Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. PackagesFirewallLocalinpolicy
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.PackagesFirewallLocalinpolicy

Explore with Pulumi AI

fortimanager logo
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

    Configure user defined IPv4 local-in policies.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";

const labelname = new fortimanager.PackagesFirewallLocalinpolicy("labelname", {
    action: "deny",
    dstaddrs: ["all"],
    haMgmtIntfOnly: "disable",
    intfs: ["1-A1"],
    pkg: "default",
    policyid: 1,
    schedule: "always",
    services: ["ALL"],
    srcaddrs: ["all"],
    status: "enable",
});

    import pulumi
import pulumi_fortimanager as fortimanager

labelname = fortimanager.PackagesFirewallLocalinpolicy("labelname",
    action="deny",
    dstaddrs=["all"],
    ha_mgmt_intf_only="disable",
    intfs=["1-A1"],
    pkg="default",
    policyid=1,
    schedule="always",
    services=["ALL"],
    srcaddrs=["all"],
    status="enable")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := fortimanager.NewPackagesFirewallLocalinpolicy(ctx, "labelname", &fortimanager.PackagesFirewallLocalinpolicyArgs{
			Action: pulumi.String("deny"),
			Dstaddrs: pulumi.StringArray{
				pulumi.String("all"),
			},
			HaMgmtIntfOnly: pulumi.String("disable"),
			Intfs: pulumi.StringArray{
				pulumi.String("1-A1"),
			},
			Pkg:      pulumi.String("default"),
			Policyid: pulumi.Float64(1),
			Schedule: pulumi.String("always"),
			Services: pulumi.StringArray{
				pulumi.String("ALL"),
			},
			Srcaddrs: pulumi.StringArray{
				pulumi.String("all"),
			},
			Status: pulumi.String("enable"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;

return await Deployment.RunAsync(() => 
{
    var labelname = new Fortimanager.PackagesFirewallLocalinpolicy("labelname", new()
    {
        Action = "deny",
        Dstaddrs = new[]
        {
            "all",
        },
        HaMgmtIntfOnly = "disable",
        Intfs = new[]
        {
            "1-A1",
        },
        Pkg = "default",
        Policyid = 1,
        Schedule = "always",
        Services = new[]
        {
            "ALL",
        },
        Srcaddrs = new[]
        {
            "all",
        },
        Status = "enable",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.PackagesFirewallLocalinpolicy;
import com.pulumi.fortimanager.PackagesFirewallLocalinpolicyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var labelname = new PackagesFirewallLocalinpolicy("labelname", PackagesFirewallLocalinpolicyArgs.builder()
            .action("deny")
            .dstaddrs("all")
            .haMgmtIntfOnly("disable")
            .intfs("1-A1")
            .pkg("default")
            .policyid(1)
            .schedule("always")
            .services("ALL")
            .srcaddrs("all")
            .status("enable")
            .build());

    }
}

    resources:
  labelname:
    type: fortimanager:PackagesFirewallLocalinpolicy
    properties:
      action: deny
      dstaddrs:
        - all
      haMgmtIntfOnly: disable
      intfs:
        - 1-A1
      pkg: default
      policyid: 1
      schedule: always
      services:
        - ALL
      srcaddrs:
        - all
      status: enable

    Create PackagesFirewallLocalinpolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new PackagesFirewallLocalinpolicy(name: string, args: PackagesFirewallLocalinpolicyArgs, opts?: CustomResourceOptions);
    @overload
def PackagesFirewallLocalinpolicy(resource_name: str,
                                  args: PackagesFirewallLocalinpolicyArgs,
                                  opts: Optional[ResourceOptions] = None)

