Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortios
  3. API Docs
  4. filter
  5. filter/dns
  6. Profile
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

fortios.filter/dns.Profile

Explore with Pulumi AI

fortios logo
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

    Configure DNS domain filter profiles.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as fortios from "@pulumiverse/fortios";

const trname = new fortios.filter.dns.Profile("trname", {
    blockAction: "redirect",
    blockBotnet: "disable",
    domainFilter: {
        domainFilterTable: 0,
    },
    ftgdDns: {
        filters: [
            {
                action: "block",
                category: 26,
                id: 1,
                log: "enable",
            },
            {
                action: "block",
                category: 61,
                id: 2,
                log: "enable",
            },
            {
                action: "block",
                category: 86,
                id: 3,
                log: "enable",
            },
            {
                action: "block",
                category: 88,
                id: 4,
                log: "enable",
            },
        ],
    },
    logAllDomain: "disable",
    redirectPortal: "0.0.0.0",
    safeSearch: "disable",
    sdnsDomainLog: "enable",
    sdnsFtgdErrLog: "enable",
    youtubeRestrict: "strict",
});

    import pulumi
import pulumiverse_fortios as fortios

trname = fortios.filter.dns.Profile("trname",
    block_action="redirect",
    block_botnet="disable",
    domain_filter=fortios.filter.dns.ProfileDomainFilterArgs(
        domain_filter_table=0,
    ),
    ftgd_dns=fortios.filter.dns.ProfileFtgdDnsArgs(
        filters=[
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=26,
                id=1,
                log="enable",
            ),
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=61,
                id=2,
                log="enable",
            ),
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=86,
                id=3,
                log="enable",
            ),
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=88,
                id=4,
                log="enable",
            ),
        ],
    ),
    log_all_domain="disable",
    redirect_portal="0.0.0.0",
    safe_search="disable",
    sdns_domain_log="enable",
    sdns_ftgd_err_log="enable",
    youtube_restrict="strict")

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-fortios/sdk/go/fortios/filter"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := filter.NewProfile(ctx, "trname", &filter.ProfileArgs{
			BlockAction: pulumi.String("redirect"),
			BlockBotnet: pulumi.String("disable"),
			DomainFilter: &dns.ProfileDomainFilterArgs{
				DomainFilterTable: pulumi.Int(0),
			},
			FtgdDns: &dns.ProfileFtgdDnsArgs{
				Filters: dns.ProfileFtgdDnsFilterArray{
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(26),
						Id:       pulumi.Int(1),
						Log:      pulumi.String("enable"),
					},
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(61),
						Id:       pulumi.Int(2),
						Log:      pulumi.String("enable"),
					},
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(86),
						Id:       pulumi.Int(3),
						Log:      pulumi.String("enable"),
					},
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(88),
						Id:       pulumi.Int(4),
						Log:      pulumi.String("enable"),
					},
				},
			},
			LogAllDomain:    pulumi.String("disable"),
			RedirectPortal:  pulumi.String("0.0.0.0"),
			SafeSearch:      pulumi.String("disable"),
			SdnsDomainLog:   pulumi.String("enable"),
			SdnsFtgdErrLog:  pulumi.String("enable"),
			YoutubeRestrict: pulumi.String("strict"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortios = Pulumiverse.Fortios;

