Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortios
  3. API Docs
  4. filter
  5. filter/dns
  6. Profile
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

fortios.filter/dns.Profile

Explore with Pulumi AI

Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios

Configure DNS domain filter profiles.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as fortios from "@pulumiverse/fortios";

const trname = new fortios.filter.dns.Profile("trname", {
    blockAction: "redirect",
    blockBotnet: "disable",
    domainFilter: {
        domainFilterTable: 0,
    },
    ftgdDns: {
        filters: [
            {
                action: "block",
                category: 26,
                id: 1,
                log: "enable",
            },
            {
                action: "block",
                category: 61,
                id: 2,
                log: "enable",
            },
            {
                action: "block",
                category: 86,
                id: 3,
                log: "enable",
            },
            {
                action: "block",
                category: 88,
                id: 4,
                log: "enable",
            },
        ],
    },
    logAllDomain: "disable",
    redirectPortal: "0.0.0.0",
    safeSearch: "disable",
    sdnsDomainLog: "enable",
    sdnsFtgdErrLog: "enable",
    youtubeRestrict: "strict",
});
Copy
import pulumi
import pulumiverse_fortios as fortios

trname = fortios.filter.dns.Profile("trname",
    block_action="redirect",
    block_botnet="disable",
    domain_filter=fortios.filter.dns.ProfileDomainFilterArgs(
        domain_filter_table=0,
    ),
    ftgd_dns=fortios.filter.dns.ProfileFtgdDnsArgs(
        filters=[
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=26,
                id=1,
                log="enable",
            ),
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=61,
                id=2,
                log="enable",
            ),
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=86,
                id=3,
                log="enable",
            ),
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=88,
                id=4,
                log="enable",
            ),
        ],
    ),
    log_all_domain="disable",
    redirect_portal="0.0.0.0",
    safe_search="disable",
    sdns_domain_log="enable",
    sdns_ftgd_err_log="enable",
    youtube_restrict="strict")
Copy
package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-fortios/sdk/go/fortios/filter"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := filter.NewProfile(ctx, "trname", &filter.ProfileArgs{
			BlockAction: pulumi.String("redirect"),
			BlockBotnet: pulumi.String("disable"),
			DomainFilter: &dns.ProfileDomainFilterArgs{
				DomainFilterTable: pulumi.Int(0),
			},
			FtgdDns: &dns.ProfileFtgdDnsArgs{
				Filters: dns.ProfileFtgdDnsFilterArray{
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(26),
						Id:       pulumi.Int(1),
						Log:      pulumi.String("enable"),
					},
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(61),
						Id:       pulumi.Int(2),
						Log:      pulumi.String("enable"),
					},
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(86),
						Id:       pulumi.Int(3),
						Log:      pulumi.String("enable"),
					},
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(88),
						Id:       pulumi.Int(4),
						Log:      pulumi.String("enable"),
					},
				},
			},
			LogAllDomain:    pulumi.String("disable"),
			RedirectPortal:  pulumi.String("0.0.0.0"),
			SafeSearch:      pulumi.String("disable"),
			SdnsDomainLog:   pulumi.String("enable"),
			SdnsFtgdErrLog:  pulumi.String("enable"),
			YoutubeRestrict: pulumi.String("strict"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortios = Pulumiverse.Fortios;

return await Deployment.RunAsync(() => 
{
    var trname = new Fortios.Filter.Dns.Profile("trname", new()
    {
        BlockAction = "redirect",
        BlockBotnet = "disable",
        DomainFilter = new Fortios.Filter.Dns.Inputs.ProfileDomainFilterArgs
        {
            DomainFilterTable = 0,
        },
        FtgdDns = new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsArgs
        {
            Filters = new[]
            {
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 26,
                    Id = 1,
                    Log = "enable",
                },
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 61,
                    Id = 2,
                    Log = "enable",
                },
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 86,
                    Id = 3,
                    Log = "enable",
                },
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 88,
                    Id = 4,
                    Log = "enable",
                },
            },
        },
        LogAllDomain = "disable",
        RedirectPortal = "0.0.0.0",
        SafeSearch = "disable",
        SdnsDomainLog = "enable",
        SdnsFtgdErrLog = "enable",
        YoutubeRestrict = "strict",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortios.filter.Profile;
import com.pulumi.fortios.filter.ProfileArgs;
import com.pulumi.fortios.filter.inputs.ProfileDomainFilterArgs;
import com.pulumi.fortios.filter.inputs.ProfileFtgdDnsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trname = new Profile("trname", ProfileArgs.builder()
            .blockAction("redirect")
            .blockBotnet("disable")
            .domainFilter(ProfileDomainFilterArgs.builder()
                .domainFilterTable(0)
                .build())
            .ftgdDns(ProfileFtgdDnsArgs.builder()
                .filters(                
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(26)
                        .id(1)
                        .log("enable")
                        .build(),
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(61)
                        .id(2)
                        .log("enable")
                        .build(),
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(86)
                        .id(3)
                        .log("enable")
                        .build(),
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(88)
                        .id(4)
                        .log("enable")
                        .build())
                .build())
            .logAllDomain("disable")
            .redirectPortal("0.0.0.0")
            .safeSearch("disable")
            .sdnsDomainLog("enable")
            .sdnsFtgdErrLog("enable")
            .youtubeRestrict("strict")
            .build());

