Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. ObjectGlobalIpsSensorEntries
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectGlobalIpsSensorEntries

Explore with Pulumi AI

fortimanager logo
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

    IPS sensor filter.

    This resource is a sub resource for variable entries of resource fortimanager.ObjectGlobalIpsSensor. Conflict and overwrite may occur if use both of them. The following variables have sub resource. Avoid using them together, otherwise conflicts and overwrites may occur.

    • exempt_ip: fortimanager.ObjectGlobalIpsSensorEntriesExemptip

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";

const trnameObjectGlobalIpsSensor = new fortimanager.ObjectGlobalIpsSensor("trnameObjectGlobalIpsSensor", {});
const trnameObjectGlobalIpsSensorEntries = new fortimanager.ObjectGlobalIpsSensorEntries("trnameObjectGlobalIpsSensorEntries", {
    sensor: trnameObjectGlobalIpsSensor.name,
    applications: ["all"],
    fosid: 3,
    log: "enable",
}, {
    dependsOn: [trnameObjectGlobalIpsSensor],
});

    import pulumi
import pulumi_fortimanager as fortimanager

trname_object_global_ips_sensor = fortimanager.ObjectGlobalIpsSensor("trnameObjectGlobalIpsSensor")
trname_object_global_ips_sensor_entries = fortimanager.ObjectGlobalIpsSensorEntries("trnameObjectGlobalIpsSensorEntries",
    sensor=trname_object_global_ips_sensor.name,
    applications=["all"],
    fosid=3,
    log="enable",
    opts = pulumi.ResourceOptions(depends_on=[trname_object_global_ips_sensor]))

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		trnameObjectGlobalIpsSensor, err := fortimanager.NewObjectGlobalIpsSensor(ctx, "trnameObjectGlobalIpsSensor", nil)
		if err != nil {
			return err
		}
		_, err = fortimanager.NewObjectGlobalIpsSensorEntries(ctx, "trnameObjectGlobalIpsSensorEntries", &fortimanager.ObjectGlobalIpsSensorEntriesArgs{
			Sensor: trnameObjectGlobalIpsSensor.Name,
			Applications: pulumi.StringArray{
				pulumi.String("all"),
			},
			Fosid: pulumi.Float64(3),
			Log:   pulumi.String("enable"),
		}, pulumi.DependsOn([]pulumi.Resource{
			trnameObjectGlobalIpsSensor,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;

return await Deployment.RunAsync(() => 
{
    var trnameObjectGlobalIpsSensor = new Fortimanager.ObjectGlobalIpsSensor("trnameObjectGlobalIpsSensor");

    var trnameObjectGlobalIpsSensorEntries = new Fortimanager.ObjectGlobalIpsSensorEntries("trnameObjectGlobalIpsSensorEntries", new()
    {
        Sensor = trnameObjectGlobalIpsSensor.Name,
        Applications = new[]
        {
            "all",
        },
        Fosid = 3,
        Log = "enable",
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            trnameObjectGlobalIpsSensor,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.ObjectGlobalIpsSensor;
import com.pulumi.fortimanager.ObjectGlobalIpsSensorEntries;
import com.pulumi.fortimanager.ObjectGlobalIpsSensorEntriesArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trnameObjectGlobalIpsSensor = new ObjectGlobalIpsSensor("trnameObjectGlobalIpsSensor");

        var trnameObjectGlobalIpsSensorEntries = new ObjectGlobalIpsSensorEntries("trnameObjectGlobalIpsSensorEntries", ObjectGlobalIpsSensorEntriesArgs.builder()
            .sensor(trnameObjectGlobalIpsSensor.name())
            .applications("all")
            .fosid(3)
            .log("enable")
            .build(), CustomResourceOptions.builder()
                .dependsOn(trnameObjectGlobalIpsSensor)
                .build());

    }
}

    resources:
  trnameObjectGlobalIpsSensorEntries:
    type: fortimanager:ObjectGlobalIpsSensorEntries
    properties:
      sensor: ${trnameObjectGlobalIpsSensor.name}
      applications:
        - all
      fosid: 3
      log: enable
    options:
      dependsOn:
        - ${trnameObjectGlobalIpsSensor}
  trnameObjectGlobalIpsSensor:
    type: fortimanager:ObjectGlobalIpsSensor

    Create ObjectGlobalIpsSensorEntries Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ObjectGlobalIpsSensorEntries(name: string, args: ObjectGlobalIpsSensorEntriesArgs, opts?: CustomResourceOptions);
    @overload
def ObjectGlobalIpsSensorEntries(resource_name: str,
                                 args: ObjectGlobalIpsSensorEntriesArgs,
                                 opts: Optional[ResourceOptions] = None)