return await Deployment.RunAsync(() => 
{
    var trname = new Fortios.Filter.Dns.Profile("trname", new()
    {
        BlockAction = "redirect",
        BlockBotnet = "disable",
        DomainFilter = new Fortios.Filter.Dns.Inputs.ProfileDomainFilterArgs
        {
            DomainFilterTable = 0,
        },
        FtgdDns = new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsArgs
        {
            Filters = new[]
            {
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 26,
                    Id = 1,
                    Log = "enable",
                },
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 61,
                    Id = 2,
                    Log = "enable",
                },
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 86,
                    Id = 3,
                    Log = "enable",
                },
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 88,
                    Id = 4,
                    Log = "enable",
                },
            },
        },
        LogAllDomain = "disable",
        RedirectPortal = "0.0.0.0",
        SafeSearch = "disable",
        SdnsDomainLog = "enable",
        SdnsFtgdErrLog = "enable",
        YoutubeRestrict = "strict",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortios.filter.Profile;
import com.pulumi.fortios.filter.ProfileArgs;
import com.pulumi.fortios.filter.inputs.ProfileDomainFilterArgs;
import com.pulumi.fortios.filter.inputs.ProfileFtgdDnsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trname = new Profile("trname", ProfileArgs.builder()
            .blockAction("redirect")
            .blockBotnet("disable")
            .domainFilter(ProfileDomainFilterArgs.builder()
                .domainFilterTable(0)
                .build())
            .ftgdDns(ProfileFtgdDnsArgs.builder()
                .filters(                
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(26)
                        .id(1)
                        .log("enable")
                        .build(),
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(61)
                        .id(2)
                        .log("enable")
                        .build(),
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(86)
                        .id(3)
                        .log("enable")
                        .build(),
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(88)
                        .id(4)
                        .log("enable")
                        .build())
                .build())
            .logAllDomain("disable")
            .redirectPortal("0.0.0.0")
            .safeSearch("disable")
            .sdnsDomainLog("enable")
            .sdnsFtgdErrLog("enable")
            .youtubeRestrict("strict")
            .build());

    }
}

    resources:
  trname:
    type: fortios:filter/dns:Profile
    properties:
      blockAction: redirect
      blockBotnet: disable
      domainFilter:
        domainFilterTable: 0
      ftgdDns:
        filters:
          - action: block
            category: 26
            id: 1
            log: enable
          - action: block
            category: 61
            id: 2
            log: enable
          - action: block
            category: 86
            id: 3
            log: enable
          - action: block
            category: 88
            id: 4
            log: enable
      logAllDomain: disable
      redirectPortal: 0.0.0.0
      safeSearch: disable
      sdnsDomainLog: enable
      sdnsFtgdErrLog: enable
      youtubeRestrict: strict

    Create Profile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Profile(name: string, args?: ProfileArgs, opts?: CustomResourceOptions);
    @overload
def Profile(resource_name: str,
            args: Optional[ProfileArgs] = None,
            opts: Optional[ResourceOptions] = None)

@overload
def Profile(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            block_action: Optional[str] = None,
            block_botnet: Optional[str] = None,
            comment: Optional[str] = None,
            dns_translations: Optional[Sequence[ProfileDnsTranslationArgs]] = None,
            domain_filter: Optional[ProfileDomainFilterArgs] = None,
            dynamic_sort_subtable: Optional[str] = None,
            external_ip_blocklists: Optional[Sequence[ProfileExternalIpBlocklistArgs]] = None,
            ftgd_dns: Optional[ProfileFtgdDnsArgs] = None,
            get_all_tables: Optional[str] = None,
            log_all_domain: Optional[str] = None,
            name: Optional[str] = None,
            redirect_portal: Optional[str] = None,
            redirect_portal6: Optional[str] = None,
            safe_search: Optional[str] = None,
            sdns_domain_log: Optional[str] = None,
            sdns_ftgd_err_log: Optional[str] = None,
            strip_ech: Optional[str] = None,
            transparent_dns_databases: Optional[Sequence[ProfileTransparentDnsDatabaseArgs]] = None,
            vdomparam: Optional[str] = None,
            youtube_restrict: Optional[str] = None)
    func NewProfile(ctx *Context, name string, args *ProfileArgs, opts ...ResourceOption) (*Profile, error)
    public Profile(string name, ProfileArgs? args = null, CustomResourceOptions? opts = null)
    public Profile(String name, ProfileArgs args)
public Profile(String name, ProfileArgs args, CustomResourceOptions options)

    type: fortios:filter/dns/profile:Profile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Profile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Profile resource accepts the following input properties:

    BlockAction string
    Action to take for blocked domains.
    BlockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    Comment string
    Comment.
    DnsTranslations List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileDnsTranslation>
    DNS translation settings. The structure of dns_translation block is documented below.
    DomainFilter Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileDomainFilter
    Domain filter settings. The structure of domain_filter block is documented below.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    ExternalIpBlocklists List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileExternalIpBlocklist>
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    FtgdDns Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileFtgdDns
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    LogAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    Name string
    Profile name.
    RedirectPortal string
    IP address of the SDNS redirect portal.
    RedirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    SafeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    SdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    SdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    StripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    TransparentDnsDatabases List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileTransparentDnsDatabase>
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    YoutubeRestrict string
    Set safe search for YouTube restriction level.
    BlockAction string
    Action to take for blocked domains.
    BlockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    Comment string
    Comment.
    DnsTranslations []ProfileDnsTranslationArgs
    DNS translation settings. The structure of dns_translation block is documented below.
    DomainFilter ProfileDomainFilterArgs
    Domain filter settings. The structure of domain_filter block is documented below.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    ExternalIpBlocklists []ProfileExternalIpBlocklistArgs
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    FtgdDns ProfileFtgdDnsArgs
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    LogAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    Name string
    Profile name.
    RedirectPortal string
    IP address of the SDNS redirect portal.
    RedirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    SafeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    SdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    SdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    StripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    TransparentDnsDatabases []ProfileTransparentDnsDatabaseArgs
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    YoutubeRestrict string
    Set safe search for YouTube restriction level.
    blockAction String
    Action to take for blocked domains.
    blockBotnet String
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment String
    Comment.
    dnsTranslations List<ProfileDnsTranslation>
    DNS translation settings. The structure of dns_translation block is documented below.
    domainFilter ProfileDomainFilter
    Domain filter settings. The structure of domain_filter block is documented below.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    externalIpBlocklists List<ProfileExternalIpBlocklist>
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    ftgdDns ProfileFtgdDns
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    logAllDomain String
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    name String
    Profile name.
    redirectPortal String
    IP address of the SDNS redirect portal.
    redirectPortal6 String
    IPv6 address of the SDNS redirect portal.
    safeSearch String
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    sdnsDomainLog String
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    sdnsFtgdErrLog String
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    stripEch String
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases List<ProfileTransparentDnsDatabase>
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    youtubeRestrict String
    Set safe search for YouTube restriction level.
    blockAction string
    Action to take for blocked domains.
    blockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment string
    Comment.
    dnsTranslations ProfileDnsTranslation[]
    DNS translation settings. The structure of dns_translation block is documented below.
    domainFilter ProfileDomainFilter
    Domain filter settings. The structure of domain_filter block is documented below.
    dynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    externalIpBlocklists ProfileExternalIpBlocklist[]
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    ftgdDns ProfileFtgdDns
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    getAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    logAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    name string
    Profile name.
    redirectPortal string
    IP address of the SDNS redirect portal.
    redirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    safeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    sdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    sdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    stripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases ProfileTransparentDnsDatabase[]
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    youtubeRestrict string
    Set safe search for YouTube restriction level.
    block_action str
    Action to take for blocked domains.
    block_botnet str
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment str
    Comment.
    dns_translations Sequence[ProfileDnsTranslationArgs]
    DNS translation settings. The structure of dns_translation block is documented below.
    domain_filter ProfileDomainFilterArgs
    Domain filter settings. The structure of domain_filter block is documented below.
    dynamic_sort_subtable str
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    external_ip_blocklists Sequence[ProfileExternalIpBlocklistArgs]
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    ftgd_dns ProfileFtgdDnsArgs
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    get_all_tables str
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    log_all_domain str
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    name str
    Profile name.
    redirect_portal str
    IP address of the SDNS redirect portal.
    redirect_portal6 str
    IPv6 address of the SDNS redirect portal.
    safe_search str
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    sdns_domain_log str
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    sdns_ftgd_err_log str
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    strip_ech str
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparent_dns_databases Sequence[ProfileTransparentDnsDatabaseArgs]
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    vdomparam str
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    youtube_restrict str
    Set safe search for YouTube restriction level.
    blockAction String
    Action to take for blocked domains.
    blockBotnet String
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment String
    Comment.
    dnsTranslations List<Property Map>
    DNS translation settings. The structure of dns_translation block is documented below.
    domainFilter Property Map
    Domain filter settings. The structure of domain_filter block is documented below.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    externalIpBlocklists List<Property Map>
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    ftgdDns Property Map
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    logAllDomain String
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    name String
    Profile name.
    redirectPortal String
    IP address of the SDNS redirect portal.
    redirectPortal6 String
    IPv6 address of the SDNS redirect portal.
    safeSearch String
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    sdnsDomainLog String
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    sdnsFtgdErrLog String
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    stripEch String
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases List<Property Map>
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    youtubeRestrict String
    Set safe search for YouTube restriction level.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Profile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Profile Resource

