StringMode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- httpIncoming StringPort 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- httpsIncoming StringPort 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- httpsReplacement StringMessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- incomingIp String
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- incomingIp6 String
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- ipv6Status String
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- messageUpon StringServer Error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- outgoingIp String
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- outgoingIp6 String
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- pacFile StringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pacFile StringName 
- Pac file name.
- pacFile StringServer Port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- pacFile StringServer Status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- pacFile StringThrough Https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- pacFile StringUrl 
- PAC file access URL.
- pacPolicies List<ExplicitPac Policy> 
- PAC policies. The structure of pac_policyblock is documented below.
- prefDns StringResult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- realm String
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- secDefault StringAction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- secureWeb StringProxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- secureWeb List<ExplicitProxy Certs Secure Web Proxy Cert> 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- socks String
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- socksIncoming StringPort 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- sslAlgorithm String
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- sslDh StringBits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- status String
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- strictGuest String
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- traceAuth StringNo Rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- unknownHttp StringVersion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- userAgent StringDetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- clientCert string
- Enable/disable to request client certificate. Valid values: disable,enable.
- dynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- emptyCert stringAction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- ftpIncoming stringPort 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- ftpOver stringHttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- getAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- httpConnection stringMode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- httpIncoming stringPort 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- httpsIncoming stringPort 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- httpsReplacement stringMessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- incomingIp string
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- incomingIp6 string
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- ipv6Status string
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- messageUpon stringServer Error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- outgoingIp string
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- outgoingIp6 string
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- pacFile stringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pacFile stringName 
- Pac file name.
- pacFile stringServer Port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- pacFile stringServer Status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- pacFile stringThrough Https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- pacFile stringUrl 
- PAC file access URL.
- pacPolicies ExplicitPac Policy[] 
- PAC policies. The structure of pac_policyblock is documented below.
- prefDns stringResult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- realm string
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- secDefault stringAction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- secureWeb stringProxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- secureWeb ExplicitProxy Certs Secure Web Proxy Cert[] 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- socks string
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- socksIncoming stringPort 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- sslAlgorithm string
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- sslDh stringBits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- status string
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- strictGuest string
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- traceAuth stringNo Rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- unknownHttp stringVersion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- userAgent stringDetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- client_cert str
- Enable/disable to request client certificate. Valid values: disable,enable.
- dynamic_sort_ strsubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- empty_cert_ straction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- ftp_incoming_ strport 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- ftp_over_ strhttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- get_all_ strtables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- http_connection_ strmode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- http_incoming_ strport 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- https_incoming_ strport 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- https_replacement_ strmessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- incoming_ip str
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- incoming_ip6 str
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- ipv6_status str
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- message_upon_ strserver_ error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- outgoing_ip str
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- outgoing_ip6 str
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- pac_file_ strdata 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pac_file_ strname 
- Pac file name.
- pac_file_ strserver_ port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- pac_file_ strserver_ status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- pac_file_ strthrough_ https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- pac_file_ strurl 
- PAC file access URL.
- pac_policies Sequence[ExplicitPac Policy Args] 
- PAC policies. The structure of pac_policyblock is documented below.
- pref_dns_ strresult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- realm str
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- sec_default_ straction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- secure_web_ strproxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- secure_web_ Sequence[Explicitproxy_ certs Secure Web Proxy Cert Args] 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- socks str
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- socks_incoming_ strport 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- ssl_algorithm str
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- ssl_dh_ strbits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- status str
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- strict_guest str
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- trace_auth_ strno_ rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- unknown_http_ strversion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- user_agent_ strdetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- clientCert String
- Enable/disable to request client certificate. Valid values: disable,enable.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- emptyCert StringAction 
- Action of an empty client certificate. Valid values: accept,block,accept-unmanageable.
- ftpIncoming StringPort 
- Accept incoming FTP-over-HTTP requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- ftpOver StringHttp 
- Enable to proxy FTP-over-HTTP sessions sent from a web browser. Valid values: enable,disable.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- httpConnection StringMode 
- HTTP connection mode (default = static). Valid values: static,multiplex,serverpool.
- httpIncoming StringPort 
- Accept incoming HTTP requests on one or more ports (0 - 65535, default = 8080).
- httpsIncoming StringPort 
- Accept incoming HTTPS requests on one or more ports (0 - 65535, default = 0, use the same as HTTP).