@overload
def PackagesFirewallLocalinpolicy(resource_name: str,
                                  opts: Optional[ResourceOptions] = None,
                                  pkg: Optional[str] = None,
                                  intfs: Optional[Sequence[str]] = None,
                                  dstaddr_negate: Optional[str] = None,
                                  packages_firewall_localinpolicy_id: Optional[str] = None,
                                  adom: Optional[str] = None,
                                  ha_mgmt_intf_only: Optional[str] = None,
                                  internet_service_src: Optional[str] = None,
                                  internet_service_src_custom_groups: Optional[Sequence[str]] = None,
                                  internet_service_src_customs: Optional[Sequence[str]] = None,
                                  internet_service_src_groups: Optional[Sequence[str]] = None,
                                  internet_service_src_names: Optional[Sequence[str]] = None,
                                  internet_service_src_negate: Optional[str] = None,
                                  action: Optional[str] = None,
                                  virtual_patch: Optional[str] = None,
                                  comments: Optional[str] = None,
                                  dstaddrs: Optional[Sequence[str]] = None,
                                  pkg_folder_path: Optional[str] = None,
                                  policyid: Optional[float] = None,
                                  schedule: Optional[str] = None,
                                  scopetype: Optional[str] = None,
                                  service_negate: Optional[str] = None,
                                  services: Optional[Sequence[str]] = None,
                                  srcaddr_negate: Optional[str] = None,
                                  srcaddrs: Optional[Sequence[str]] = None,
                                  status: Optional[str] = None,
                                  uuid: Optional[str] = None,
                                  logtraffic: Optional[str] = None)
    func NewPackagesFirewallLocalinpolicy(ctx *Context, name string, args PackagesFirewallLocalinpolicyArgs, opts ...ResourceOption) (*PackagesFirewallLocalinpolicy, error)
    public PackagesFirewallLocalinpolicy(string name, PackagesFirewallLocalinpolicyArgs args, CustomResourceOptions? opts = null)
    public PackagesFirewallLocalinpolicy(String name, PackagesFirewallLocalinpolicyArgs args)
public PackagesFirewallLocalinpolicy(String name, PackagesFirewallLocalinpolicyArgs args, CustomResourceOptions options)

    type: fortimanager:PackagesFirewallLocalinpolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args PackagesFirewallLocalinpolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args PackagesFirewallLocalinpolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args PackagesFirewallLocalinpolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args PackagesFirewallLocalinpolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args PackagesFirewallLocalinpolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var packagesFirewallLocalinpolicyResource = new Fortimanager.PackagesFirewallLocalinpolicy("packagesFirewallLocalinpolicyResource", new()
{
    Pkg = "string",
    Intfs = new[]
    {
        "string",
    },
    DstaddrNegate = "string",
    PackagesFirewallLocalinpolicyId = "string",
    Adom = "string",
    HaMgmtIntfOnly = "string",
    InternetServiceSrc = "string",
    InternetServiceSrcCustomGroups = new[]
    {
        "string",
    },
    InternetServiceSrcCustoms = new[]
    {
        "string",
    },
    InternetServiceSrcGroups = new[]
    {
        "string",
    },
    InternetServiceSrcNames = new[]
    {
        "string",
    },
    InternetServiceSrcNegate = "string",
    Action = "string",
    VirtualPatch = "string",
    Comments = "string",
    Dstaddrs = new[]
    {
        "string",
    },
    PkgFolderPath = "string",
    Policyid = 0,
    Schedule = "string",
    Scopetype = "string",
    ServiceNegate = "string",
    Services = new[]
    {
        "string",
    },
    SrcaddrNegate = "string",
    Srcaddrs = new[]
    {
        "string",
    },
    Status = "string",
    Uuid = "string",
    Logtraffic = "string",
});