@overload
def ObjectGlobalIpsSensorEntries(resource_name: str,
                                 opts: Optional[ResourceOptions] = None,
                                 sensor: Optional[str] = None,
                                 position: Optional[str] = None,
                                 vuln_types: Optional[Sequence[float]] = None,
                                 os: Optional[Sequence[str]] = None,
                                 default_action: Optional[str] = None,
                                 default_status: Optional[str] = None,
                                 dynamic_sort_subtable: Optional[str] = None,
                                 exempt_ips: Optional[Sequence[ObjectGlobalIpsSensorEntriesExemptIpArgs]] = None,
                                 fosid: Optional[float] = None,
                                 last_modified: Optional[str] = None,
                                 locations: Optional[Sequence[str]] = None,
                                 log: Optional[str] = None,
                                 log_attack_context: Optional[str] = None,
                                 log_packet: Optional[str] = None,
                                 object_global_ips_sensor_entries_id: Optional[str] = None,
                                 cves: Optional[Sequence[str]] = None,
                                 protocols: Optional[Sequence[str]] = None,
                                 applications: Optional[Sequence[str]] = None,
                                 quarantine: Optional[str] = None,
                                 quarantine_expiry: Optional[str] = None,
                                 quarantine_log: Optional[str] = None,
                                 rate_count: Optional[float] = None,
                                 rate_duration: Optional[float] = None,
                                 rate_mode: Optional[str] = None,
                                 rate_track: Optional[str] = None,
                                 rules: Optional[Sequence[str]] = None,
                                 scopetype: Optional[str] = None,
                                 adom: Optional[str] = None,
                                 severities: Optional[Sequence[str]] = None,
                                 status: Optional[str] = None,
                                 tags: Optional[Sequence[str]] = None,
                                 action: Optional[str] = None)
    func NewObjectGlobalIpsSensorEntries(ctx *Context, name string, args ObjectGlobalIpsSensorEntriesArgs, opts ...ResourceOption) (*ObjectGlobalIpsSensorEntries, error)
    public ObjectGlobalIpsSensorEntries(string name, ObjectGlobalIpsSensorEntriesArgs args, CustomResourceOptions? opts = null)
    public ObjectGlobalIpsSensorEntries(String name, ObjectGlobalIpsSensorEntriesArgs args)
public ObjectGlobalIpsSensorEntries(String name, ObjectGlobalIpsSensorEntriesArgs args, CustomResourceOptions options)

    type: fortimanager:ObjectGlobalIpsSensorEntries
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ObjectGlobalIpsSensorEntriesArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ObjectGlobalIpsSensorEntriesArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ObjectGlobalIpsSensorEntriesArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ObjectGlobalIpsSensorEntriesArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ObjectGlobalIpsSensorEntriesArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var objectGlobalIpsSensorEntriesResource = new Fortimanager.ObjectGlobalIpsSensorEntries("objectGlobalIpsSensorEntriesResource", new()
{
    Sensor = "string",
    Position = "string",
    VulnTypes = new[]
    {
        0,
    },
    Os = new[]
    {
        "string",
    },
    DefaultAction = "string",
    DefaultStatus = "string",
    DynamicSortSubtable = "string",
    ExemptIps = new[]
    {
        new Fortimanager.Inputs.ObjectGlobalIpsSensorEntriesExemptIpArgs
        {
            DstIp = "string",
            Id = 0,
            SrcIp = "string",
        },
    },
    Fosid = 0,
    LastModified = "string",
    Locations = new[]
    {
        "string",
    },
    Log = "string",
    LogAttackContext = "string",
    LogPacket = "string",
    ObjectGlobalIpsSensorEntriesId = "string",
    Cves = new[]
    {
        "string",
    },
    Protocols = new[]
    {
        "string",
    },
    Applications = new[]
    {
        "string",
    },
    Quarantine = "string",
    QuarantineExpiry = "string",
    QuarantineLog = "string",
    RateCount = 0,
    RateDuration = 0,
    RateMode = "string",
    RateTrack = "string",
    Rules = new[]
    {
        "string",
    },
    Scopetype = "string",
    Adom = "string",
    Severities = new[]
    {
        "string",
    },
    Status = "string",
    Tags = new[]
    {
        "string",
    },
    Action = "string",
});

