Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. PackagesFirewallHyperscalepolicy
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.PackagesFirewallHyperscalepolicy

Explore with Pulumi AI

fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

Configure IPv4 hyperscale-policies.

Create PackagesFirewallHyperscalepolicy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PackagesFirewallHyperscalepolicy(name: string, args: PackagesFirewallHyperscalepolicyArgs, opts?: CustomResourceOptions);
@overload
def PackagesFirewallHyperscalepolicy(resource_name: str,
                                     args: PackagesFirewallHyperscalepolicyArgs,
                                     opts: Optional[ResourceOptions] = None)

@overload
def PackagesFirewallHyperscalepolicy(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     pkg: Optional[str] = None,
                                     packages_firewall_hyperscalepolicy_id: Optional[str] = None,
                                     global_label: Optional[str] = None,
                                     cgn_eif: Optional[str] = None,
                                     cgn_eim: Optional[str] = None,
                                     cgn_log_server_grp: Optional[str] = None,
                                     cgn_resource_quota: Optional[float] = None,
                                     cgn_session_quota: Optional[float] = None,
                                     comments: Optional[str] = None,
                                     delay_tcp_npu_session: Optional[str] = None,
                                     dstaddr: Optional[str] = None,
                                     dstaddr6: Optional[str] = None,
                                     dstaddr_negate: Optional[str] = None,
                                     dstintf: Optional[str] = None,
                                     firewall_session_dirty: Optional[str] = None,
                                     action: Optional[str] = None,
                                     ippool: Optional[str] = None,
                                     label: Optional[str] = None,
                                     name: Optional[str] = None,
                                     auto_asic_offload: Optional[str] = None,
                                     nat: Optional[str] = None,
                                     poolname6: Optional[str] = None,
                                     pkg_folder_path: Optional[str] = None,
                                     policy_offload: Optional[str] = None,
                                     policyid: Optional[float] = None,
                                     poolname: Optional[str] = None,
                                     adom: Optional[str] = None,
                                     scopetype: Optional[str] = None,
                                     send_deny_packet: Optional[str] = None,
                                     service: Optional[str] = None,
                                     service_negate: Optional[str] = None,
                                     srcaddr: Optional[str] = None,
                                     srcaddr6: Optional[str] = None,
                                     srcaddr_negate: Optional[str] = None,
                                     srcintf: Optional[str] = None,
                                     status: Optional[str] = None,
                                     tcp_timeout_pid: Optional[str] = None,
                                     traffic_shaper: Optional[str] = None,
                                     traffic_shaper_reverse: Optional[str] = None,
                                     udp_timeout_pid: Optional[str] = None,
                                     uuid: Optional[str] = None)
func NewPackagesFirewallHyperscalepolicy(ctx *Context, name string, args PackagesFirewallHyperscalepolicyArgs, opts ...ResourceOption) (*PackagesFirewallHyperscalepolicy, error)
public PackagesFirewallHyperscalepolicy(string name, PackagesFirewallHyperscalepolicyArgs args, CustomResourceOptions? opts = null)
public PackagesFirewallHyperscalepolicy(String name, PackagesFirewallHyperscalepolicyArgs args)
public PackagesFirewallHyperscalepolicy(String name, PackagesFirewallHyperscalepolicyArgs args, CustomResourceOptions options)

type: fortimanager:PackagesFirewallHyperscalepolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. PackagesFirewallHyperscalepolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. PackagesFirewallHyperscalepolicyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. PackagesFirewallHyperscalepolicyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. PackagesFirewallHyperscalepolicyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. PackagesFirewallHyperscalepolicyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var packagesFirewallHyperscalepolicyResource = new Fortimanager.PackagesFirewallHyperscalepolicy("packagesFirewallHyperscalepolicyResource", new()
{
    Pkg = "string",
    PackagesFirewallHyperscalepolicyId = "string",
    GlobalLabel = "string",
    CgnEif = "string",
    CgnEim = "string",
    CgnLogServerGrp = "string",
    CgnResourceQuota = 0,
    CgnSessionQuota = 0,
    Comments = "string",
    DelayTcpNpuSession = "string",
    Dstaddr = "string",
    Dstaddr6 = "string",
    DstaddrNegate = "string",
    Dstintf = "string",
    FirewallSessionDirty = "string",
    Action = "string",
    Ippool = "string",
    Label = "string",
    Name = "string",
    AutoAsicOffload = "string",
    Nat = "string",
    Poolname6 = "string",
    PkgFolderPath = "string",
    PolicyOffload = "string",
    Policyid = 0,
    Poolname = "string",
    Adom = "string",
    Scopetype = "string",
    SendDenyPacket = "string",
    Service = "string",
    ServiceNegate = "string",
    Srcaddr = "string",
    Srcaddr6 = "string",
    SrcaddrNegate = "string",
    Srcintf = "string",
    Status = "string",
    TcpTimeoutPid = "string",
    TrafficShaper = "string",
    TrafficShaperReverse = "string",
    UdpTimeoutPid = "string",
    Uuid = "string",
});
Copy
example, err := fortimanager.NewPackagesFirewallHyperscalepolicy(ctx, "packagesFirewallHyperscalepolicyResource", &fortimanager.PackagesFirewallHyperscalepolicyArgs{
Pkg: pulumi.String("string"),
PackagesFirewallHyperscalepolicyId: pulumi.String("string"),
GlobalLabel: pulumi.String("string"),
CgnEif: pulumi.String("string"),
CgnEim: pulumi.String("string"),
CgnLogServerGrp: pulumi.String("string"),
CgnResourceQuota: pulumi.Float64(0),
CgnSessionQuota: pulumi.Float64(0),
Comments: pulumi.String("string"),
DelayTcpNpuSession: pulumi.String("string"),
Dstaddr: pulumi.String("string"),
Dstaddr6: pulumi.String("string"),
DstaddrNegate: pulumi.String("string"),
Dstintf: pulumi.String("string"),
FirewallSessionDirty: pulumi.String("string"),
Action: pulumi.String("string"),
Ippool: pulumi.String("string"),
Label: pulumi.String("string"),
Name: pulumi.String("string"),
AutoAsicOffload: pulumi.String("string"),
Nat: pulumi.String("string"),
Poolname6: pulumi.String("string"),
PkgFolderPath: pulumi.String("string"),
PolicyOffload: pulumi.String("string"),
Policyid: pulumi.Float64(0),
Poolname: pulumi.String("string"),
Adom: pulumi.String("string"),
Scopetype: pulumi.String("string"),
SendDenyPacket: pulumi.String("string"),
Service: pulumi.String("string"),
ServiceNegate: pulumi.String("string"),
Srcaddr: pulumi.String("string"),
Srcaddr6: pulumi.String("string"),
SrcaddrNegate: pulumi.String("string"),
Srcintf: pulumi.String("string"),
Status: pulumi.String("string"),
TcpTimeoutPid: pulumi.String("string"),
TrafficShaper: pulumi.String("string"),
TrafficShaperReverse: pulumi.String("string"),
UdpTimeoutPid: pulumi.String("string"),
Uuid: pulumi.String("string"),
})
Copy
var packagesFirewallHyperscalepolicyResource = new PackagesFirewallHyperscalepolicy("packagesFirewallHyperscalepolicyResource", PackagesFirewallHyperscalepolicyArgs.builder()
    .pkg("string")
    .packagesFirewallHyperscalepolicyId("string")
    .globalLabel("string")
    .cgnEif("string")
    .cgnEim("string")
    .cgnLogServerGrp("string")
    .cgnResourceQuota(0)
    .cgnSessionQuota(0)
    .comments("string")
    .delayTcpNpuSession("string")
    .dstaddr("string")
    .dstaddr6("string")
    .dstaddrNegate("string")
    .dstintf("string")
    .firewallSessionDirty("string")
    .action("string")
    .ippool("string")
    .label("string")
    .name("string")
    .autoAsicOffload("string")
    .nat("string")
    .poolname6("string")
    .pkgFolderPath("string")
    .policyOffload("string")
    .policyid(0)
    .poolname("string")
    .adom("string")
    .scopetype("string")
    .sendDenyPacket("string")
    .service("string")
    .serviceNegate("string")
    .srcaddr("string")
    .srcaddr6("string")
    .srcaddrNegate("string")
    .srcintf("string")
    .status("string")
    .tcpTimeoutPid("string")
    .trafficShaper("string")
    .trafficShaperReverse("string")
    .udpTimeoutPid("string")
    .uuid("string")
    .build());
Copy