    example, err := fortimanager.NewPackagesFirewallLocalinpolicy(ctx, "packagesFirewallLocalinpolicyResource", &fortimanager.PackagesFirewallLocalinpolicyArgs{
Pkg: pulumi.String("string"),
Intfs: pulumi.StringArray{
pulumi.String("string"),
},
DstaddrNegate: pulumi.String("string"),
PackagesFirewallLocalinpolicyId: pulumi.String("string"),
Adom: pulumi.String("string"),
HaMgmtIntfOnly: pulumi.String("string"),
InternetServiceSrc: pulumi.String("string"),
InternetServiceSrcCustomGroups: pulumi.StringArray{
pulumi.String("string"),
},
InternetServiceSrcCustoms: pulumi.StringArray{
pulumi.String("string"),
},
InternetServiceSrcGroups: pulumi.StringArray{
pulumi.String("string"),
},
InternetServiceSrcNames: pulumi.StringArray{
pulumi.String("string"),
},
InternetServiceSrcNegate: pulumi.String("string"),
Action: pulumi.String("string"),
VirtualPatch: pulumi.String("string"),
Comments: pulumi.String("string"),
Dstaddrs: pulumi.StringArray{
pulumi.String("string"),
},
PkgFolderPath: pulumi.String("string"),
Policyid: pulumi.Float64(0),
Schedule: pulumi.String("string"),
Scopetype: pulumi.String("string"),
ServiceNegate: pulumi.String("string"),
Services: pulumi.StringArray{
pulumi.String("string"),
},
SrcaddrNegate: pulumi.String("string"),
Srcaddrs: pulumi.StringArray{
pulumi.String("string"),
},
Status: pulumi.String("string"),
Uuid: pulumi.String("string"),
Logtraffic: pulumi.String("string"),
})

    var packagesFirewallLocalinpolicyResource = new PackagesFirewallLocalinpolicy("packagesFirewallLocalinpolicyResource", PackagesFirewallLocalinpolicyArgs.builder()
    .pkg("string")
    .intfs("string")
    .dstaddrNegate("string")
    .packagesFirewallLocalinpolicyId("string")
    .adom("string")
    .haMgmtIntfOnly("string")
    .internetServiceSrc("string")
    .internetServiceSrcCustomGroups("string")
    .internetServiceSrcCustoms("string")
    .internetServiceSrcGroups("string")
    .internetServiceSrcNames("string")
    .internetServiceSrcNegate("string")
    .action("string")
    .virtualPatch("string")
    .comments("string")
    .dstaddrs("string")
    .pkgFolderPath("string")
    .policyid(0)
    .schedule("string")
    .scopetype("string")
    .serviceNegate("string")
    .services("string")
    .srcaddrNegate("string")
    .srcaddrs("string")
    .status("string")
    .uuid("string")
    .logtraffic("string")
    .build());

    packages_firewall_localinpolicy_resource = fortimanager.PackagesFirewallLocalinpolicy("packagesFirewallLocalinpolicyResource",
    pkg="string",
    intfs=["string"],
    dstaddr_negate="string",
    packages_firewall_localinpolicy_id="string",
    adom="string",
    ha_mgmt_intf_only="string",
    internet_service_src="string",
    internet_service_src_custom_groups=["string"],
    internet_service_src_customs=["string"],
    internet_service_src_groups=["string"],
    internet_service_src_names=["string"],
    internet_service_src_negate="string",
    action="string",
    virtual_patch="string",
    comments="string",
    dstaddrs=["string"],
    pkg_folder_path="string",
    policyid=0,
    schedule="string",
    scopetype="string",
    service_negate="string",
    services=["string"],
    srcaddr_negate="string",
    srcaddrs=["string"],
    status="string",
    uuid="string",
    logtraffic="string")

    const packagesFirewallLocalinpolicyResource = new fortimanager.PackagesFirewallLocalinpolicy("packagesFirewallLocalinpolicyResource", {
    pkg: "string",
    intfs: ["string"],
    dstaddrNegate: "string",
    packagesFirewallLocalinpolicyId: "string",
    adom: "string",
    haMgmtIntfOnly: "string",
    internetServiceSrc: "string",
    internetServiceSrcCustomGroups: ["string"],
    internetServiceSrcCustoms: ["string"],
    internetServiceSrcGroups: ["string"],
    internetServiceSrcNames: ["string"],
    internetServiceSrcNegate: "string",
    action: "string",
    virtualPatch: "string",
    comments: "string",
    dstaddrs: ["string"],
    pkgFolderPath: "string",
    policyid: 0,
    schedule: "string",
    scopetype: "string",
    serviceNegate: "string",
    services: ["string"],
    srcaddrNegate: "string",
    srcaddrs: ["string"],
    status: "string",
    uuid: "string",
    logtraffic: "string",
});