    example, err := fortimanager.NewObjectGlobalIpsSensorEntries(ctx, "objectGlobalIpsSensorEntriesResource", &fortimanager.ObjectGlobalIpsSensorEntriesArgs{
Sensor: pulumi.String("string"),
Position: pulumi.String("string"),
VulnTypes: pulumi.Float64Array{
pulumi.Float64(0),
},
Os: pulumi.StringArray{
pulumi.String("string"),
},
DefaultAction: pulumi.String("string"),
DefaultStatus: pulumi.String("string"),
DynamicSortSubtable: pulumi.String("string"),
ExemptIps: .ObjectGlobalIpsSensorEntriesExemptIpTypeArray{
&.ObjectGlobalIpsSensorEntriesExemptIpTypeArgs{
DstIp: pulumi.String("string"),
Id: pulumi.Float64(0),
SrcIp: pulumi.String("string"),
},
},
Fosid: pulumi.Float64(0),
LastModified: pulumi.String("string"),
Locations: pulumi.StringArray{
pulumi.String("string"),
},
Log: pulumi.String("string"),
LogAttackContext: pulumi.String("string"),
LogPacket: pulumi.String("string"),
ObjectGlobalIpsSensorEntriesId: pulumi.String("string"),
Cves: pulumi.StringArray{
pulumi.String("string"),
},
Protocols: pulumi.StringArray{
pulumi.String("string"),
},
Applications: pulumi.StringArray{
pulumi.String("string"),
},
Quarantine: pulumi.String("string"),
QuarantineExpiry: pulumi.String("string"),
QuarantineLog: pulumi.String("string"),
RateCount: pulumi.Float64(0),
RateDuration: pulumi.Float64(0),
RateMode: pulumi.String("string"),
RateTrack: pulumi.String("string"),
Rules: pulumi.StringArray{
pulumi.String("string"),
},
Scopetype: pulumi.String("string"),
Adom: pulumi.String("string"),
Severities: pulumi.StringArray{
pulumi.String("string"),
},
Status: pulumi.String("string"),
Tags: pulumi.StringArray{
pulumi.String("string"),
},
Action: pulumi.String("string"),
})

    var objectGlobalIpsSensorEntriesResource = new ObjectGlobalIpsSensorEntries("objectGlobalIpsSensorEntriesResource", ObjectGlobalIpsSensorEntriesArgs.builder()
    .sensor("string")
    .position("string")
    .vulnTypes(0)
    .os("string")
    .defaultAction("string")
    .defaultStatus("string")
    .dynamicSortSubtable("string")
    .exemptIps(ObjectGlobalIpsSensorEntriesExemptIpArgs.builder()
        .dstIp("string")
        .id(0)
        .srcIp("string")
        .build())
    .fosid(0)
    .lastModified("string")
    .locations("string")
    .log("string")
    .logAttackContext("string")
    .logPacket("string")
    .objectGlobalIpsSensorEntriesId("string")
    .cves("string")
    .protocols("string")
    .applications("string")
    .quarantine("string")
    .quarantineExpiry("string")
    .quarantineLog("string")
    .rateCount(0)
    .rateDuration(0)
    .rateMode("string")
    .rateTrack("string")
    .rules("string")
    .scopetype("string")
    .adom("string")
    .severities("string")
    .status("string")
    .tags("string")
    .action("string")
    .build());

    object_global_ips_sensor_entries_resource = fortimanager.ObjectGlobalIpsSensorEntries("objectGlobalIpsSensorEntriesResource",
    sensor="string",
    position="string",
    vuln_types=[0],
    os=["string"],
    default_action="string",
    default_status="string",
    dynamic_sort_subtable="string",
    exempt_ips=[{
        "dst_ip": "string",
        "id": 0,
        "src_ip": "string",
    }],
    fosid=0,
    last_modified="string",
    locations=["string"],
    log="string",
    log_attack_context="string",
    log_packet="string",
    object_global_ips_sensor_entries_id="string",
    cves=["string"],
    protocols=["string"],
    applications=["string"],
    quarantine="string",
    quarantine_expiry="string",
    quarantine_log="string",
    rate_count=0,
    rate_duration=0,
    rate_mode="string",
    rate_track="string",
    rules=["string"],
    scopetype="string",
    adom="string",
    severities=["string"],
    status="string",
    tags=["string"],
    action="string")

    const objectGlobalIpsSensorEntriesResource = new fortimanager.ObjectGlobalIpsSensorEntries("objectGlobalIpsSensorEntriesResource", {
    sensor: "string",
    position: "string",
    vulnTypes: [0],
    os: ["string"],
    defaultAction: "string",
    defaultStatus: "string",
    dynamicSortSubtable: "string",
    exemptIps: [{
        dstIp: "string",
        id: 0,
        srcIp: "string",
    }],
    fosid: 0,
    lastModified: "string",
    locations: ["string"],
    log: "string",
    logAttackContext: "string",
    logPacket: "string",
    objectGlobalIpsSensorEntriesId: "string",
    cves: ["string"],
    protocols: ["string"],
    applications: ["string"],
    quarantine: "string",
    quarantineExpiry: "string",
    quarantineLog: "string",
    rateCount: 0,
    rateDuration: 0,
    rateMode: "string",
    rateTrack: "string",
    rules: ["string"],
    scopetype: "string",
    adom: "string",
    severities: ["string"],
    status: "string",
    tags: ["string"],
    action: "string",
});

    type: fortimanager:ObjectGlobalIpsSensorEntries
properties:
    action: string
    adom: string
    applications:
        - string
    cves:
        - string
    defaultAction: string
    defaultStatus: string
    dynamicSortSubtable: string
    exemptIps:
        - dstIp: string
          id: 0
          srcIp: string
    fosid: 0
    lastModified: string
    locations:
        - string
    log: string
    logAttackContext: string
    logPacket: string
    objectGlobalIpsSensorEntriesId: string
    os:
        - string
    position: string
    protocols:
        - string
    quarantine: string
    quarantineExpiry: string
    quarantineLog: string
    rateCount: 0
    rateDuration: 0
    rateMode: string
    rateTrack: string
    rules:
        - string
    scopetype: string
    sensor: string
    severities:
        - string
    status: string
    tags:
        - string
    vulnTypes:
        - 0