- httpsReplacement StringMessage 
- Enable/disable sending the client a replacement message for HTTPS requests. Valid values: enable,disable.
- incomingIp String
- Restrict the explicit HTTP proxy to only accept sessions from this IP address. An interface must have this IP address.
- incomingIp6 String
- Restrict the explicit web proxy to only accept sessions from this IPv6 address. An interface must have this IPv6 address.
- ipv6Status String
- Enable/disable allowing an IPv6 web proxy destination in policies and all IPv6 related entries in this command. Valid values: enable,disable.
- messageUpon StringServer Error 
- Enable/disable displaying a replacement message when a server error is detected. Valid values: enable,disable.
- outgoingIp String
- Outgoing HTTP requests will have this IP address as their source address. An interface must have this IP address.
- outgoingIp6 String
- Outgoing HTTP requests will leave this IPv6. Multiple interfaces can be specified. Interfaces must have these IPv6 addresses.
- pacFile StringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pacFile StringName 
- Pac file name.
- pacFile StringServer Port 
- Port number that PAC traffic from client web browsers uses to connect to the explicit web proxy (0 - 65535, default = 0; use the same as HTTP).
- pacFile StringServer Status 
- Enable/disable Proxy Auto-Configuration (PAC) for users of this explicit proxy profile. Valid values: enable,disable.
- pacFile StringThrough Https 
- Enable/disable to get Proxy Auto-Configuration (PAC) through HTTPS. Valid values: enable,disable.
- pacFile StringUrl 
- PAC file access URL.
- pacPolicies List<Property Map>
- PAC policies. The structure of pac_policyblock is documented below.
- prefDns StringResult 
- Prefer resolving addresses using the configured IPv4 or IPv6 DNS server (default = ipv4).
- realm String
- Authentication realm used to identify the explicit web proxy (maximum of 63 characters).
- secDefault StringAction 
- Accept or deny explicit web proxy sessions when no web proxy firewall policy exists. Valid values: accept,deny.
- secureWeb StringProxy 
- Enable/disable/require the secure web proxy for HTTP and HTTPS session. Valid values: disable,enable,secure.
- secureWeb List<Property Map>Proxy Certs 
- Name of certificates for secure web proxy. The structure of secure_web_proxy_certblock is documented below.
- socks String
- Enable/disable the SOCKS proxy. Valid values: enable,disable.
- socksIncoming StringPort 
- Accept incoming SOCKS proxy requests on one or more ports (0 - 65535, default = 0; use the same as HTTP).
- sslAlgorithm String
- Relative strength of encryption algorithms accepted in HTTPS deep scan: high, medium, or low. Valid values: high,medium,low.
- sslDh StringBits 
- Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). Valid values: 768,1024,1536,2048.
- status String
- Enable/disable the explicit Web proxy for HTTP and HTTPS session. Valid values: enable,disable.
- strictGuest String
- Enable/disable strict guest user checking by the explicit web proxy. Valid values: enable,disable.
- traceAuth StringNo Rsp 
- Enable/disable logging timed-out authentication requests. Valid values: enable,disable.
- unknownHttp StringVersion 
- Either reject unknown HTTP traffic as malformed or handle unknown HTTP traffic as best as the proxy server can.
- userAgent StringDetect 
- Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable,enable.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
Supporting Types
ExplicitPacPolicy, ExplicitPacPolicyArgs      
- Comments string
- Optional comments.
- Dstaddrs
List<Pulumiverse.Fortios. Webproxy. Inputs. Explicit Pac Policy Dstaddr> 
- Destination address objects. The structure of dstaddrblock is documented below.
- PacFile stringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- PacFile stringName 
- Pac file name.
- Policyid int
- Policy ID.
- Srcaddr6s
List<Pulumiverse.Fortios. Webproxy. Inputs. Explicit Pac Policy Srcaddr6> 
- Source address6 objects. The structure of srcaddr6block is documented below.
- Srcaddrs
List<Pulumiverse.Fortios. Webproxy. Inputs. Explicit Pac Policy Srcaddr> 
- Source address objects. The structure of srcaddrblock is documented below.
- Status string
- Enable/disable policy. Valid values: enable,disable.
- Comments string
- Optional comments.
- Dstaddrs
[]ExplicitPac Policy Dstaddr 
- Destination address objects. The structure of dstaddrblock is documented below.