    Get an existing Profile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ProfileState, opts?: CustomResourceOptions): Profile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        block_action: Optional[str] = None,
        block_botnet: Optional[str] = None,
        comment: Optional[str] = None,
        dns_translations: Optional[Sequence[ProfileDnsTranslationArgs]] = None,
        domain_filter: Optional[ProfileDomainFilterArgs] = None,
        dynamic_sort_subtable: Optional[str] = None,
        external_ip_blocklists: Optional[Sequence[ProfileExternalIpBlocklistArgs]] = None,
        ftgd_dns: Optional[ProfileFtgdDnsArgs] = None,
        get_all_tables: Optional[str] = None,
        log_all_domain: Optional[str] = None,
        name: Optional[str] = None,
        redirect_portal: Optional[str] = None,
        redirect_portal6: Optional[str] = None,
        safe_search: Optional[str] = None,
        sdns_domain_log: Optional[str] = None,
        sdns_ftgd_err_log: Optional[str] = None,
        strip_ech: Optional[str] = None,
        transparent_dns_databases: Optional[Sequence[ProfileTransparentDnsDatabaseArgs]] = None,
        vdomparam: Optional[str] = None,
        youtube_restrict: Optional[str] = None) -> Profile
    func GetProfile(ctx *Context, name string, id IDInput, state *ProfileState, opts ...ResourceOption) (*Profile, error)
    public static Profile Get(string name, Input<string> id, ProfileState? state, CustomResourceOptions? opts = null)
    public static Profile get(String name, Output<String> id, ProfileState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    BlockAction string
    Action to take for blocked domains.
    BlockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    Comment string
    Comment.
    DnsTranslations List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileDnsTranslation>
    DNS translation settings. The structure of dns_translation block is documented below.
    DomainFilter Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileDomainFilter
    Domain filter settings. The structure of domain_filter block is documented below.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    ExternalIpBlocklists List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileExternalIpBlocklist>
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    FtgdDns Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileFtgdDns
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    LogAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    Name string
    Profile name.
    RedirectPortal string
    IP address of the SDNS redirect portal.
    RedirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    SafeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    SdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    SdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    StripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    TransparentDnsDatabases List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileTransparentDnsDatabase>
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    YoutubeRestrict string
    Set safe search for YouTube restriction level.
    BlockAction string
    Action to take for blocked domains.
    BlockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    Comment string
    Comment.
    DnsTranslations []ProfileDnsTranslationArgs
    DNS translation settings. The structure of dns_translation block is documented below.
    DomainFilter ProfileDomainFilterArgs
    Domain filter settings. The structure of domain_filter block is documented below.
    DynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    ExternalIpBlocklists []ProfileExternalIpBlocklistArgs
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    FtgdDns ProfileFtgdDnsArgs
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    GetAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    LogAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    Name string
    Profile name.
    RedirectPortal string
    IP address of the SDNS redirect portal.
    RedirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    SafeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    SdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    SdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    StripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    TransparentDnsDatabases []ProfileTransparentDnsDatabaseArgs
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    Vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    YoutubeRestrict string
    Set safe search for YouTube restriction level.
    blockAction String
    Action to take for blocked domains.
    blockBotnet String
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment String
    Comment.
    dnsTranslations List<ProfileDnsTranslation>
    DNS translation settings. The structure of dns_translation block is documented below.
    domainFilter ProfileDomainFilter
    Domain filter settings. The structure of domain_filter block is documented below.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    externalIpBlocklists List<ProfileExternalIpBlocklist>
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    ftgdDns ProfileFtgdDns
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    logAllDomain String
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    name String
    Profile name.
    redirectPortal String
    IP address of the SDNS redirect portal.
    redirectPortal6 String
    IPv6 address of the SDNS redirect portal.
    safeSearch String
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    sdnsDomainLog String
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    sdnsFtgdErrLog String
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    stripEch String
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases List<ProfileTransparentDnsDatabase>
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    youtubeRestrict String
    Set safe search for YouTube restriction level.
    blockAction string
    Action to take for blocked domains.
    blockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment string
    Comment.
    dnsTranslations ProfileDnsTranslation[]
    DNS translation settings. The structure of dns_translation block is documented below.
    domainFilter ProfileDomainFilter
    Domain filter settings. The structure of domain_filter block is documented below.
    dynamicSortSubtable string
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    externalIpBlocklists ProfileExternalIpBlocklist[]
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    ftgdDns ProfileFtgdDns
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    getAllTables string
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    logAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    name string
    Profile name.
    redirectPortal string
    IP address of the SDNS redirect portal.
    redirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    safeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    sdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    sdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    stripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases ProfileTransparentDnsDatabase[]
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    vdomparam string
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    youtubeRestrict string
    Set safe search for YouTube restriction level.
    block_action str
    Action to take for blocked domains.
    block_botnet str
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment str
    Comment.
    dns_translations Sequence[ProfileDnsTranslationArgs]
    DNS translation settings. The structure of dns_translation block is documented below.
    domain_filter ProfileDomainFilterArgs
    Domain filter settings. The structure of domain_filter block is documented below.
    dynamic_sort_subtable str
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    external_ip_blocklists Sequence[ProfileExternalIpBlocklistArgs]
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    ftgd_dns ProfileFtgdDnsArgs
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    get_all_tables str
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    log_all_domain str
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    name str
    Profile name.
    redirect_portal str
    IP address of the SDNS redirect portal.
    redirect_portal6 str
    IPv6 address of the SDNS redirect portal.
    safe_search str
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    sdns_domain_log str
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    sdns_ftgd_err_log str
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    strip_ech str
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparent_dns_databases Sequence[ProfileTransparentDnsDatabaseArgs]
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    vdomparam str
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    youtube_restrict str
    Set safe search for YouTube restriction level.
    blockAction String
    Action to take for blocked domains.
    blockBotnet String
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment String
    Comment.
    dnsTranslations List<Property Map>
    DNS translation settings. The structure of dns_translation block is documented below.
    domainFilter Property Map
    Domain filter settings. The structure of domain_filter block is documented below.
    dynamicSortSubtable String
    Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
    externalIpBlocklists List<Property Map>
    One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
    ftgdDns Property Map
    FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
    getAllTables String
    Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
    logAllDomain String
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
    name String
    Profile name.
    redirectPortal String
    IP address of the SDNS redirect portal.
    redirectPortal6 String
    IPv6 address of the SDNS redirect portal.
    safeSearch String
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    sdnsDomainLog String
    Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
    sdnsFtgdErrLog String
    Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
    stripEch String
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases List<Property Map>
    Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
    vdomparam String
    Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
    youtubeRestrict String
    Set safe search for YouTube restriction level.