    ObjectGlobalIpsSensorEntries Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ObjectGlobalIpsSensorEntries resource accepts the following input properties:

    Sensor string
    Sensor.
    Action string
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Applications List<string>
    Operating systems to be protected. Use all for every application and other for unlisted application.
    Cves List<string>
    List of CVE IDs of the signatures to add to the sensor.
    DefaultAction string
    Default-Action. Valid values: block, pass, all, drop.
    DefaultStatus string
    Default-Status. Valid values: disable, enable, all.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    ExemptIps List<ObjectGlobalIpsSensorEntriesExemptIp>
    Exempt-Ip. The structure of exempt_ip block is documented below.
    Fosid double
    Rule ID in IPS database (0 - 4294967295).
    LastModified string
    Last-Modified.
    Locations List<string>
    Protect client or server traffic.
    Log string
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    LogAttackContext string
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    LogPacket string
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    ObjectGlobalIpsSensorEntriesId string
    an identifier for the resource with format {{fosid}}.
    Os List<string>
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    Position string
    Position. Valid values: header, footer.
    Protocols List<string>
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    Quarantine string
    Quarantine method. Valid values: none, attacker, both, interface.
    QuarantineExpiry string
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    QuarantineLog string
    Enable/disable quarantine logging. Valid values: disable, enable.
    RateCount double
    Count of the rate.
    RateDuration double
    Duration (sec) of the rate.
    RateMode string
    Rate limit mode. Valid values: periodical, continuous.
    RateTrack string
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    Rules List<string>
    Identifies the predefined or custom IPS signatures to add to the sensor.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    Severities List<string>
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    Status string
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    Tags List<string>
    Tags.
    VulnTypes List<double>
    Vuln-Type.
    Sensor string
    Sensor.
    Action string
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Applications []string
    Operating systems to be protected. Use all for every application and other for unlisted application.
    Cves []string
    List of CVE IDs of the signatures to add to the sensor.
    DefaultAction string
    Default-Action. Valid values: block, pass, all, drop.
    DefaultStatus string
    Default-Status. Valid values: disable, enable, all.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    ExemptIps []ObjectGlobalIpsSensorEntriesExemptIpTypeArgs
    Exempt-Ip. The structure of exempt_ip block is documented below.
    Fosid float64
    Rule ID in IPS database (0 - 4294967295).
    LastModified string
    Last-Modified.
    Locations []string
    Protect client or server traffic.
    Log string
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    LogAttackContext string
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    LogPacket string
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    ObjectGlobalIpsSensorEntriesId string
    an identifier for the resource with format {{fosid}}.
    Os []string
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    Position string
    Position. Valid values: header, footer.
    Protocols []string
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    Quarantine string
    Quarantine method. Valid values: none, attacker, both, interface.
    QuarantineExpiry string
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    QuarantineLog string
    Enable/disable quarantine logging. Valid values: disable, enable.
    RateCount float64
    Count of the rate.
    RateDuration float64
    Duration (sec) of the rate.
    RateMode string
    Rate limit mode. Valid values: periodical, continuous.
    RateTrack string
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    Rules []string
    Identifies the predefined or custom IPS signatures to add to the sensor.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    Severities []string
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    Status string
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    Tags []string
    Tags.
    VulnTypes []float64
    Vuln-Type.
    sensor String
    Sensor.
    action String
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    applications List<String>
    Operating systems to be protected. Use all for every application and other for unlisted application.
    cves List<String>
    List of CVE IDs of the signatures to add to the sensor.
    defaultAction String
    Default-Action. Valid values: block, pass, all, drop.
    defaultStatus String
    Default-Status. Valid values: disable, enable, all.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    exemptIps List<ObjectGlobalIpsSensorEntriesExemptIp>
    Exempt-Ip. The structure of exempt_ip block is documented below.
    fosid Double
    Rule ID in IPS database (0 - 4294967295).
    lastModified String
    Last-Modified.
    locations List<String>
    Protect client or server traffic.
    log String
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    logAttackContext String
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    logPacket String
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    objectGlobalIpsSensorEntriesId String
    an identifier for the resource with format {{fosid}}.
    os List<String>
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    position String
    Position. Valid values: header, footer.
    protocols List<String>
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    quarantine String
    Quarantine method. Valid values: none, attacker, both, interface.
    quarantineExpiry String
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    quarantineLog String
    Enable/disable quarantine logging. Valid values: disable, enable.
    rateCount Double
    Count of the rate.
    rateDuration Double
    Duration (sec) of the rate.
    rateMode String
    Rate limit mode. Valid values: periodical, continuous.
    rateTrack String
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    rules List<String>
    Identifies the predefined or custom IPS signatures to add to the sensor.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    severities List<String>
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    status String
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    tags List<String>
    Tags.
    vulnTypes List<Double>
    Vuln-Type.