    type: fortimanager:PackagesFirewallLocalinpolicy
properties:
    action: string
    adom: string
    comments: string
    dstaddrNegate: string
    dstaddrs:
        - string
    haMgmtIntfOnly: string
    internetServiceSrc: string
    internetServiceSrcCustomGroups:
        - string
    internetServiceSrcCustoms:
        - string
    internetServiceSrcGroups:
        - string
    internetServiceSrcNames:
        - string
    internetServiceSrcNegate: string
    intfs:
        - string
    logtraffic: string
    packagesFirewallLocalinpolicyId: string
    pkg: string
    pkgFolderPath: string
    policyid: 0
    schedule: string
    scopetype: string
    serviceNegate: string
    services:
        - string
    srcaddrNegate: string
    srcaddrs:
        - string
    status: string
    uuid: string
    virtualPatch: string

    PackagesFirewallLocalinpolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The PackagesFirewallLocalinpolicy resource accepts the following input properties:

    Pkg string
    Package.
    Action string
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Comments string
    Comment.
    DstaddrNegate string
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    Dstaddrs List<string>
    Destination address object from available options.
    HaMgmtIntfOnly string
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    InternetServiceSrc string
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    InternetServiceSrcCustomGroups List<string>
    Custom Internet Service source group name.
    InternetServiceSrcCustoms List<string>
    Custom Internet Service source name.
    InternetServiceSrcGroups List<string>
    Internet Service source group name.
    InternetServiceSrcNames List<string>
    Internet Service source name.
    InternetServiceSrcNegate string
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    Intfs List<string>
    Incoming interface name from available options.
    Logtraffic string
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    PackagesFirewallLocalinpolicyId string
    an identifier for the resource with format {{policyid}}.
    PkgFolderPath string
    Pkg Folder Path.
    Policyid double
    User defined local in policy ID.
    Schedule string
    Schedule object from available options.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ServiceNegate string
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    Services List<string>
    Service object from available options.
    SrcaddrNegate string
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    Srcaddrs List<string>
    Source address object from available options.
    Status string
    Enable/disable this local-in policy. Valid values: disable, enable.
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    VirtualPatch string
    Enable/disable virtual patching. Valid values: disable, enable.
    Pkg string
    Package.
    Action string
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Comments string
    Comment.
    DstaddrNegate string
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    Dstaddrs []string
    Destination address object from available options.
    HaMgmtIntfOnly string
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    InternetServiceSrc string
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    InternetServiceSrcCustomGroups []string
    Custom Internet Service source group name.
    InternetServiceSrcCustoms []string
    Custom Internet Service source name.
    InternetServiceSrcGroups []string
    Internet Service source group name.
    InternetServiceSrcNames []string
    Internet Service source name.
    InternetServiceSrcNegate string
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    Intfs []string
    Incoming interface name from available options.
    Logtraffic string
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    PackagesFirewallLocalinpolicyId string
    an identifier for the resource with format {{policyid}}.
    PkgFolderPath string
    Pkg Folder Path.
    Policyid float64
    User defined local in policy ID.
    Schedule string
    Schedule object from available options.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ServiceNegate string
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    Services []string
    Service object from available options.
    SrcaddrNegate string
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    Srcaddrs []string
    Source address object from available options.
    Status string
    Enable/disable this local-in policy. Valid values: disable, enable.
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    VirtualPatch string
    Enable/disable virtual patching. Valid values: disable, enable.
    pkg String
    Package.
    action String
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    comments String
    Comment.
    dstaddrNegate String
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    dstaddrs List<String>
    Destination address object from available options.
    haMgmtIntfOnly String
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    internetServiceSrc String
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    internetServiceSrcCustomGroups List<String>
    Custom Internet Service source group name.
    internetServiceSrcCustoms List<String>
    Custom Internet Service source name.
    internetServiceSrcGroups List<String>
    Internet Service source group name.
    internetServiceSrcNames List<String>
    Internet Service source name.
    internetServiceSrcNegate String
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    intfs List<String>
    Incoming interface name from available options.
    logtraffic String
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    packagesFirewallLocalinpolicyId String
    an identifier for the resource with format {{policyid}}.
    pkgFolderPath String
    Pkg Folder Path.
    policyid Double
    User defined local in policy ID.
    schedule String
    Schedule object from available options.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serviceNegate String
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    services List<String>
    Service object from available options.
