Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. ObjectFirewallProfileprotocoloptionsHttp
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectFirewallProfileprotocoloptionsHttp

Explore with Pulumi AI

fortimanager logo
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

    Configure HTTP protocol options.

    This resource is a sub resource for variable http of resource fortimanager.ObjectFirewallProfileprotocoloptions. Conflict and overwrite may occur if use both of them.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";

const trnameObjectFirewallProfileprotocoloptions = new fortimanager.ObjectFirewallProfileprotocoloptions("trnameObjectFirewallProfileprotocoloptions", {});
const trnameObjectFirewallProfileprotocoloptionsHttp = new fortimanager.ObjectFirewallProfileprotocoloptionsHttp("trnameObjectFirewallProfileprotocoloptionsHttp", {
    profileProtocolOptions: trnameObjectFirewallProfileprotocoloptions.name,
    addressIpRating: "enable",
    blockPageStatusCode: 499,
    comfortAmount: 200,
}, {
    dependsOn: [trnameObjectFirewallProfileprotocoloptions],
});

    import pulumi
import pulumi_fortimanager as fortimanager

trname_object_firewall_profileprotocoloptions = fortimanager.ObjectFirewallProfileprotocoloptions("trnameObjectFirewallProfileprotocoloptions")
trname_object_firewall_profileprotocoloptions_http = fortimanager.ObjectFirewallProfileprotocoloptionsHttp("trnameObjectFirewallProfileprotocoloptionsHttp",
    profile_protocol_options=trname_object_firewall_profileprotocoloptions.name,
    address_ip_rating="enable",
    block_page_status_code=499,
    comfort_amount=200,
    opts = pulumi.ResourceOptions(depends_on=[trname_object_firewall_profileprotocoloptions]))

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		trnameObjectFirewallProfileprotocoloptions, err := fortimanager.NewObjectFirewallProfileprotocoloptions(ctx, "trnameObjectFirewallProfileprotocoloptions", nil)
		if err != nil {
			return err
		}
		_, err = fortimanager.NewObjectFirewallProfileprotocoloptionsHttp(ctx, "trnameObjectFirewallProfileprotocoloptionsHttp", &fortimanager.ObjectFirewallProfileprotocoloptionsHttpArgs{
			ProfileProtocolOptions: trnameObjectFirewallProfileprotocoloptions.Name,
			AddressIpRating:        pulumi.String("enable"),
			BlockPageStatusCode:    pulumi.Float64(499),
			ComfortAmount:          pulumi.Float64(200),
		}, pulumi.DependsOn([]pulumi.Resource{
			trnameObjectFirewallProfileprotocoloptions,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;

return await Deployment.RunAsync(() => 
{
    var trnameObjectFirewallProfileprotocoloptions = new Fortimanager.ObjectFirewallProfileprotocoloptions("trnameObjectFirewallProfileprotocoloptions");

    var trnameObjectFirewallProfileprotocoloptionsHttp = new Fortimanager.ObjectFirewallProfileprotocoloptionsHttp("trnameObjectFirewallProfileprotocoloptionsHttp", new()
    {
        ProfileProtocolOptions = trnameObjectFirewallProfileprotocoloptions.Name,
        AddressIpRating = "enable",
        BlockPageStatusCode = 499,
        ComfortAmount = 200,
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            trnameObjectFirewallProfileprotocoloptions,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.ObjectFirewallProfileprotocoloptions;
import com.pulumi.fortimanager.ObjectFirewallProfileprotocoloptionsHttp;
import com.pulumi.fortimanager.ObjectFirewallProfileprotocoloptionsHttpArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trnameObjectFirewallProfileprotocoloptions = new ObjectFirewallProfileprotocoloptions("trnameObjectFirewallProfileprotocoloptions");

        var trnameObjectFirewallProfileprotocoloptionsHttp = new ObjectFirewallProfileprotocoloptionsHttp("trnameObjectFirewallProfileprotocoloptionsHttp", ObjectFirewallProfileprotocoloptionsHttpArgs.builder()
            .profileProtocolOptions(trnameObjectFirewallProfileprotocoloptions.name())
            .addressIpRating("enable")
            .blockPageStatusCode(499)
            .comfortAmount(200)
            .build(), CustomResourceOptions.builder()
                .dependsOn(trnameObjectFirewallProfileprotocoloptions)
                .build());

    }
}

    resources:
  trnameObjectFirewallProfileprotocoloptionsHttp:
    type: fortimanager:ObjectFirewallProfileprotocoloptionsHttp
    properties:
      profileProtocolOptions: ${trnameObjectFirewallProfileprotocoloptions.name}
      addressIpRating: enable
      blockPageStatusCode: 499
      comfortAmount: 200
    options:
      dependsOn:
        - ${trnameObjectFirewallProfileprotocoloptions}
  trnameObjectFirewallProfileprotocoloptions:
    type: fortimanager:ObjectFirewallProfileprotocoloptions