    sensor string
    Sensor.
    action string
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    applications string[]
    Operating systems to be protected. Use all for every application and other for unlisted application.
    cves string[]
    List of CVE IDs of the signatures to add to the sensor.
    defaultAction string
    Default-Action. Valid values: block, pass, all, drop.
    defaultStatus string
    Default-Status. Valid values: disable, enable, all.
    dynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    exemptIps ObjectGlobalIpsSensorEntriesExemptIp[]
    Exempt-Ip. The structure of exempt_ip block is documented below.
    fosid number
    Rule ID in IPS database (0 - 4294967295).
    lastModified string
    Last-Modified.
    locations string[]
    Protect client or server traffic.
    log string
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    logAttackContext string
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    logPacket string
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    objectGlobalIpsSensorEntriesId string
    an identifier for the resource with format {{fosid}}.
    os string[]
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    position string
    Position. Valid values: header, footer.
    protocols string[]
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    quarantine string
    Quarantine method. Valid values: none, attacker, both, interface.
    quarantineExpiry string
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    quarantineLog string
    Enable/disable quarantine logging. Valid values: disable, enable.
    rateCount number
    Count of the rate.
    rateDuration number
    Duration (sec) of the rate.
    rateMode string
    Rate limit mode. Valid values: periodical, continuous.
    rateTrack string
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    rules string[]
    Identifies the predefined or custom IPS signatures to add to the sensor.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    severities string[]
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    status string
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    tags string[]
    Tags.
    vulnTypes number[]
    Vuln-Type.
    sensor str
    Sensor.
    action str
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    applications Sequence[str]
    Operating systems to be protected. Use all for every application and other for unlisted application.
    cves Sequence[str]
    List of CVE IDs of the signatures to add to the sensor.
    default_action str
    Default-Action. Valid values: block, pass, all, drop.
    default_status str
    Default-Status. Valid values: disable, enable, all.
    dynamic_sort_subtable str
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    exempt_ips Sequence[ObjectGlobalIpsSensorEntriesExemptIpArgs]
    Exempt-Ip. The structure of exempt_ip block is documented below.
    fosid float
    Rule ID in IPS database (0 - 4294967295).
    last_modified str
    Last-Modified.
    locations Sequence[str]
    Protect client or server traffic.
    log str
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    log_attack_context str
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    log_packet str
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    object_global_ips_sensor_entries_id str
    an identifier for the resource with format {{fosid}}.
    os Sequence[str]
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    position str
    Position. Valid values: header, footer.
    protocols Sequence[str]
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    quarantine str
    Quarantine method. Valid values: none, attacker, both, interface.
    quarantine_expiry str
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    quarantine_log str
    Enable/disable quarantine logging. Valid values: disable, enable.
    rate_count float
    Count of the rate.
    rate_duration float
    Duration (sec) of the rate.
    rate_mode str
    Rate limit mode. Valid values: periodical, continuous.
    rate_track str
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    rules Sequence[str]
    Identifies the predefined or custom IPS signatures to add to the sensor.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    severities Sequence[str]
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    status str
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    tags Sequence[str]
    Tags.
    vuln_types Sequence[float]
    Vuln-Type.
    sensor String
    Sensor.
    action String
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    applications List<String>
    Operating systems to be protected. Use all for every application and other for unlisted application.
    cves List<String>
    List of CVE IDs of the signatures to add to the sensor.
    defaultAction String
    Default-Action. Valid values: block, pass, all, drop.
    defaultStatus String
    Default-Status. Valid values: disable, enable, all.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    exemptIps List<Property Map>
    Exempt-Ip. The structure of exempt_ip block is documented below.
    fosid Number
    Rule ID in IPS database (0 - 4294967295).
    lastModified String
    Last-Modified.
    locations List<String>
    Protect client or server traffic.
    log String
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    logAttackContext String
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    logPacket String
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    objectGlobalIpsSensorEntriesId String
    an identifier for the resource with format {{fosid}}.
    os List<String>
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    position String
    Position. Valid values: header, footer.
    protocols List<String>
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    quarantine String
    Quarantine method. Valid values: none, attacker, both, interface.
    quarantineExpiry String
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    quarantineLog String
    Enable/disable quarantine logging. Valid values: disable, enable.
    rateCount Number
    Count of the rate.
    rateDuration Number
    Duration (sec) of the rate.
    rateMode String
    Rate limit mode. Valid values: periodical, continuous.
    rateTrack String
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    rules List<String>
    Identifies the predefined or custom IPS signatures to add to the sensor.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    severities List<String>
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    status String
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    tags List<String>
    Tags.
    vulnTypes List<Number>
    Vuln-Type.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ObjectGlobalIpsSensorEntries resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ObjectGlobalIpsSensorEntries Resource