    }
}
Copy
resources:
  trname:
    type: fortios:filter/dns:Profile
    properties:
      blockAction: redirect
      blockBotnet: disable
      domainFilter:
        domainFilterTable: 0
      ftgdDns:
        filters:
          - action: block
            category: 26
            id: 1
            log: enable
          - action: block
            category: 61
            id: 2
            log: enable
          - action: block
            category: 86
            id: 3
            log: enable
          - action: block
            category: 88
            id: 4
            log: enable
      logAllDomain: disable
      redirectPortal: 0.0.0.0
      safeSearch: disable
      sdnsDomainLog: enable
      sdnsFtgdErrLog: enable
      youtubeRestrict: strict
Copy

Create Profile Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Profile(name: string, args?: ProfileArgs, opts?: CustomResourceOptions);
@overload
def Profile(resource_name: str,
            args: Optional[ProfileArgs] = None,
            opts: Optional[ResourceOptions] = None)

@overload
def Profile(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            block_action: Optional[str] = None,
            block_botnet: Optional[str] = None,
            comment: Optional[str] = None,
            dns_translations: Optional[Sequence[ProfileDnsTranslationArgs]] = None,
            domain_filter: Optional[ProfileDomainFilterArgs] = None,
            dynamic_sort_subtable: Optional[str] = None,
            external_ip_blocklists: Optional[Sequence[ProfileExternalIpBlocklistArgs]] = None,
            ftgd_dns: Optional[ProfileFtgdDnsArgs] = None,
            get_all_tables: Optional[str] = None,
            log_all_domain: Optional[str] = None,
            name: Optional[str] = None,
            redirect_portal: Optional[str] = None,
            redirect_portal6: Optional[str] = None,
            safe_search: Optional[str] = None,
            sdns_domain_log: Optional[str] = None,
            sdns_ftgd_err_log: Optional[str] = None,
            strip_ech: Optional[str] = None,
            transparent_dns_databases: Optional[Sequence[ProfileTransparentDnsDatabaseArgs]] = None,
            vdomparam: Optional[str] = None,
            youtube_restrict: Optional[str] = None)
func NewProfile(ctx *Context, name string, args *ProfileArgs, opts ...ResourceOption) (*Profile, error)
public Profile(string name, ProfileArgs? args = null, CustomResourceOptions? opts = null)
public Profile(String name, ProfileArgs args)
public Profile(String name, ProfileArgs args, CustomResourceOptions options)

type: fortios:filter/dns/profile:Profile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args ProfileArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args ProfileArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args ProfileArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args ProfileArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ProfileArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Profile Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Profile resource accepts the following input properties:

BlockAction string
Action to take for blocked domains.
BlockBotnet string
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
Comment string
Comment.
DnsTranslations List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileDnsTranslation>
DNS translation settings. The structure of dns_translation block is documented below.
DomainFilter Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileDomainFilter
Domain filter settings. The structure of domain_filter block is documented below.
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
ExternalIpBlocklists List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileExternalIpBlocklist>
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
FtgdDns Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileFtgdDns
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
LogAllDomain string
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
Name Changes to this property will trigger replacement. string
Profile name.
RedirectPortal string
IP address of the SDNS redirect portal.
RedirectPortal6 string
IPv6 address of the SDNS redirect portal.
SafeSearch string
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
SdnsDomainLog string
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
SdnsFtgdErrLog string
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
StripEch string
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
TransparentDnsDatabases List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileTransparentDnsDatabase>
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
Vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
YoutubeRestrict string
Set safe search for YouTube restriction level.
BlockAction string
Action to take for blocked domains.
BlockBotnet string
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
Comment string
Comment.
DnsTranslations []ProfileDnsTranslationArgs
DNS translation settings. The structure of dns_translation block is documented below.
DomainFilter ProfileDomainFilterArgs
Domain filter settings. The structure of domain_filter block is documented below.
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
ExternalIpBlocklists []ProfileExternalIpBlocklistArgs
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
FtgdDns ProfileFtgdDnsArgs
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
LogAllDomain string
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
Name Changes to this property will trigger replacement. string
Profile name.
RedirectPortal string
IP address of the SDNS redirect portal.
RedirectPortal6 string
IPv6 address of the SDNS redirect portal.
SafeSearch string
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
SdnsDomainLog string
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
SdnsFtgdErrLog string
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
StripEch string
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
TransparentDnsDatabases []ProfileTransparentDnsDatabaseArgs
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
Vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
YoutubeRestrict string
Set safe search for YouTube restriction level.
blockAction String
Action to take for blocked domains.
blockBotnet String
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
comment String
Comment.
dnsTranslations List<ProfileDnsTranslation>
DNS translation settings. The structure of dns_translation block is documented below.
domainFilter ProfileDomainFilter
Domain filter settings. The structure of domain_filter block is documented below.
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
externalIpBlocklists List<ProfileExternalIpBlocklist>
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
ftgdDns ProfileFtgdDns
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
logAllDomain String
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
name Changes to this property will trigger replacement. String
Profile name.
redirectPortal String
IP address of the SDNS redirect portal.
redirectPortal6 String
IPv6 address of the SDNS redirect portal.
safeSearch String
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
sdnsDomainLog String
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
sdnsFtgdErrLog String
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
stripEch String
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
transparentDnsDatabases List<ProfileTransparentDnsDatabase>
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
vdomparam Changes to this property will trigger replacement. String
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
youtubeRestrict String
Set safe search for YouTube restriction level.
blockAction string
Action to take for blocked domains.
blockBotnet string
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
comment string
Comment.
dnsTranslations ProfileDnsTranslation[]
DNS translation settings. The structure of dns_translation block is documented below.
domainFilter ProfileDomainFilter
Domain filter settings. The structure of domain_filter block is documented below.
dynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
externalIpBlocklists ProfileExternalIpBlocklist[]
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
ftgdDns ProfileFtgdDns
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
getAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
logAllDomain string
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
name Changes to this property will trigger replacement. string
Profile name.
redirectPortal string
IP address of the SDNS redirect portal.
redirectPortal6 string
IPv6 address of the SDNS redirect portal.
safeSearch string
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
sdnsDomainLog string
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
sdnsFtgdErrLog string
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
stripEch string
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
transparentDnsDatabases ProfileTransparentDnsDatabase[]
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
youtubeRestrict string
Set safe search for YouTube restriction level.
block_action str
Action to take for blocked domains.
block_botnet str
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
comment str
Comment.
dns_translations Sequence[ProfileDnsTranslationArgs]
DNS translation settings. The structure of dns_translation block is documented below.
domain_filter ProfileDomainFilterArgs
Domain filter settings. The structure of domain_filter block is documented below.
dynamic_sort_subtable str
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
external_ip_blocklists Sequence[ProfileExternalIpBlocklistArgs]
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
ftgd_dns ProfileFtgdDnsArgs
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
get_all_tables str
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
log_all_domain str
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
name Changes to this property will trigger replacement. str
Profile name.
redirect_portal str
IP address of the SDNS redirect portal.
redirect_portal6 str
IPv6 address of the SDNS redirect portal.
safe_search str
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
sdns_domain_log str
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
sdns_ftgd_err_log str
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
strip_ech str
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
transparent_dns_databases Sequence[ProfileTransparentDnsDatabaseArgs]
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
vdomparam Changes to this property will trigger replacement. str
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
youtube_restrict str
Set safe search for YouTube restriction level.
blockAction String
Action to take for blocked domains.
blockBotnet String
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
comment String
Comment.
dnsTranslations List<Property Map>
DNS translation settings. The structure of dns_translation block is documented below.
domainFilter Property Map
Domain filter settings. The structure of domain_filter block is documented below.
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
externalIpBlocklists List<Property Map>
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
ftgdDns Property Map
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
logAllDomain String
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
name Changes to this property will trigger replacement. String
Profile name.
redirectPortal String
IP address of the SDNS redirect portal.
redirectPortal6 String
IPv6 address of the SDNS redirect portal.
safeSearch String
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
sdnsDomainLog String
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
sdnsFtgdErrLog String
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
stripEch String
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
transparentDnsDatabases List<Property Map>
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
vdomparam Changes to this property will trigger replacement. String
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
youtubeRestrict String
Set safe search for YouTube restriction level.