- PacFile stringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- PacFile stringName 
- Pac file name.
- Policyid int
- Policy ID.
- Srcaddr6s
[]ExplicitPac Policy Srcaddr6 
- Source address6 objects. The structure of srcaddr6block is documented below.
- Srcaddrs
[]ExplicitPac Policy Srcaddr 
- Source address objects. The structure of srcaddrblock is documented below.
- Status string
- Enable/disable policy. Valid values: enable,disable.
- comments String
- Optional comments.
- dstaddrs
List<ExplicitPac Policy Dstaddr> 
- Destination address objects. The structure of dstaddrblock is documented below.
- pacFile StringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pacFile StringName 
- Pac file name.
- policyid Integer
- Policy ID.
- srcaddr6s
List<ExplicitPac Policy Srcaddr6> 
- Source address6 objects. The structure of srcaddr6block is documented below.
- srcaddrs
List<ExplicitPac Policy Srcaddr> 
- Source address objects. The structure of srcaddrblock is documented below.
- status String
- Enable/disable policy. Valid values: enable,disable.
- comments string
- Optional comments.
- dstaddrs
ExplicitPac Policy Dstaddr[] 
- Destination address objects. The structure of dstaddrblock is documented below.
- pacFile stringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pacFile stringName 
- Pac file name.
- policyid number
- Policy ID.
- srcaddr6s
ExplicitPac Policy Srcaddr6[] 
- Source address6 objects. The structure of srcaddr6block is documented below.
- srcaddrs
ExplicitPac Policy Srcaddr[] 
- Source address objects. The structure of srcaddrblock is documented below.
- status string
- Enable/disable policy. Valid values: enable,disable.
- comments str
- Optional comments.
- dstaddrs
Sequence[ExplicitPac Policy Dstaddr] 
- Destination address objects. The structure of dstaddrblock is documented below.
- pac_file_ strdata 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pac_file_ strname 
- Pac file name.
- policyid int
- Policy ID.
- srcaddr6s
Sequence[ExplicitPac Policy Srcaddr6] 
- Source address6 objects. The structure of srcaddr6block is documented below.
- srcaddrs
Sequence[ExplicitPac Policy Srcaddr] 
- Source address objects. The structure of srcaddrblock is documented below.
- status str
- Enable/disable policy. Valid values: enable,disable.
- comments String
- Optional comments.
- dstaddrs List<Property Map>
- Destination address objects. The structure of dstaddrblock is documented below.
- pacFile StringData 
- PAC file contents enclosed in quotes (maximum of 256K bytes).
- pacFile StringName 
- Pac file name.
- policyid Number
- Policy ID.
- srcaddr6s List<Property Map>
- Source address6 objects. The structure of srcaddr6block is documented below.
- srcaddrs List<Property Map>
- Source address objects. The structure of srcaddrblock is documented below.
- status String
- Enable/disable policy. Valid values: enable,disable.
ExplicitPacPolicyDstaddr, ExplicitPacPolicyDstaddrArgs        
- Name string
- Address name.
- Name string
- Address name.
- name String
- Address name.
- name string
- Address name.
- name str
- Address name.
- name String
- Address name.
ExplicitPacPolicySrcaddr, ExplicitPacPolicySrcaddrArgs        
- Name string
- Address name.
- Name string
- Address name.
- name String
- Address name.
- name string
- Address name.
- name str
- Address name.
- name String
- Address name.
ExplicitPacPolicySrcaddr6, ExplicitPacPolicySrcaddr6Args        
- Name string
- Name string
- name String
- name string
- name str
- name String
ExplicitSecureWebProxyCert, ExplicitSecureWebProxyCertArgs          
- Name string
- Certificate list.
- Name string
- Certificate list.
- name String
- Certificate list.
- name string
- Certificate list.
- name str
- Certificate list.
- name String
- Certificate list.
Import
WebProxy Explicit can be imported using any of these accepted formats:
$ pulumi import fortios:webproxy/explicit:Explicit labelname WebProxyExplicit
If you do not want to import arguments of block:
$ export “FORTIOS_IMPORT_TABLE”=“false”
$ pulumi import fortios:webproxy/explicit:Explicit labelname WebProxyExplicit
$ unset “FORTIOS_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortios pulumiverse/pulumi-fortios
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the fortiosTerraform Provider.