    Create ObjectFirewallProfileprotocoloptionsHttp Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ObjectFirewallProfileprotocoloptionsHttp(name: string, args: ObjectFirewallProfileprotocoloptionsHttpArgs, opts?: CustomResourceOptions);
    @overload
def ObjectFirewallProfileprotocoloptionsHttp(resource_name: str,
                                             args: ObjectFirewallProfileprotocoloptionsHttpInitArgs,
                                             opts: Optional[ResourceOptions] = None)

@overload
def ObjectFirewallProfileprotocoloptionsHttp(resource_name: str,
                                             opts: Optional[ResourceOptions] = None,
                                             profile_protocol_options: Optional[str] = None,
                                             range_block: Optional[str] = None,
                                             unknown_http_version: Optional[str] = None,
                                             comfort_amount: Optional[float] = None,
                                             retry_count: Optional[float] = None,
                                             domain_fronting: Optional[str] = None,
                                             fortinet_bar: Optional[str] = None,
                                             fortinet_bar_port: Optional[float] = None,
                                             h2c: Optional[str] = None,
                                             http_policy: Optional[str] = None,
                                             inspect_all: Optional[str] = None,
                                             object_firewall_profileprotocoloptions_http_id: Optional[str] = None,
                                             options: Optional[Sequence[str]] = None,
                                             oversize_limit: Optional[float] = None,
                                             ports: Optional[Sequence[float]] = None,
                                             post_langs: Optional[Sequence[str]] = None,
                                             adom: Optional[str] = None,
                                             proxy_after_tcp_handshake: Optional[str] = None,
                                             address_ip_rating: Optional[str] = None,
                                             comfort_interval: Optional[float] = None,
                                             block_page_status_code: Optional[float] = None,
                                             ssl_offloaded: Optional[str] = None,
                                             scopetype: Optional[str] = None,
                                             status: Optional[str] = None,
                                             stream_based_uncompressed_limit: Optional[float] = None,
                                             streaming_content_bypass: Optional[str] = None,
                                             strip_x_forwarded_for: Optional[str] = None,
                                             switching_protocols: Optional[str] = None,
                                             tcp_window_maximum: Optional[float] = None,
                                             tcp_window_minimum: Optional[float] = None,
                                             tcp_window_size: Optional[float] = None,
                                             tcp_window_type: Optional[str] = None,
                                             tunnel_non_http: Optional[str] = None,
                                             uncompressed_nest_limit: Optional[float] = None,
                                             uncompressed_oversize_limit: Optional[float] = None,
                                             unknown_content_encoding: Optional[str] = None,
                                             scan_bzip2: Optional[str] = None,
                                             verify_dns_for_policy_matching: Optional[str] = None)
    func NewObjectFirewallProfileprotocoloptionsHttp(ctx *Context, name string, args ObjectFirewallProfileprotocoloptionsHttpArgs, opts ...ResourceOption) (*ObjectFirewallProfileprotocoloptionsHttp, error)
    public ObjectFirewallProfileprotocoloptionsHttp(string name, ObjectFirewallProfileprotocoloptionsHttpArgs args, CustomResourceOptions? opts = null)
    public ObjectFirewallProfileprotocoloptionsHttp(String name, ObjectFirewallProfileprotocoloptionsHttpArgs args)
public ObjectFirewallProfileprotocoloptionsHttp(String name, ObjectFirewallProfileprotocoloptionsHttpArgs args, CustomResourceOptions options)

    type: fortimanager:ObjectFirewallProfileprotocoloptionsHttp
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ObjectFirewallProfileprotocoloptionsHttpArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ObjectFirewallProfileprotocoloptionsHttpInitArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ObjectFirewallProfileprotocoloptionsHttpArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ObjectFirewallProfileprotocoloptionsHttpArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ObjectFirewallProfileprotocoloptionsHttpArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var objectFirewallProfileprotocoloptionsHttpResource = new Fortimanager.ObjectFirewallProfileprotocoloptionsHttp("objectFirewallProfileprotocoloptionsHttpResource", new()
{
    ProfileProtocolOptions = "string",
    RangeBlock = "string",
    UnknownHttpVersion = "string",
    ComfortAmount = 0,
    RetryCount = 0,
    DomainFronting = "string",
    FortinetBar = "string",
    FortinetBarPort = 0,
    H2c = "string",
    HttpPolicy = "string",
    InspectAll = "string",
    ObjectFirewallProfileprotocoloptionsHttpId = "string",
    Options = new[]
    {
        "string",
    },
    OversizeLimit = 0,
    Ports = new[]
    {
        0,
    },
    PostLangs = new[]
    {
        "string",
    },
    Adom = "string",
    ProxyAfterTcpHandshake = "string",
    AddressIpRating = "string",
    ComfortInterval = 0,
    BlockPageStatusCode = 0,
    SslOffloaded = "string",
    Scopetype = "string",
    Status = "string",
    StreamBasedUncompressedLimit = 0,
    StreamingContentBypass = "string",
    StripXForwardedFor = "string",
    SwitchingProtocols = "string",
    TcpWindowMaximum = 0,
    TcpWindowMinimum = 0,
    TcpWindowSize = 0,
    TcpWindowType = "string",
    TunnelNonHttp = "string",
    UncompressedNestLimit = 0,
    UncompressedOversizeLimit = 0,
    UnknownContentEncoding = "string",
    ScanBzip2 = "string",
    VerifyDnsForPolicyMatching = "string",
});