Outputs

All input properties are implicitly available as output properties. Additionally, the Profile resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing Profile Resource

Get an existing Profile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ProfileState, opts?: CustomResourceOptions): Profile
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        block_action: Optional[str] = None,
        block_botnet: Optional[str] = None,
        comment: Optional[str] = None,
        dns_translations: Optional[Sequence[ProfileDnsTranslationArgs]] = None,
        domain_filter: Optional[ProfileDomainFilterArgs] = None,
        dynamic_sort_subtable: Optional[str] = None,
        external_ip_blocklists: Optional[Sequence[ProfileExternalIpBlocklistArgs]] = None,
        ftgd_dns: Optional[ProfileFtgdDnsArgs] = None,
        get_all_tables: Optional[str] = None,
        log_all_domain: Optional[str] = None,
        name: Optional[str] = None,
        redirect_portal: Optional[str] = None,
        redirect_portal6: Optional[str] = None,
        safe_search: Optional[str] = None,
        sdns_domain_log: Optional[str] = None,
        sdns_ftgd_err_log: Optional[str] = None,
        strip_ech: Optional[str] = None,
        transparent_dns_databases: Optional[Sequence[ProfileTransparentDnsDatabaseArgs]] = None,
        vdomparam: Optional[str] = None,
        youtube_restrict: Optional[str] = None) -> Profile
func GetProfile(ctx *Context, name string, id IDInput, state *ProfileState, opts ...ResourceOption) (*Profile, error)
public static Profile Get(string name, Input<string> id, ProfileState? state, CustomResourceOptions? opts = null)
public static Profile get(String name, Output<String> id, ProfileState state, CustomResourceOptions options)
resources:  _:    type: fortios:filter/dns/profile:Profile    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
BlockAction string
Action to take for blocked domains.
BlockBotnet string
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
Comment string
Comment.
DnsTranslations List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileDnsTranslation>
DNS translation settings. The structure of dns_translation block is documented below.
DomainFilter Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileDomainFilter
Domain filter settings. The structure of domain_filter block is documented below.
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
ExternalIpBlocklists List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileExternalIpBlocklist>
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
FtgdDns Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileFtgdDns
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
LogAllDomain string
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
Name Changes to this property will trigger replacement. string
Profile name.
RedirectPortal string
IP address of the SDNS redirect portal.
RedirectPortal6 string
IPv6 address of the SDNS redirect portal.
SafeSearch string
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
SdnsDomainLog string
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
SdnsFtgdErrLog string
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
StripEch string
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
TransparentDnsDatabases List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileTransparentDnsDatabase>
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
Vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
YoutubeRestrict string
Set safe search for YouTube restriction level.
BlockAction string
Action to take for blocked domains.
BlockBotnet string
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
Comment string
Comment.
DnsTranslations []ProfileDnsTranslationArgs
DNS translation settings. The structure of dns_translation block is documented below.
DomainFilter ProfileDomainFilterArgs
Domain filter settings. The structure of domain_filter block is documented below.
DynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
ExternalIpBlocklists []ProfileExternalIpBlocklistArgs
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
FtgdDns ProfileFtgdDnsArgs
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
GetAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
LogAllDomain string
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
Name Changes to this property will trigger replacement. string
Profile name.
RedirectPortal string
IP address of the SDNS redirect portal.
RedirectPortal6 string
IPv6 address of the SDNS redirect portal.
SafeSearch string
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
SdnsDomainLog string
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
SdnsFtgdErrLog string
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
StripEch string
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
TransparentDnsDatabases []ProfileTransparentDnsDatabaseArgs
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
Vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
YoutubeRestrict string
Set safe search for YouTube restriction level.
blockAction String
Action to take for blocked domains.
blockBotnet String
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
comment String
Comment.
dnsTranslations List<ProfileDnsTranslation>
DNS translation settings. The structure of dns_translation block is documented below.
domainFilter ProfileDomainFilter
Domain filter settings. The structure of domain_filter block is documented below.
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
externalIpBlocklists List<ProfileExternalIpBlocklist>
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
ftgdDns ProfileFtgdDns
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
logAllDomain String
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