    srcaddrNegate String
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    srcaddrs List<String>
    Source address object from available options.
    status String
    Enable/disable this local-in policy. Valid values: disable, enable.
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    virtualPatch String
    Enable/disable virtual patching. Valid values: disable, enable.
    pkg string
    Package.
    action string
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    comments string
    Comment.
    dstaddrNegate string
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    dstaddrs string[]
    Destination address object from available options.
    haMgmtIntfOnly string
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    internetServiceSrc string
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    internetServiceSrcCustomGroups string[]
    Custom Internet Service source group name.
    internetServiceSrcCustoms string[]
    Custom Internet Service source name.
    internetServiceSrcGroups string[]
    Internet Service source group name.
    internetServiceSrcNames string[]
    Internet Service source name.
    internetServiceSrcNegate string
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    intfs string[]
    Incoming interface name from available options.
    logtraffic string
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    packagesFirewallLocalinpolicyId string
    an identifier for the resource with format {{policyid}}.
    pkgFolderPath string
    Pkg Folder Path.
    policyid number
    User defined local in policy ID.
    schedule string
    Schedule object from available options.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serviceNegate string
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    services string[]
    Service object from available options.
    srcaddrNegate string
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    srcaddrs string[]
    Source address object from available options.
    status string
    Enable/disable this local-in policy. Valid values: disable, enable.
    uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    virtualPatch string
    Enable/disable virtual patching. Valid values: disable, enable.
    pkg str
    Package.
    action str
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    comments str
    Comment.
    dstaddr_negate str
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    dstaddrs Sequence[str]
    Destination address object from available options.
    ha_mgmt_intf_only str
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    internet_service_src str
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    internet_service_src_custom_groups Sequence[str]
    Custom Internet Service source group name.
    internet_service_src_customs Sequence[str]
    Custom Internet Service source name.
    internet_service_src_groups Sequence[str]
    Internet Service source group name.
    internet_service_src_names Sequence[str]
    Internet Service source name.
    internet_service_src_negate str
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    intfs Sequence[str]
    Incoming interface name from available options.
    logtraffic str
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    packages_firewall_localinpolicy_id str
    an identifier for the resource with format {{policyid}}.
    pkg_folder_path str
    Pkg Folder Path.
    policyid float
    User defined local in policy ID.
    schedule str
    Schedule object from available options.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    service_negate str
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    services Sequence[str]
    Service object from available options.
    srcaddr_negate str
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    srcaddrs Sequence[str]
    Source address object from available options.
    status str
    Enable/disable this local-in policy. Valid values: disable, enable.
    uuid str
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    virtual_patch str
    Enable/disable virtual patching. Valid values: disable, enable.
    pkg String
    Package.
    action String
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    comments String
    Comment.
    dstaddrNegate String
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    dstaddrs List<String>
    Destination address object from available options.
    haMgmtIntfOnly String
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    internetServiceSrc String
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    internetServiceSrcCustomGroups List<String>
    Custom Internet Service source group name.
    internetServiceSrcCustoms List<String>
    Custom Internet Service source name.
    internetServiceSrcGroups List<String>
    Internet Service source group name.
    internetServiceSrcNames List<String>
    Internet Service source name.
    internetServiceSrcNegate String
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    intfs List<String>
    Incoming interface name from available options.
    logtraffic String
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    packagesFirewallLocalinpolicyId String
    an identifier for the resource with format {{policyid}}.
    pkgFolderPath String
    Pkg Folder Path.
    policyid Number
    User defined local in policy ID.
    schedule String
    Schedule object from available options.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serviceNegate String
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    services List<String>
    Service object from available options.
    srcaddrNegate String
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    srcaddrs List<String>
    Source address object from available options.
    status String
    Enable/disable this local-in policy. Valid values: disable, enable.
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    virtualPatch String
    Enable/disable virtual patching. Valid values: disable, enable.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the PackagesFirewallLocalinpolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing PackagesFirewallLocalinpolicy Resource

    Get an existing PackagesFirewallLocalinpolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: PackagesFirewallLocalinpolicyState, opts?: CustomResourceOptions): PackagesFirewallLocalinpolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        adom: Optional[str] = None,
        comments: Optional[str] = None,
        dstaddr_negate: Optional[str] = None,
        dstaddrs: Optional[Sequence[str]] = None,
        ha_mgmt_intf_only: Optional[str] = None,
        internet_service_src: Optional[str] = None,
        internet_service_src_custom_groups: Optional[Sequence[str]] = None,
        internet_service_src_customs: Optional[Sequence[str]] = None,
        internet_service_src_groups: Optional[Sequence[str]] = None,
        internet_service_src_names: Optional[Sequence[str]] = None,
        internet_service_src_negate: Optional[str] = None,
        intfs: Optional[Sequence[str]] = None,
        logtraffic: Optional[str] = None,
        packages_firewall_localinpolicy_id: Optional[str] = None,
        pkg: Optional[str] = None,
        pkg_folder_path: Optional[str] = None,
        policyid: Optional[float] = None,
        schedule: Optional[str] = None,
        scopetype: Optional[str] = None,
        service_negate: Optional[str] = None,
        services: Optional[Sequence[str]] = None,
        srcaddr_negate: Optional[str] = None,
        srcaddrs: Optional[Sequence[str]] = None,
        status: Optional[str] = None,
        uuid: Optional[str] = None,
        virtual_patch: Optional[str] = None) -> PackagesFirewallLocalinpolicy
    func GetPackagesFirewallLocalinpolicy(ctx *Context, name string, id IDInput, state *PackagesFirewallLocalinpolicyState, opts ...ResourceOption) (*PackagesFirewallLocalinpolicy, error)
    public static PackagesFirewallLocalinpolicy Get(string name, Input<string> id, PackagesFirewallLocalinpolicyState? state, CustomResourceOptions? opts = null)
    public static PackagesFirewallLocalinpolicy get(String name, Output<String> id, PackagesFirewallLocalinpolicyState state, CustomResourceOptions options)
    resources:  _:    type: fortimanager:PackagesFirewallLocalinpolicy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Action string
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Comments string
    Comment.
    DstaddrNegate string
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    Dstaddrs List<string>
    Destination address object from available options.
    HaMgmtIntfOnly string
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    InternetServiceSrc string
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    InternetServiceSrcCustomGroups List<string>
    Custom Internet Service source group name.
    InternetServiceSrcCustoms List<string>
    Custom Internet Service source name.
    InternetServiceSrcGroups List<string>
    Internet Service source group name.
    InternetServiceSrcNames List<string>
    Internet Service source name.
    InternetServiceSrcNegate string
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    Intfs List<string>
    Incoming interface name from available options.
    Logtraffic string
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    PackagesFirewallLocalinpolicyId string
    an identifier for the resource with format {{policyid}}.
    Pkg string
    Package.
    PkgFolderPath string
    Pkg Folder Path.
    Policyid double
    User defined local in policy ID.
    Schedule string
    Schedule object from available options.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ServiceNegate string
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    Services List<string>
    Service object from available options.
    SrcaddrNegate string
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    Srcaddrs List<string>
    Source address object from available options.
    Status string
    Enable/disable this local-in policy. Valid values: disable, enable.
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    VirtualPatch string
    Enable/disable virtual patching. Valid values: disable, enable.
    Action string
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    Comments string
    Comment.
    DstaddrNegate string
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    Dstaddrs []string
    Destination address object from available options.
    HaMgmtIntfOnly string
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    InternetServiceSrc string
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    InternetServiceSrcCustomGroups []string
    Custom Internet Service source group name.
    InternetServiceSrcCustoms []string
    Custom Internet Service source name.
    InternetServiceSrcGroups []string
    Internet Service source group name.
    InternetServiceSrcNames []string
    Internet Service source name.
    InternetServiceSrcNegate string