    example, err := fortimanager.NewObjectFirewallProfileprotocoloptionsHttp(ctx, "objectFirewallProfileprotocoloptionsHttpResource", &fortimanager.ObjectFirewallProfileprotocoloptionsHttpArgs{
ProfileProtocolOptions: pulumi.String("string"),
RangeBlock: pulumi.String("string"),
UnknownHttpVersion: pulumi.String("string"),
ComfortAmount: pulumi.Float64(0),
RetryCount: pulumi.Float64(0),
DomainFronting: pulumi.String("string"),
FortinetBar: pulumi.String("string"),
FortinetBarPort: pulumi.Float64(0),
H2c: pulumi.String("string"),
HttpPolicy: pulumi.String("string"),
InspectAll: pulumi.String("string"),
ObjectFirewallProfileprotocoloptionsHttpId: pulumi.String("string"),
Options: pulumi.StringArray{
pulumi.String("string"),
},
OversizeLimit: pulumi.Float64(0),
Ports: pulumi.Float64Array{
pulumi.Float64(0),
},
PostLangs: pulumi.StringArray{
pulumi.String("string"),
},
Adom: pulumi.String("string"),
ProxyAfterTcpHandshake: pulumi.String("string"),
AddressIpRating: pulumi.String("string"),
ComfortInterval: pulumi.Float64(0),
BlockPageStatusCode: pulumi.Float64(0),
SslOffloaded: pulumi.String("string"),
Scopetype: pulumi.String("string"),
Status: pulumi.String("string"),
StreamBasedUncompressedLimit: pulumi.Float64(0),
StreamingContentBypass: pulumi.String("string"),
StripXForwardedFor: pulumi.String("string"),
SwitchingProtocols: pulumi.String("string"),
TcpWindowMaximum: pulumi.Float64(0),
TcpWindowMinimum: pulumi.Float64(0),
TcpWindowSize: pulumi.Float64(0),
TcpWindowType: pulumi.String("string"),
TunnelNonHttp: pulumi.String("string"),
UncompressedNestLimit: pulumi.Float64(0),
UncompressedOversizeLimit: pulumi.Float64(0),
UnknownContentEncoding: pulumi.String("string"),
ScanBzip2: pulumi.String("string"),
VerifyDnsForPolicyMatching: pulumi.String("string"),
})

    var objectFirewallProfileprotocoloptionsHttpResource = new ObjectFirewallProfileprotocoloptionsHttp("objectFirewallProfileprotocoloptionsHttpResource", ObjectFirewallProfileprotocoloptionsHttpArgs.builder()
    .profileProtocolOptions("string")
    .rangeBlock("string")
    .unknownHttpVersion("string")
    .comfortAmount(0)
    .retryCount(0)
    .domainFronting("string")
    .fortinetBar("string")
    .fortinetBarPort(0)
    .h2c("string")
    .httpPolicy("string")
    .inspectAll("string")
    .objectFirewallProfileprotocoloptionsHttpId("string")
    .options("string")
    .oversizeLimit(0)
    .ports(0)
    .postLangs("string")
    .adom("string")
    .proxyAfterTcpHandshake("string")
    .addressIpRating("string")
    .comfortInterval(0)
    .blockPageStatusCode(0)
    .sslOffloaded("string")
    .scopetype("string")
    .status("string")
    .streamBasedUncompressedLimit(0)
    .streamingContentBypass("string")
    .stripXForwardedFor("string")
    .switchingProtocols("string")
    .tcpWindowMaximum(0)
    .tcpWindowMinimum(0)
    .tcpWindowSize(0)
    .tcpWindowType("string")
    .tunnelNonHttp("string")
    .uncompressedNestLimit(0)
    .uncompressedOversizeLimit(0)
    .unknownContentEncoding("string")
    .scanBzip2("string")
    .verifyDnsForPolicyMatching("string")
    .build());

    object_firewall_profileprotocoloptions_http_resource = fortimanager.ObjectFirewallProfileprotocoloptionsHttp("objectFirewallProfileprotocoloptionsHttpResource",
    profile_protocol_options="string",
    range_block="string",
    unknown_http_version="string",
    comfort_amount=0,
    retry_count=0,
    domain_fronting="string",
    fortinet_bar="string",
    fortinet_bar_port=0,
    h2c="string",
    http_policy="string",
    inspect_all="string",
    object_firewall_profileprotocoloptions_http_id="string",
    options=["string"],
    oversize_limit=0,
    ports=[0],
    post_langs=["string"],
    adom="string",
    proxy_after_tcp_handshake="string",
    address_ip_rating="string",
    comfort_interval=0,
    block_page_status_code=0,
    ssl_offloaded="string",
    scopetype="string",
    status="string",
    stream_based_uncompressed_limit=0,
    streaming_content_bypass="string",
    strip_x_forwarded_for="string",
    switching_protocols="string",
    tcp_window_maximum=0,
    tcp_window_minimum=0,
    tcp_window_size=0,
    tcp_window_type="string",
    tunnel_non_http="string",
    uncompressed_nest_limit=0,
    uncompressed_oversize_limit=0,
    unknown_content_encoding="string",
    scan_bzip2="string",
    verify_dns_for_policy_matching="string")