    Get an existing ObjectGlobalIpsSensorEntries resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ObjectGlobalIpsSensorEntriesState, opts?: CustomResourceOptions): ObjectGlobalIpsSensorEntries
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        adom: Optional[str] = None,
        applications: Optional[Sequence[str]] = None,
        cves: Optional[Sequence[str]] = None,
        default_action: Optional[str] = None,
        default_status: Optional[str] = None,
        dynamic_sort_subtable: Optional[str] = None,
        exempt_ips: Optional[Sequence[ObjectGlobalIpsSensorEntriesExemptIpArgs]] = None,
        fosid: Optional[float] = None,
        last_modified: Optional[str] = None,
        locations: Optional[Sequence[str]] = None,
        log: Optional[str] = None,
        log_attack_context: Optional[str] = None,
        log_packet: Optional[str] = None,
        object_global_ips_sensor_entries_id: Optional[str] = None,
        os: Optional[Sequence[str]] = None,
        position: Optional[str] = None,
        protocols: Optional[Sequence[str]] = None,
        quarantine: Optional[str] = None,
        quarantine_expiry: Optional[str] = None,
        quarantine_log: Optional[str] = None,
        rate_count: Optional[float] = None,
        rate_duration: Optional[float] = None,
        rate_mode: Optional[str] = None,
        rate_track: Optional[str] = None,
        rules: Optional[Sequence[str]] = None,
        scopetype: Optional[str] = None,
        sensor: Optional[str] = None,
        severities: Optional[Sequence[str]] = None,
        status: Optional[str] = None,
        tags: Optional[Sequence[str]] = None,
        vuln_types: Optional[Sequence[float]] = None) -> ObjectGlobalIpsSensorEntries
    func GetObjectGlobalIpsSensorEntries(ctx *Context, name string, id IDInput, state *ObjectGlobalIpsSensorEntriesState, opts ...ResourceOption) (*ObjectGlobalIpsSensorEntries, error)
    public static ObjectGlobalIpsSensorEntries Get(string name, Input<string> id, ObjectGlobalIpsSensorEntriesState? state, CustomResourceOptions? opts = null)
    public static ObjectGlobalIpsSensorEntries get(String name, Output<String> id, ObjectGlobalIpsSensorEntriesState state, CustomResourceOptions options)
    resources:  _:    type: fortimanager:ObjectGlobalIpsSensorEntries    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action string
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Applications List<string>
    Operating systems to be protected. Use all for every application and other for unlisted application.
    Cves List<string>
    List of CVE IDs of the signatures to add to the sensor.
    DefaultAction string
    Default-Action. Valid values: block, pass, all, drop.
    DefaultStatus string
    Default-Status. Valid values: disable, enable, all.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    ExemptIps List<ObjectGlobalIpsSensorEntriesExemptIp>
    Exempt-Ip. The structure of exempt_ip block is documented below.
    Fosid double
    Rule ID in IPS database (0 - 4294967295).
    LastModified string
    Last-Modified.
    Locations List<string>
    Protect client or server traffic.
    Log string
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    LogAttackContext string
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    LogPacket string
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    ObjectGlobalIpsSensorEntriesId string
    an identifier for the resource with format {{fosid}}.
    Os List<string>
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    Position string
    Position. Valid values: header, footer.
    Protocols List<string>
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    Quarantine string
    Quarantine method. Valid values: none, attacker, both, interface.
    QuarantineExpiry string
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    QuarantineLog string
    Enable/disable quarantine logging. Valid values: disable, enable.
    RateCount double
    Count of the rate.
    RateDuration double
    Duration (sec) of the rate.
    RateMode string
    Rate limit mode. Valid values: periodical, continuous.
    RateTrack string
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    Rules List<string>
    Identifies the predefined or custom IPS signatures to add to the sensor.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    Sensor string
    Sensor.
    Severities List<string>
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    Status string
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    Tags List<string>
    Tags.
    VulnTypes List<double>
    Vuln-Type.
    Action string
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Applications []string
    Operating systems to be protected. Use all for every application and other for unlisted application.
    Cves []string
    List of CVE IDs of the signatures to add to the sensor.
    DefaultAction string
    Default-Action. Valid values: block, pass, all, drop.
    DefaultStatus string
    Default-Status. Valid values: disable, enable, all.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    ExemptIps []ObjectGlobalIpsSensorEntriesExemptIpTypeArgs
    Exempt-Ip. The structure of exempt_ip block is documented below.
    Fosid float64
    Rule ID in IPS database (0 - 4294967295).
    LastModified string
    Last-Modified.
    Locations []string
    Protect client or server traffic.
    Log string
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    LogAttackContext string
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    LogPacket string
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    ObjectGlobalIpsSensorEntriesId string
    an identifier for the resource with format {{fosid}}.
    Os []string
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    Position string
    Position. Valid values: header, footer.
    Protocols []string
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    Quarantine string
    Quarantine method. Valid values: none, attacker, both, interface.
    QuarantineExpiry string
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    QuarantineLog string
    Enable/disable quarantine logging. Valid values: disable, enable.
    RateCount float64
    Count of the rate.
    RateDuration float64
    Duration (sec) of the rate.
    RateMode string
    Rate limit mode. Valid values: periodical, continuous.
    RateTrack string
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    Rules []string
    Identifies the predefined or custom IPS signatures to add to the sensor.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    Sensor string
    Sensor.
    Severities []string
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    Status string
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    Tags []string
    Tags.
    VulnTypes []float64
    Vuln-Type.
    action String
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    applications List<String>
    Operating systems to be protected. Use all for every application and other for unlisted application.
    cves List<String>
    List of CVE IDs of the signatures to add to the sensor.
    defaultAction String
    Default-Action. Valid values: block, pass, all, drop.
    defaultStatus String
    Default-Status. Valid values: disable, enable, all.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    exemptIps List<ObjectGlobalIpsSensorEntriesExemptIp>
    Exempt-Ip. The structure of exempt_ip block is documented below.
    fosid Double
    Rule ID in IPS database (0 - 4294967295).
    lastModified String
    Last-Modified.
    locations List<String>
    Protect client or server traffic.
    log String
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    logAttackContext String
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    logPacket String
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    objectGlobalIpsSensorEntriesId String
    an identifier for the resource with format {{fosid}}.
    os List<String>
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    position String
    Position. Valid values: header, footer.
    protocols List<String>
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    quarantine String
    Quarantine method. Valid values: none, attacker, both, interface.