name Changes to this property will trigger replacement. String
Profile name.
redirectPortal String
IP address of the SDNS redirect portal.
redirectPortal6 String
IPv6 address of the SDNS redirect portal.
safeSearch String
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
sdnsDomainLog String
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
sdnsFtgdErrLog String
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
stripEch String
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
transparentDnsDatabases List<ProfileTransparentDnsDatabase>
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
vdomparam Changes to this property will trigger replacement. String
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
youtubeRestrict String
Set safe search for YouTube restriction level.
blockAction string
Action to take for blocked domains.
blockBotnet string
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
comment string
Comment.
dnsTranslations ProfileDnsTranslation[]
DNS translation settings. The structure of dns_translation block is documented below.
domainFilter ProfileDomainFilter
Domain filter settings. The structure of domain_filter block is documented below.
dynamicSortSubtable string
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
externalIpBlocklists ProfileExternalIpBlocklist[]
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
ftgdDns ProfileFtgdDns
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
getAllTables string
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
logAllDomain string
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
name Changes to this property will trigger replacement. string
Profile name.
redirectPortal string
IP address of the SDNS redirect portal.
redirectPortal6 string
IPv6 address of the SDNS redirect portal.
safeSearch string
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
sdnsDomainLog string
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
sdnsFtgdErrLog string
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
stripEch string
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
transparentDnsDatabases ProfileTransparentDnsDatabase[]
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
vdomparam Changes to this property will trigger replacement. string
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
youtubeRestrict string
Set safe search for YouTube restriction level.
block_action str
Action to take for blocked domains.
block_botnet str
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
comment str
Comment.
dns_translations Sequence[ProfileDnsTranslationArgs]
DNS translation settings. The structure of dns_translation block is documented below.
domain_filter ProfileDomainFilterArgs
Domain filter settings. The structure of domain_filter block is documented below.
dynamic_sort_subtable str
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
external_ip_blocklists Sequence[ProfileExternalIpBlocklistArgs]
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
ftgd_dns ProfileFtgdDnsArgs
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
get_all_tables str
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
log_all_domain str
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
name Changes to this property will trigger replacement. str
Profile name.
redirect_portal str
IP address of the SDNS redirect portal.
redirect_portal6 str
IPv6 address of the SDNS redirect portal.
safe_search str
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
sdns_domain_log str
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
sdns_ftgd_err_log str
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
strip_ech str
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
transparent_dns_databases Sequence[ProfileTransparentDnsDatabaseArgs]
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
vdomparam Changes to this property will trigger replacement. str
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
youtube_restrict str
Set safe search for YouTube restriction level.
blockAction String
Action to take for blocked domains.
blockBotnet String
Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
comment String
Comment.
dnsTranslations List<Property Map>
DNS translation settings. The structure of dns_translation block is documented below.
domainFilter Property Map
Domain filter settings. The structure of domain_filter block is documented below.
dynamicSortSubtable String
Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
externalIpBlocklists List<Property Map>
One or more external IP block lists. The structure of external_ip_blocklist block is documented below.
ftgdDns Property Map
FortiGuard DNS Filter settings. The structure of ftgd_dns block is documented below.
getAllTables String
Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
logAllDomain String
Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable, disable.
name Changes to this property will trigger replacement. String
Profile name.
redirectPortal String
IP address of the SDNS redirect portal.
redirectPortal6 String
IPv6 address of the SDNS redirect portal.
safeSearch String
Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
sdnsDomainLog String
Enable/disable domain filtering and botnet domain logging. Valid values: enable, disable.
sdnsFtgdErrLog String
Enable/disable FortiGuard SDNS rating error logging. Valid values: enable, disable.
stripEch String
Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
transparentDnsDatabases List<Property Map>
Transparent DNS database zones. The structure of transparent_dns_database block is documented below.
vdomparam Changes to this property will trigger replacement. String
Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
youtubeRestrict String
Set safe search for YouTube restriction level.