    const objectFirewallProfileprotocoloptionsHttpResource = new fortimanager.ObjectFirewallProfileprotocoloptionsHttp("objectFirewallProfileprotocoloptionsHttpResource", {
    profileProtocolOptions: "string",
    rangeBlock: "string",
    unknownHttpVersion: "string",
    comfortAmount: 0,
    retryCount: 0,
    domainFronting: "string",
    fortinetBar: "string",
    fortinetBarPort: 0,
    h2c: "string",
    httpPolicy: "string",
    inspectAll: "string",
    objectFirewallProfileprotocoloptionsHttpId: "string",
    options: ["string"],
    oversizeLimit: 0,
    ports: [0],
    postLangs: ["string"],
    adom: "string",
    proxyAfterTcpHandshake: "string",
    addressIpRating: "string",
    comfortInterval: 0,
    blockPageStatusCode: 0,
    sslOffloaded: "string",
    scopetype: "string",
    status: "string",
    streamBasedUncompressedLimit: 0,
    streamingContentBypass: "string",
    stripXForwardedFor: "string",
    switchingProtocols: "string",
    tcpWindowMaximum: 0,
    tcpWindowMinimum: 0,
    tcpWindowSize: 0,
    tcpWindowType: "string",
    tunnelNonHttp: "string",
    uncompressedNestLimit: 0,
    uncompressedOversizeLimit: 0,
    unknownContentEncoding: "string",
    scanBzip2: "string",
    verifyDnsForPolicyMatching: "string",
});

    type: fortimanager:ObjectFirewallProfileprotocoloptionsHttp
properties:
    addressIpRating: string
    adom: string
    blockPageStatusCode: 0
    comfortAmount: 0
    comfortInterval: 0
    domainFronting: string
    fortinetBar: string
    fortinetBarPort: 0
    h2c: string
    httpPolicy: string
    inspectAll: string
    objectFirewallProfileprotocoloptionsHttpId: string
    options:
        - string
    oversizeLimit: 0
    ports:
        - 0
    postLangs:
        - string
    profileProtocolOptions: string
    proxyAfterTcpHandshake: string
    rangeBlock: string
    retryCount: 0
    scanBzip2: string
    scopetype: string
    sslOffloaded: string
    status: string
    streamBasedUncompressedLimit: 0
    streamingContentBypass: string
    stripXForwardedFor: string
    switchingProtocols: string
    tcpWindowMaximum: 0
    tcpWindowMinimum: 0
    tcpWindowSize: 0
    tcpWindowType: string
    tunnelNonHttp: string
    uncompressedNestLimit: 0
    uncompressedOversizeLimit: 0
    unknownContentEncoding: string
    unknownHttpVersion: string
    verifyDnsForPolicyMatching: string

    ObjectFirewallProfileprotocoloptionsHttp Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ObjectFirewallProfileprotocoloptionsHttp resource accepts the following input properties:

    ProfileProtocolOptions string
    Profile Protocol Options.
    AddressIpRating string
    Enable/disable IP based URL rating. Valid values: disable, enable.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    BlockPageStatusCode double
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    ComfortAmount double
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    ComfortInterval double
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    DomainFronting string
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    FortinetBar string
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    FortinetBarPort double
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    H2c string
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    HttpPolicy string
    Enable/disable HTTP policy check. Valid values: disable, enable.
    InspectAll string
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    ObjectFirewallProfileprotocoloptionsHttpId string
    an identifier for the resource.
    Options List<string>
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    OversizeLimit double
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    Ports List<double>
    Ports to scan for content (1 - 65535, default = 80).
    PostLangs List<string>
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    ProxyAfterTcpHandshake string
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    RangeBlock string
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    RetryCount double
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    ScanBzip2 string
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SslOffloaded string
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    Status string
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    StreamBasedUncompressedLimit double
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    StreamingContentBypass string
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    StripXForwardedFor string
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    SwitchingProtocols string
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    TcpWindowMaximum double
    Maximum dynamic TCP window size (default = 8MB).
    TcpWindowMinimum double
    Minimum dynamic TCP window size (default = 128KB).
    TcpWindowSize double
    Set TCP static window size (default = 256KB).
    TcpWindowType string
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    TunnelNonHttp string
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    UncompressedNestLimit double
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    UncompressedOversizeLimit double
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    UnknownContentEncoding string
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    UnknownHttpVersion string
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    VerifyDnsForPolicyMatching string
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
    ProfileProtocolOptions string
    Profile Protocol Options.
    AddressIpRating string
    Enable/disable IP based URL rating. Valid values: disable, enable.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    BlockPageStatusCode float64
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    ComfortAmount float64
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    ComfortInterval float64
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    DomainFronting string
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    FortinetBar string
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    FortinetBarPort float64
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    H2c string
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    HttpPolicy string
    Enable/disable HTTP policy check. Valid values: disable, enable.
    InspectAll string
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    ObjectFirewallProfileprotocoloptionsHttpId string
    an identifier for the resource.
    Options []string
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    OversizeLimit float64
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    Ports []float64
    Ports to scan for content (1 - 65535, default = 80).
    PostLangs []string
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    ProxyAfterTcpHandshake string
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    RangeBlock string
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    RetryCount float64
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    ScanBzip2 string
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SslOffloaded string
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    Status string
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    StreamBasedUncompressedLimit float64
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    StreamingContentBypass string
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    StripXForwardedFor string
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    SwitchingProtocols string
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    TcpWindowMaximum float64
    Maximum dynamic TCP window size (default = 8MB).
    TcpWindowMinimum float64
    Minimum dynamic TCP window size (default = 128KB).
    TcpWindowSize float64
    Set TCP static window size (default = 256KB).
    TcpWindowType string
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    TunnelNonHttp string
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    UncompressedNestLimit float64
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    UncompressedOversizeLimit float64
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    UnknownContentEncoding string
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    UnknownHttpVersion string
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    VerifyDnsForPolicyMatching string
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
    profileProtocolOptions String
    Profile Protocol Options.
    addressIpRating String
    Enable/disable IP based URL rating. Valid values: disable, enable.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockPageStatusCode Double
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    comfortAmount Double
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    comfortInterval Double
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    domainFronting String
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    fortinetBar String
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    fortinetBarPort Double
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    h2c String
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    httpPolicy String
    Enable/disable HTTP policy check. Valid values: disable, enable.
    inspectAll String
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    objectFirewallProfileprotocoloptionsHttpId String
    an identifier for the resource.
    options List<String>
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    oversizeLimit Double
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    ports List<Double>
    Ports to scan for content (1 - 65535, default = 80).
    postLangs List<String>
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    proxyAfterTcpHandshake String
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    rangeBlock String
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    retryCount Double
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    scanBzip2 String
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sslOffloaded String
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    status String
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    streamBasedUncompressedLimit Double
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    streamingContentBypass String
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    stripXForwardedFor String
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    switchingProtocols String
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    tcpWindowMaximum Double
    Maximum dynamic TCP window size (default = 8MB).
    tcpWindowMinimum Double
    Minimum dynamic TCP window size (default = 128KB).
    tcpWindowSize Double
    Set TCP static window size (default = 256KB).
    tcpWindowType String
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    tunnelNonHttp String
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    uncompressedNestLimit Double
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    uncompressedOversizeLimit Double
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    unknownContentEncoding String
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    unknownHttpVersion String
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    verifyDnsForPolicyMatching String
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
    profileProtocolOptions string
    Profile Protocol Options.