    quarantineExpiry String
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    quarantineLog String
    Enable/disable quarantine logging. Valid values: disable, enable.
    rateCount Double
    Count of the rate.
    rateDuration Double
    Duration (sec) of the rate.
    rateMode String
    Rate limit mode. Valid values: periodical, continuous.
    rateTrack String
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    rules List<String>
    Identifies the predefined or custom IPS signatures to add to the sensor.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sensor String
    Sensor.
    severities List<String>
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    status String
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    tags List<String>
    Tags.
    vulnTypes List<Double>
    Vuln-Type.
    action string
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    applications string[]
    Operating systems to be protected. Use all for every application and other for unlisted application.
    cves string[]
    List of CVE IDs of the signatures to add to the sensor.
    defaultAction string
    Default-Action. Valid values: block, pass, all, drop.
    defaultStatus string
    Default-Status. Valid values: disable, enable, all.
    dynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    exemptIps ObjectGlobalIpsSensorEntriesExemptIp[]
    Exempt-Ip. The structure of exempt_ip block is documented below.
    fosid number
    Rule ID in IPS database (0 - 4294967295).
    lastModified string
    Last-Modified.
    locations string[]
    Protect client or server traffic.
    log string
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    logAttackContext string
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    logPacket string
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    objectGlobalIpsSensorEntriesId string
    an identifier for the resource with format {{fosid}}.
    os string[]
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    position string
    Position. Valid values: header, footer.
    protocols string[]
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    quarantine string
    Quarantine method. Valid values: none, attacker, both, interface.
    quarantineExpiry string
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    quarantineLog string
    Enable/disable quarantine logging. Valid values: disable, enable.
    rateCount number
    Count of the rate.
    rateDuration number
    Duration (sec) of the rate.
    rateMode string
    Rate limit mode. Valid values: periodical, continuous.
    rateTrack string
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    rules string[]
    Identifies the predefined or custom IPS signatures to add to the sensor.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sensor string
    Sensor.
    severities string[]
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    status string
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    tags string[]
    Tags.
    vulnTypes number[]
    Vuln-Type.
    action str
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    applications Sequence[str]
    Operating systems to be protected. Use all for every application and other for unlisted application.
    cves Sequence[str]
    List of CVE IDs of the signatures to add to the sensor.
    default_action str
    Default-Action. Valid values: block, pass, all, drop.
    default_status str
    Default-Status. Valid values: disable, enable, all.
    dynamic_sort_subtable str
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    exempt_ips Sequence[ObjectGlobalIpsSensorEntriesExemptIpArgs]
    Exempt-Ip. The structure of exempt_ip block is documented below.
    fosid float
    Rule ID in IPS database (0 - 4294967295).
    last_modified str
    Last-Modified.
    locations Sequence[str]
    Protect client or server traffic.
    log str
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    log_attack_context str
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    log_packet str
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    object_global_ips_sensor_entries_id str
    an identifier for the resource with format {{fosid}}.
    os Sequence[str]
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    position str
    Position. Valid values: header, footer.
    protocols Sequence[str]
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    quarantine str
    Quarantine method. Valid values: none, attacker, both, interface.
    quarantine_expiry str
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    quarantine_log str
    Enable/disable quarantine logging. Valid values: disable, enable.
    rate_count float
    Count of the rate.
    rate_duration float
    Duration (sec) of the rate.
    rate_mode str
    Rate limit mode. Valid values: periodical, continuous.
    rate_track str
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    rules Sequence[str]
    Identifies the predefined or custom IPS signatures to add to the sensor.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sensor str
    Sensor.
    severities Sequence[str]
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    status str
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    tags Sequence[str]
    Tags.
    vuln_types Sequence[float]
    Vuln-Type.
    action String
    Action taken with traffic in which signatures are detected. Valid values: pass, block, reset, default.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    applications List<String>
    Operating systems to be protected. Use all for every application and other for unlisted application.
    cves List<String>
    List of CVE IDs of the signatures to add to the sensor.
    defaultAction String
    Default-Action. Valid values: block, pass, all, drop.
    defaultStatus String
    Default-Status. Valid values: disable, enable, all.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    exemptIps List<Property Map>
    Exempt-Ip. The structure of exempt_ip block is documented below.
    fosid Number
    Rule ID in IPS database (0 - 4294967295).
    lastModified String
    Last-Modified.
    locations List<String>
    Protect client or server traffic.
    log String
    Enable/disable logging of signatures included in filter. Valid values: disable, enable.
    logAttackContext String
    Enable/disable logging of attack context: URL buffer, header buffer, body buffer, packet buffer. Valid values: disable, enable.
    logPacket String
    Enable/disable packet logging. Enable to save the packet that triggers the filter. You can download the packets in pcap format for diagnostic use. Valid values: disable, enable.
    objectGlobalIpsSensorEntriesId String
    an identifier for the resource with format {{fosid}}.
    os List<String>
    Operating systems to be protected. Use all for every operating system and other for unlisted operating systems.
    position String
    Position. Valid values: header, footer.
    protocols List<String>
    Protocols to be examined. Use all for every protocol and other for unlisted protocols.
    quarantine String
    Quarantine method. Valid values: none, attacker, both, interface.
    quarantineExpiry String
    Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.
    quarantineLog String
    Enable/disable quarantine logging. Valid values: disable, enable.
    rateCount Number
    Count of the rate.
    rateDuration Number
    Duration (sec) of the rate.
    rateMode String
    Rate limit mode. Valid values: periodical, continuous.
    rateTrack String
    Track the packet protocol field. Valid values: none, src-ip, dest-ip, dhcp-client-mac, dns-domain.
    rules List<String>
    Identifies the predefined or custom IPS signatures to add to the sensor.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sensor String
    Sensor.
    severities List<String>
    Relative severity of the signature, from info to critical. Log messages generated by the signature include the severity.
    status String
    Status of the signatures included in filter. Only those filters with a status to enable are used. Valid values: disable, enable, default.
    tags List<String>
    Tags.
    vulnTypes List<Number>
    Vuln-Type.