    Supporting Types

    ProfileDnsTranslation, ProfileDnsTranslationArgs

    AddrType string
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    Dst string
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    Dst6 string
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    Id int
    ID.
    Netmask string
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    Prefix int
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    Src string
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    Src6 string
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    Status string
    Enable/disable this DNS translation entry. Valid values: enable, disable.
    AddrType string
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    Dst string
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    Dst6 string
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    Id int
    ID.
    Netmask string
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    Prefix int
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    Src string
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    Src6 string
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    Status string
    Enable/disable this DNS translation entry. Valid values: enable, disable.
    addrType String
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    dst String
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    dst6 String
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    id Integer
    ID.
    netmask String
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    prefix Integer
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    src String
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    src6 String
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    status String
    Enable/disable this DNS translation entry. Valid values: enable, disable.
    addrType string
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    dst string
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    dst6 string
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    id number
    ID.
    netmask string
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    prefix number
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    src string
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    src6 string
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    status string
    Enable/disable this DNS translation entry. Valid values: enable, disable.
    addr_type str
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    dst str
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    dst6 str
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    id int
    ID.
    netmask str
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    prefix int
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    src str
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    src6 str
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    status str
    Enable/disable this DNS translation entry. Valid values: enable, disable.
    addrType String
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    dst String
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    dst6 String
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    id Number
    ID.
    netmask String
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    prefix Number
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    src String
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    src6 String
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    status String
    Enable/disable this DNS translation entry. Valid values: enable, disable.