    addressIpRating string
    Enable/disable IP based URL rating. Valid values: disable, enable.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockPageStatusCode number
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    comfortAmount number
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    comfortInterval number
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    domainFronting string
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    fortinetBar string
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    fortinetBarPort number
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    h2c string
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    httpPolicy string
    Enable/disable HTTP policy check. Valid values: disable, enable.
    inspectAll string
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    objectFirewallProfileprotocoloptionsHttpId string
    an identifier for the resource.
    options string[]
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    oversizeLimit number
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    ports number[]
    Ports to scan for content (1 - 65535, default = 80).
    postLangs string[]
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    proxyAfterTcpHandshake string
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    rangeBlock string
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    retryCount number
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    scanBzip2 string
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sslOffloaded string
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    status string
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    streamBasedUncompressedLimit number
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    streamingContentBypass string
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    stripXForwardedFor string
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    switchingProtocols string
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    tcpWindowMaximum number
    Maximum dynamic TCP window size (default = 8MB).
    tcpWindowMinimum number
    Minimum dynamic TCP window size (default = 128KB).
    tcpWindowSize number
    Set TCP static window size (default = 256KB).
    tcpWindowType string
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    tunnelNonHttp string
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    uncompressedNestLimit number
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    uncompressedOversizeLimit number
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    unknownContentEncoding string
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    unknownHttpVersion string
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    verifyDnsForPolicyMatching string
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
    profile_protocol_options str
    Profile Protocol Options.
    address_ip_rating str
    Enable/disable IP based URL rating. Valid values: disable, enable.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    block_page_status_code float
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    comfort_amount float
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    comfort_interval float
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    domain_fronting str
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    fortinet_bar str
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    fortinet_bar_port float
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    h2c str
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    http_policy str
    Enable/disable HTTP policy check. Valid values: disable, enable.
    inspect_all str
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    object_firewall_profileprotocoloptions_http_id str
    an identifier for the resource.
    options Sequence[str]
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    oversize_limit float
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    ports Sequence[float]
    Ports to scan for content (1 - 65535, default = 80).
    post_langs Sequence[str]
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    proxy_after_tcp_handshake str
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    range_block str
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    retry_count float
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    scan_bzip2 str
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ssl_offloaded str
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    status str
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    stream_based_uncompressed_limit float
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    streaming_content_bypass str
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    strip_x_forwarded_for str
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    switching_protocols str
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    tcp_window_maximum float
    Maximum dynamic TCP window size (default = 8MB).
    tcp_window_minimum float
    Minimum dynamic TCP window size (default = 128KB).
    tcp_window_size float
    Set TCP static window size (default = 256KB).
    tcp_window_type str
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    tunnel_non_http str
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    uncompressed_nest_limit float
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    uncompressed_oversize_limit float
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    unknown_content_encoding str
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    unknown_http_version str
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    verify_dns_for_policy_matching str
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
    profileProtocolOptions String
    Profile Protocol Options.
    addressIpRating String
    Enable/disable IP based URL rating. Valid values: disable, enable.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockPageStatusCode Number
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    comfortAmount Number
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    comfortInterval Number
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    domainFronting String
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    fortinetBar String
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    fortinetBarPort Number
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    h2c String
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    httpPolicy String
    Enable/disable HTTP policy check. Valid values: disable, enable.
    inspectAll String
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    objectFirewallProfileprotocoloptionsHttpId String
    an identifier for the resource.
    options List<String>
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    oversizeLimit Number
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    ports List<Number>
    Ports to scan for content (1 - 65535, default = 80).
    postLangs List<String>
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    proxyAfterTcpHandshake String
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    rangeBlock String
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    retryCount Number
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    scanBzip2 String
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sslOffloaded String
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    status String
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    streamBasedUncompressedLimit Number
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    streamingContentBypass String
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    stripXForwardedFor String
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    switchingProtocols String
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    tcpWindowMaximum Number
    Maximum dynamic TCP window size (default = 8MB).
    tcpWindowMinimum Number
    Minimum dynamic TCP window size (default = 128KB).
    tcpWindowSize Number
    Set TCP static window size (default = 256KB).
    tcpWindowType String
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    tunnelNonHttp String
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    uncompressedNestLimit Number
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    uncompressedOversizeLimit Number
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    unknownContentEncoding String
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    unknownHttpVersion String
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    verifyDnsForPolicyMatching String
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ObjectFirewallProfileprotocoloptionsHttp resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ObjectFirewallProfileprotocoloptionsHttp Resource