Supporting Types

ProfileDnsTranslation
, ProfileDnsTranslationArgs

AddrType string
DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
Dst string
IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
Dst6 string
IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
Id int
ID.
Netmask string
If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
Prefix int
If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
Src string
IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
Src6 string
IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
Status string
Enable/disable this DNS translation entry. Valid values: enable, disable.
AddrType string
DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
Dst string
IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
Dst6 string
IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
Id int
ID.
Netmask string
If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
Prefix int
If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
Src string
IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
Src6 string
IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
Status string
Enable/disable this DNS translation entry. Valid values: enable, disable.
addrType String
DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
dst String
IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
dst6 String
IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
id Integer
ID.
netmask String
If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
prefix Integer
If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
src String
IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
src6 String
IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
status String
Enable/disable this DNS translation entry. Valid values: enable, disable.
addrType string
DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
dst string
IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
dst6 string
IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
id number
ID.
netmask string
If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
prefix number
If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
src string
IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
src6 string
IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
status string
Enable/disable this DNS translation entry. Valid values: enable, disable.
addr_type str
DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
dst str
IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
dst6 str
IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
id int
ID.
netmask str
If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
prefix int
If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
src str
IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
src6 str
IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
status str
Enable/disable this DNS translation entry. Valid values: enable, disable.
addrType String
DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
dst String
IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
dst6 String
IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
id Number
ID.
netmask String
If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
prefix Number
If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
src String
IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
src6 String
IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
status String
Enable/disable this DNS translation entry. Valid values: enable, disable.

ProfileDomainFilter
, ProfileDomainFilterArgs

DomainFilterTable int
DNS domain filter table ID.
DomainFilterTable int
DNS domain filter table ID.
domainFilterTable Integer
DNS domain filter table ID.
domainFilterTable number
DNS domain filter table ID.
domain_filter_table int
DNS domain filter table ID.
domainFilterTable Number
DNS domain filter table ID.

ProfileExternalIpBlocklist
, ProfileExternalIpBlocklistArgs

Name string
External domain block list name.
Name string
External domain block list name.
name String
External domain block list name.
name string
External domain block list name.
name str
External domain block list name.
name String
External domain block list name.

ProfileFtgdDns
, ProfileFtgdDnsArgs

Filters List<Pulumiverse.Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilter>
FortiGuard DNS domain filters. The structure of filters block is documented below.
Options string
FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
Filters []ProfileFtgdDnsFilter
FortiGuard DNS domain filters. The structure of filters block is documented below.
Options string
FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
filters List<ProfileFtgdDnsFilter>
FortiGuard DNS domain filters. The structure of filters block is documented below.
options String
FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
filters ProfileFtgdDnsFilter[]
FortiGuard DNS domain filters. The structure of filters block is documented below.
options string
FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
filters Sequence[ProfileFtgdDnsFilter]
FortiGuard DNS domain filters. The structure of filters block is documented below.
options str
FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
filters List<Property Map>
FortiGuard DNS domain filters. The structure of filters block is documented below.
options String
FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.

ProfileFtgdDnsFilter
, ProfileFtgdDnsFilterArgs

Action string
Action to take for DNS requests matching the category. Valid values: block, monitor.
Category int
Category number.
Id int
ID number.
Log string
Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.
Action string
Action to take for DNS requests matching the category. Valid values: block, monitor.
Category int
Category number.
Id int
ID number.
Log string
Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.
action String
Action to take for DNS requests matching the category. Valid values: block, monitor.
category Integer
Category number.
id Integer
ID number.
log String
Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.
action string
Action to take for DNS requests matching the category. Valid values: block, monitor.
category number
Category number.
id number
ID number.
log string
Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.
action str
Action to take for DNS requests matching the category. Valid values: block, monitor.
category int
Category number.
id int
ID number.
log str
Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.
action String
Action to take for DNS requests matching the category. Valid values: block, monitor.
category Number
Category number.
id Number
ID number.
log String
Enable/disable DNS filter logging for this DNS profile. Valid values: enable, disable.

ProfileTransparentDnsDatabase
, ProfileTransparentDnsDatabaseArgs

Name string
DNS database zone name.
Name string
DNS database zone name.
name String
DNS database zone name.
name string
DNS database zone name.
name str
DNS database zone name.
name String
DNS database zone name.

Import

Dnsfilter Profile can be imported using any of these accepted formats:

$ pulumi import fortios:filter/dns/profile:Profile labelname {{name}}
Copy

If you do not want to import arguments of block:

$ export “FORTIOS_IMPORT_TABLE”=“false”

$ pulumi import fortios:filter/dns/profile:Profile labelname {{name}}
Copy

$ unset “FORTIOS_IMPORT_TABLE”

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortios pulumiverse/pulumi-fortios
License
Apache-2.0
Notes
This Pulumi package is based on the fortios Terraform Provider.
Fortios v0.0.6 published on Tuesday, Jul 9, 2024 by pulumiverse
pulumiverse/pulumi-fortios