    ProfileDomainFilter, ProfileDomainFilterArgs

    DomainFilterTable int
    DNS domain filter table ID.
    DomainFilterTable int
    DNS domain filter table ID.
    domainFilterTable Integer
    DNS domain filter table ID.
    domainFilterTable number
    DNS domain filter table ID.
    domain_filter_table int
    DNS domain filter table ID.
    domainFilterTable Number
    DNS domain filter table ID.

    ProfileExternalIpBlocklist, ProfileExternalIpBlocklistArgs

    Name string
    External domain block list name.
    Name string
    External domain block list name.
    name String
    External domain block list name.
    name string
    External domain block list name.
    name str
    External domain block list name.
    name String
    External domain block list name.

    ProfileFtgdDns, ProfileFtgdDnsArgs

    Filters List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilter>
    FortiGuard DNS domain filters. The structure of filters block is documented below.
    Options string
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
    Filters []ProfileFtgdDnsFilter
    FortiGuard DNS domain filters. The structure of filters block is documented below.
    Options string
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
    filters List<ProfileFtgdDnsFilter>
    FortiGuard DNS domain filters. The structure of filters block is documented below.
    options String
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
    filters ProfileFtgdDnsFilter[]
    FortiGuard DNS domain filters. The structure of filters block is documented below.
    options string
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
    filters Sequence[ProfileFtgdDnsFilter]
    FortiGuard DNS domain filters. The structure of filters block is documented below.
    options str
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
    filters List<Property Map>
    FortiGuard DNS domain filters. The structure of filters block is documented below.
    options String
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.

    ProfileFtgdDnsFilter, ProfileFtgdDnsFilterArgs

    Action string
    Action to take for DNS requests matching the category. Valid values: block, monitor.
    Category int
    Category number.
    Id int
    ID number.
    Log string
    Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.
    Action string
    Action to take for DNS requests matching the category. Valid values: block, monitor.
    Category int
    Category number.
    Id int
    ID number.
    Log string
    Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.
    action String
    Action to take for DNS requests matching the category. Valid values: block, monitor.
    category Integer
    Category number.
    id Integer
    ID number.
    log String
    Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.
    action string
    Action to take for DNS requests matching the category. Valid values: block, monitor.
    category number
    Category number.
    id number
    ID number.
    log string
    Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.
    action str
    Action to take for DNS requests matching the category. Valid values: block, monitor.
    category int
    Category number.
    id int
    ID number.
    log str
    Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.
    action String
    Action to take for DNS requests matching the category. Valid values: block, monitor.
    category Number
    Category number.
    id Number
    ID number.
    log String
    Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.

    ProfileTransparentDnsDatabase, ProfileTransparentDnsDatabaseArgs

    Name string
    DNS database zone name.
    Name string
    DNS database zone name.
    name String
    DNS database zone name.
    name string
    DNS database zone name.
    name str
    DNS database zone name.
    name String
    DNS database zone name.

    Import

    Dnsfilter Profile can be imported using any of these accepted formats:

    $ pulumi import fortios:filter/dns/profile:Profile labelname {{name}}

    If you do not want to import arguments of block:

    $ export “FORTIOS_IMPORT_TABLE”=“false”

    $ pulumi import fortios:filter/dns/profile:Profile labelname {{name}}

    $ unset “FORTIOS_IMPORT_TABLE”

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortios pulumiverse/pulumi-fortios
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the fortios Terraform Provider.
    fortios logo
    Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
    pulumiverse/pulumi-fortios