    Supporting Types

    ObjectGlobalIpsSensorEntriesExemptIp, ObjectGlobalIpsSensorEntriesExemptIpArgs

    DstIp string
    Destination IP address and netmask (applies to packet matching the signature).
    Id double
    Exempt IP ID.
    SrcIp string
    Source IP address and netmask (applies to packet matching the signature).
    DstIp string
    Destination IP address and netmask (applies to packet matching the signature).
    Id float64
    Exempt IP ID.
    SrcIp string
    Source IP address and netmask (applies to packet matching the signature).
    dstIp String
    Destination IP address and netmask (applies to packet matching the signature).
    id Double
    Exempt IP ID.
    srcIp String
    Source IP address and netmask (applies to packet matching the signature).
    dstIp string
    Destination IP address and netmask (applies to packet matching the signature).
    id number
    Exempt IP ID.
    srcIp string
    Source IP address and netmask (applies to packet matching the signature).
    dst_ip str
    Destination IP address and netmask (applies to packet matching the signature).
    id float
    Exempt IP ID.
    src_ip str
    Source IP address and netmask (applies to packet matching the signature).
    dstIp String
    Destination IP address and netmask (applies to packet matching the signature).
    id Number
    Exempt IP ID.
    srcIp String
    Source IP address and netmask (applies to packet matching the signature).

    Import

    ObjectGlobal IpsSensorEntries can be imported using any of these accepted formats:

    Set import_options = [“sensor=YOUR_VALUE”] in the provider section.

    $ export “FORTIMANAGER_IMPORT_TABLE”=“true”

    $ pulumi import fortimanager:index/objectGlobalIpsSensorEntries:ObjectGlobalIpsSensorEntries labelname {{fosid}}

    $ unset “FORTIMANAGER_IMPORT_TABLE”

    -> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortimanager fortinetdev/terraform-provider-fortimanager
    License
    Notes
    This Pulumi package is based on the fortimanager Terraform Provider.
    fortimanager logo
    fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
    fortinetdev/terraform-provider-fortimanager