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    Intfs []string
    Incoming interface name from available options.
    Logtraffic string
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    PackagesFirewallLocalinpolicyId string
    an identifier for the resource with format {{policyid}}.
    Pkg string
    Package.
    PkgFolderPath string
    Pkg Folder Path.
    Policyid float64
    User defined local in policy ID.
    Schedule string
    Schedule object from available options.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ServiceNegate string
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    Services []string
    Service object from available options.
    SrcaddrNegate string
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    Srcaddrs []string
    Source address object from available options.
    Status string
    Enable/disable this local-in policy. Valid values: disable, enable.
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    VirtualPatch string
    Enable/disable virtual patching. Valid values: disable, enable.
    action String
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    comments String
    Comment.
    dstaddrNegate String
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    dstaddrs List<String>
    Destination address object from available options.
    haMgmtIntfOnly String
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    internetServiceSrc String
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    internetServiceSrcCustomGroups List<String>
    Custom Internet Service source group name.
    internetServiceSrcCustoms List<String>
    Custom Internet Service source name.
    internetServiceSrcGroups List<String>
    Internet Service source group name.
    internetServiceSrcNames List<String>
    Internet Service source name.
    internetServiceSrcNegate String
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    intfs List<String>
    Incoming interface name from available options.
    logtraffic String
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    packagesFirewallLocalinpolicyId String
    an identifier for the resource with format {{policyid}}.
    pkg String
    Package.
    pkgFolderPath String
    Pkg Folder Path.
    policyid Double
    User defined local in policy ID.
    schedule String
    Schedule object from available options.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serviceNegate String
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    services List<String>
    Service object from available options.
    srcaddrNegate String
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    srcaddrs List<String>
    Source address object from available options.
    status String
    Enable/disable this local-in policy. Valid values: disable, enable.
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    virtualPatch String
    Enable/disable virtual patching. Valid values: disable, enable.
    action string
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    comments string
    Comment.
    dstaddrNegate string
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    dstaddrs string[]
    Destination address object from available options.
    haMgmtIntfOnly string
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    internetServiceSrc string
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    internetServiceSrcCustomGroups string[]
    Custom Internet Service source group name.
    internetServiceSrcCustoms string[]
    Custom Internet Service source name.
    internetServiceSrcGroups string[]
    Internet Service source group name.
    internetServiceSrcNames string[]
    Internet Service source name.
    internetServiceSrcNegate string
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    intfs string[]
    Incoming interface name from available options.
    logtraffic string
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    packagesFirewallLocalinpolicyId string
    an identifier for the resource with format {{policyid}}.
    pkg string
    Package.
    pkgFolderPath string
    Pkg Folder Path.
    policyid number
    User defined local in policy ID.
    schedule string
    Schedule object from available options.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serviceNegate string
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    services string[]
    Service object from available options.
    srcaddrNegate string
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    srcaddrs string[]
    Source address object from available options.
    status string
    Enable/disable this local-in policy. Valid values: disable, enable.
    uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    virtualPatch string
    Enable/disable virtual patching. Valid values: disable, enable.
    action str
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    comments str