    Get an existing ObjectFirewallProfileprotocoloptionsHttp resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ObjectFirewallProfileprotocoloptionsHttpState, opts?: CustomResourceOptions): ObjectFirewallProfileprotocoloptionsHttp
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        address_ip_rating: Optional[str] = None,
        adom: Optional[str] = None,
        block_page_status_code: Optional[float] = None,
        comfort_amount: Optional[float] = None,
        comfort_interval: Optional[float] = None,
        domain_fronting: Optional[str] = None,
        fortinet_bar: Optional[str] = None,
        fortinet_bar_port: Optional[float] = None,
        h2c: Optional[str] = None,
        http_policy: Optional[str] = None,
        inspect_all: Optional[str] = None,
        object_firewall_profileprotocoloptions_http_id: Optional[str] = None,
        options: Optional[Sequence[str]] = None,
        oversize_limit: Optional[float] = None,
        ports: Optional[Sequence[float]] = None,
        post_langs: Optional[Sequence[str]] = None,
        profile_protocol_options: Optional[str] = None,
        proxy_after_tcp_handshake: Optional[str] = None,
        range_block: Optional[str] = None,
        retry_count: Optional[float] = None,
        scan_bzip2: Optional[str] = None,
        scopetype: Optional[str] = None,
        ssl_offloaded: Optional[str] = None,
        status: Optional[str] = None,
        stream_based_uncompressed_limit: Optional[float] = None,
        streaming_content_bypass: Optional[str] = None,
        strip_x_forwarded_for: Optional[str] = None,
        switching_protocols: Optional[str] = None,
        tcp_window_maximum: Optional[float] = None,
        tcp_window_minimum: Optional[float] = None,
        tcp_window_size: Optional[float] = None,
        tcp_window_type: Optional[str] = None,
        tunnel_non_http: Optional[str] = None,
        uncompressed_nest_limit: Optional[float] = None,
        uncompressed_oversize_limit: Optional[float] = None,
        unknown_content_encoding: Optional[str] = None,
        unknown_http_version: Optional[str] = None,
        verify_dns_for_policy_matching: Optional[str] = None) -> ObjectFirewallProfileprotocoloptionsHttp
    func GetObjectFirewallProfileprotocoloptionsHttp(ctx *Context, name string, id IDInput, state *ObjectFirewallProfileprotocoloptionsHttpState, opts ...ResourceOption) (*ObjectFirewallProfileprotocoloptionsHttp, error)
    public static ObjectFirewallProfileprotocoloptionsHttp Get(string name, Input<string> id, ObjectFirewallProfileprotocoloptionsHttpState? state, CustomResourceOptions? opts = null)
    public static ObjectFirewallProfileprotocoloptionsHttp get(String name, Output<String> id, ObjectFirewallProfileprotocoloptionsHttpState state, CustomResourceOptions options)
    resources:  _:    type: fortimanager:ObjectFirewallProfileprotocoloptionsHttp    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AddressIpRating string
    Enable/disable IP based URL rating. Valid values: disable, enable.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    BlockPageStatusCode double
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    ComfortAmount double
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    ComfortInterval double
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    DomainFronting string
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    FortinetBar string
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    FortinetBarPort double
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    H2c string
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    HttpPolicy string
    Enable/disable HTTP policy check. Valid values: disable, enable.
    InspectAll string
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    ObjectFirewallProfileprotocoloptionsHttpId string
    an identifier for the resource.
    Options List<string>
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    OversizeLimit double
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    Ports List<double>
    Ports to scan for content (1 - 65535, default = 80).
    PostLangs List<string>
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    ProfileProtocolOptions string
    Profile Protocol Options.
    ProxyAfterTcpHandshake string
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    RangeBlock string
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    RetryCount double
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    ScanBzip2 string
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SslOffloaded string
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    Status string
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    StreamBasedUncompressedLimit double
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    StreamingContentBypass string
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    StripXForwardedFor string
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    SwitchingProtocols string
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    TcpWindowMaximum double
    Maximum dynamic TCP window size (default = 8MB).
    TcpWindowMinimum double
    Minimum dynamic TCP window size (default = 128KB).
    TcpWindowSize double
    Set TCP static window size (default = 256KB).
    TcpWindowType string
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    TunnelNonHttp string
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    UncompressedNestLimit double
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    UncompressedOversizeLimit double
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    UnknownContentEncoding string
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    UnknownHttpVersion string
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    VerifyDnsForPolicyMatching string
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
    AddressIpRating string
    Enable/disable IP based URL rating. Valid values: disable, enable.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    BlockPageStatusCode float64
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    ComfortAmount float64
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    ComfortInterval float64
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    DomainFronting string
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    FortinetBar string
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    FortinetBarPort float64
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    H2c string
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    HttpPolicy string
    Enable/disable HTTP policy check. Valid values: disable, enable.
    InspectAll string
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    ObjectFirewallProfileprotocoloptionsHttpId string
    an identifier for the resource.
    Options []string
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    OversizeLimit float64
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    Ports []float64
    Ports to scan for content (1 - 65535, default = 80).
    PostLangs []string
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    ProfileProtocolOptions string
    Profile Protocol Options.
    ProxyAfterTcpHandshake string
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    RangeBlock string
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    RetryCount float64
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    ScanBzip2 string
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SslOffloaded string
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    Status string
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    StreamBasedUncompressedLimit float64
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    StreamingContentBypass string
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    StripXForwardedFor string
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    SwitchingProtocols string
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    TcpWindowMaximum float64
    Maximum dynamic TCP window size (default = 8MB).
    TcpWindowMinimum float64
    Minimum dynamic TCP window size (default = 128KB).
    TcpWindowSize float64
    Set TCP static window size (default = 256KB).
    TcpWindowType string
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    TunnelNonHttp string
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    UncompressedNestLimit float64
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    UncompressedOversizeLimit float64
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    UnknownContentEncoding string
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    UnknownHttpVersion string
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    VerifyDnsForPolicyMatching string
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
    addressIpRating String
    Enable/disable IP based URL rating. Valid values: disable, enable.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockPageStatusCode Double
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    comfortAmount Double
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    comfortInterval Double
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    domainFronting String
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    fortinetBar String
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    fortinetBarPort Double
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    h2c String
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    httpPolicy String
    Enable/disable HTTP policy check. Valid values: disable, enable.
    inspectAll String
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    objectFirewallProfileprotocoloptionsHttpId String
    an identifier for the resource.
    options List<String>
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    oversizeLimit Double
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    ports List<Double>
    Ports to scan for content (1 - 65535, default = 80).
    postLangs List<String>
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    profileProtocolOptions String
    Profile Protocol Options.
    proxyAfterTcpHandshake String
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    rangeBlock String
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    retryCount Double
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    scanBzip2 String
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sslOffloaded String
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    status String
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    streamBasedUncompressedLimit Double
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    streamingContentBypass String
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    stripXForwardedFor String