    Comment.
    dstaddr_negate str
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    dstaddrs Sequence[str]
    Destination address object from available options.
    ha_mgmt_intf_only str
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    internet_service_src str
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    internet_service_src_custom_groups Sequence[str]
    Custom Internet Service source group name.
    internet_service_src_customs Sequence[str]
    Custom Internet Service source name.
    internet_service_src_groups Sequence[str]
    Internet Service source group name.
    internet_service_src_names Sequence[str]
    Internet Service source name.
    internet_service_src_negate str
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    intfs Sequence[str]
    Incoming interface name from available options.
    logtraffic str
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    packages_firewall_localinpolicy_id str
    an identifier for the resource with format {{policyid}}.
    pkg str
    Package.
    pkg_folder_path str
    Pkg Folder Path.
    policyid float
    User defined local in policy ID.
    schedule str
    Schedule object from available options.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    service_negate str
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    services Sequence[str]
    Service object from available options.
    srcaddr_negate str
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    srcaddrs Sequence[str]
    Source address object from available options.
    status str
    Enable/disable this local-in policy. Valid values: disable, enable.
    uuid str
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    virtual_patch str
    Enable/disable virtual patching. Valid values: disable, enable.
    action String
    Action performed on traffic matching the policy (default = deny). Valid values: deny, accept.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    comments String
    Comment.
    dstaddrNegate String
    When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
    dstaddrs List<String>
    Destination address object from available options.
    haMgmtIntfOnly String
    Enable/disable dedicating the HA management interface only for local-in policy. Valid values: disable, enable.
    internetServiceSrc String
    Enable/disable use of Internet Services in source for this local-in policy. If enabled, source address is not used. Valid values: disable, enable.
    internetServiceSrcCustomGroups List<String>
    Custom Internet Service source group name.
    internetServiceSrcCustoms List<String>
    Custom Internet Service source name.
    internetServiceSrcGroups List<String>
    Internet Service source group name.
    internetServiceSrcNames List<String>
    Internet Service source name.
    internetServiceSrcNegate String
    When enabled internet-service-src specifies what the service must NOT be. Valid values: disable, enable.
    intfs List<String>
    Incoming interface name from available options.
    logtraffic String
    Enable/disable local-in traffic logging. Valid values: disable, enable.
    packagesFirewallLocalinpolicyId String
    an identifier for the resource with format {{policyid}}.
    pkg String
    Package.
    pkgFolderPath String
    Pkg Folder Path.
    policyid Number
    User defined local in policy ID.
    schedule String
    Schedule object from available options.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    serviceNegate String
    When enabled service specifies what the service must NOT be. Valid values: disable, enable.
    services List<String>
    Service object from available options.
    srcaddrNegate String
    When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
    srcaddrs List<String>
    Source address object from available options.
    status String
    Enable/disable this local-in policy. Valid values: disable, enable.
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    virtualPatch String
    Enable/disable virtual patching. Valid values: disable, enable.

    Import

    Packages FirewallLocalInPolicy can be imported using any of these accepted formats:

    Set import_options = [“pkg_folder_path=YOUR_VALUE”, “pkg=YOUR_VALUE”] in the provider section.

    $ export “FORTIMANAGER_IMPORT_TABLE”=“true”

    $ pulumi import fortimanager:index/packagesFirewallLocalinpolicy:PackagesFirewallLocalinpolicy labelname {{policyid}}

    $ unset “FORTIMANAGER_IMPORT_TABLE”

    -> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortimanager fortinetdev/terraform-provider-fortimanager
    License
    Notes
    This Pulumi package is based on the fortimanager Terraform Provider.
    fortimanager logo
    fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
    fortinetdev/terraform-provider-fortimanager