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    switchingProtocols String
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    tcpWindowMaximum Double
    Maximum dynamic TCP window size (default = 8MB).
    tcpWindowMinimum Double
    Minimum dynamic TCP window size (default = 128KB).
    tcpWindowSize Double
    Set TCP static window size (default = 256KB).
    tcpWindowType String
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    tunnelNonHttp String
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    uncompressedNestLimit Double
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    uncompressedOversizeLimit Double
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    unknownContentEncoding String
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    unknownHttpVersion String
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    verifyDnsForPolicyMatching String
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
    addressIpRating string
    Enable/disable IP based URL rating. Valid values: disable, enable.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockPageStatusCode number
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    comfortAmount number
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    comfortInterval number
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    domainFronting string
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    fortinetBar string
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    fortinetBarPort number
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    h2c string
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    httpPolicy string
    Enable/disable HTTP policy check. Valid values: disable, enable.
    inspectAll string
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    objectFirewallProfileprotocoloptionsHttpId string
    an identifier for the resource.
    options string[]
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    oversizeLimit number
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    ports number[]
    Ports to scan for content (1 - 65535, default = 80).
    postLangs string[]
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    profileProtocolOptions string
    Profile Protocol Options.
    proxyAfterTcpHandshake string
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    rangeBlock string
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    retryCount number
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    scanBzip2 string
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sslOffloaded string
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    status string
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    streamBasedUncompressedLimit number
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    streamingContentBypass string
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    stripXForwardedFor string
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    switchingProtocols string
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    tcpWindowMaximum number
    Maximum dynamic TCP window size (default = 8MB).
    tcpWindowMinimum number
    Minimum dynamic TCP window size (default = 128KB).
    tcpWindowSize number
    Set TCP static window size (default = 256KB).
    tcpWindowType string
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    tunnelNonHttp string
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    uncompressedNestLimit number
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    uncompressedOversizeLimit number
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    unknownContentEncoding string
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    unknownHttpVersion string
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    verifyDnsForPolicyMatching string
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
    address_ip_rating str
    Enable/disable IP based URL rating. Valid values: disable, enable.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    block_page_status_code float
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    comfort_amount float
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    comfort_interval float
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    domain_fronting str
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    fortinet_bar str
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    fortinet_bar_port float
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    h2c str
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    http_policy str
    Enable/disable HTTP policy check. Valid values: disable, enable.
    inspect_all str
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    object_firewall_profileprotocoloptions_http_id str
    an identifier for the resource.
    options Sequence[str]
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    oversize_limit float
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    ports Sequence[float]
    Ports to scan for content (1 - 65535, default = 80).
    post_langs Sequence[str]
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    profile_protocol_options str
    Profile Protocol Options.
    proxy_after_tcp_handshake str
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    range_block str
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    retry_count float
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    scan_bzip2 str
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ssl_offloaded str
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    status str
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    stream_based_uncompressed_limit float
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    streaming_content_bypass str
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    strip_x_forwarded_for str
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    switching_protocols str
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    tcp_window_maximum float
    Maximum dynamic TCP window size (default = 8MB).
    tcp_window_minimum float
    Minimum dynamic TCP window size (default = 128KB).
    tcp_window_size float
    Set TCP static window size (default = 256KB).
    tcp_window_type str
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    tunnel_non_http str
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    uncompressed_nest_limit float
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    uncompressed_oversize_limit float
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    unknown_content_encoding str
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    unknown_http_version str
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    verify_dns_for_policy_matching str
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
    addressIpRating String
    Enable/disable IP based URL rating. Valid values: disable, enable.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockPageStatusCode Number
    Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
    comfortAmount Number
    Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
    comfortInterval Number
    Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
    domainFronting String
    Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
    fortinetBar String
    Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
    fortinetBarPort Number
    Port for use by Fortinet Bar (1 - 65535, default = 8011).
    h2c String
    Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
    httpPolicy String
    Enable/disable HTTP policy check. Valid values: disable, enable.
    inspectAll String
    Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
    objectFirewallProfileprotocoloptionsHttpId String
    an identifier for the resource.
    options List<String>
    One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
    oversizeLimit Number
    Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
    ports List<Number>
    Ports to scan for content (1 - 65535, default = 80).
    postLangs List<String>
    ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
    profileProtocolOptions String
    Profile Protocol Options.
    proxyAfterTcpHandshake String
    Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
    rangeBlock String
    Enable/disable blocking of partial downloads. Valid values: disable, enable.
    retryCount Number
    Number of attempts to retry HTTP connection (0 - 100, default = 0).
    scanBzip2 String
    Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sslOffloaded String
    SSL decryption and encryption performed by an external device. Valid values: no, yes.
    status String
    Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
    streamBasedUncompressedLimit Number
    Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
    streamingContentBypass String
    Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
    stripXForwardedFor String
    Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
    switchingProtocols String
    Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
    tcpWindowMaximum Number
    Maximum dynamic TCP window size (default = 8MB).
    tcpWindowMinimum Number
    Minimum dynamic TCP window size (default = 128KB).
    tcpWindowSize Number
    Set TCP static window size (default = 256KB).
    tcpWindowType String
    Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
    tunnelNonHttp String
    Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
    uncompressedNestLimit Number
    Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
    uncompressedOversizeLimit Number
    Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
    unknownContentEncoding String
    Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
    unknownHttpVersion String
    How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
    verifyDnsForPolicyMatching String
    Enable/disable verification of DNS for policy matching. Valid values: disable, enable.

    Import

    ObjectFirewall ProfileProtocolOptionsHttp can be imported using any of these accepted formats:

    Set import_options = [“profile_protocol_options=YOUR_VALUE”] in the provider section.

    $ export “FORTIMANAGER_IMPORT_TABLE”=“true”

    $ pulumi import fortimanager:index/objectFirewallProfileprotocoloptionsHttp:ObjectFirewallProfileprotocoloptionsHttp labelname ObjectFirewallProfileProtocolOptionsHttp

    $ unset “FORTIMANAGER_IMPORT_TABLE”

    -> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortimanager fortinetdev/terraform-provider-fortimanager
    License
    Notes
    This Pulumi package is based on the fortimanager Terraform Provider.
    fortimanager logo
    fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
    fortinetdev/terraform-provider-fortimanager