packages_firewall_hyperscalepolicy_resource = fortimanager.PackagesFirewallHyperscalepolicy("packagesFirewallHyperscalepolicyResource",
    pkg="string",
    packages_firewall_hyperscalepolicy_id="string",
    global_label="string",
    cgn_eif="string",
    cgn_eim="string",
    cgn_log_server_grp="string",
    cgn_resource_quota=0,
    cgn_session_quota=0,
    comments="string",
    delay_tcp_npu_session="string",
    dstaddr="string",
    dstaddr6="string",
    dstaddr_negate="string",
    dstintf="string",
    firewall_session_dirty="string",
    action="string",
    ippool="string",
    label="string",
    name="string",
    auto_asic_offload="string",
    nat="string",
    poolname6="string",
    pkg_folder_path="string",
    policy_offload="string",
    policyid=0,
    poolname="string",
    adom="string",
    scopetype="string",
    send_deny_packet="string",
    service="string",
    service_negate="string",
    srcaddr="string",
    srcaddr6="string",
    srcaddr_negate="string",
    srcintf="string",
    status="string",
    tcp_timeout_pid="string",
    traffic_shaper="string",
    traffic_shaper_reverse="string",
    udp_timeout_pid="string",
    uuid="string")
Copy
const packagesFirewallHyperscalepolicyResource = new fortimanager.PackagesFirewallHyperscalepolicy("packagesFirewallHyperscalepolicyResource", {
    pkg: "string",
    packagesFirewallHyperscalepolicyId: "string",
    globalLabel: "string",
    cgnEif: "string",
    cgnEim: "string",
    cgnLogServerGrp: "string",
    cgnResourceQuota: 0,
    cgnSessionQuota: 0,
    comments: "string",
    delayTcpNpuSession: "string",
    dstaddr: "string",
    dstaddr6: "string",
    dstaddrNegate: "string",
    dstintf: "string",
    firewallSessionDirty: "string",
    action: "string",
    ippool: "string",
    label: "string",
    name: "string",
    autoAsicOffload: "string",
    nat: "string",
    poolname6: "string",
    pkgFolderPath: "string",
    policyOffload: "string",
    policyid: 0,
    poolname: "string",
    adom: "string",
    scopetype: "string",
    sendDenyPacket: "string",
    service: "string",
    serviceNegate: "string",
    srcaddr: "string",
    srcaddr6: "string",
    srcaddrNegate: "string",
    srcintf: "string",
    status: "string",
    tcpTimeoutPid: "string",
    trafficShaper: "string",
    trafficShaperReverse: "string",
    udpTimeoutPid: "string",
    uuid: "string",
});
Copy
type: fortimanager:PackagesFirewallHyperscalepolicy
properties:
    action: string
    adom: string
    autoAsicOffload: string
    cgnEif: string
    cgnEim: string
    cgnLogServerGrp: string
    cgnResourceQuota: 0
    cgnSessionQuota: 0
    comments: string
    delayTcpNpuSession: string
    dstaddr: string
    dstaddr6: string
    dstaddrNegate: string
    dstintf: string
    firewallSessionDirty: string
    globalLabel: string
    ippool: string
    label: string
    name: string
    nat: string
    packagesFirewallHyperscalepolicyId: string
    pkg: string
    pkgFolderPath: string
    policyOffload: string
    policyid: 0
    poolname: string
    poolname6: string
    scopetype: string
    sendDenyPacket: string
    service: string
    serviceNegate: string
    srcaddr: string
    srcaddr6: string
    srcaddrNegate: string
    srcintf: string
    status: string
    tcpTimeoutPid: string
    trafficShaper: string
    trafficShaperReverse: string
    udpTimeoutPid: string
    uuid: string
Copy

PackagesFirewallHyperscalepolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PackagesFirewallHyperscalepolicy resource accepts the following input properties:

Pkg This property is required. string
Package.
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
CgnEif string
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
CgnEim string
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
CgnLogServerGrp string
NP log server group name
CgnResourceQuota double
resource quota
CgnSessionQuota double
session quota
Comments string
Comment.
DelayTcpNpuSession string
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
Dstaddr string
Destination address and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
FirewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
Label string
Label for the policy that appears when the GUI is in Section View mode.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
PackagesFirewallHyperscalepolicyId string
an identifier for the resource with format {{policyid}}.
PkgFolderPath string
Pkg Folder Path.
PolicyOffload string
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
Policyid double
Policy ID (0 - 15000).
Poolname string
IP Pool names.
Poolname6 string
IPv6 pool names.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
Srcaddr string
Source address and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
Status string
Enable or disable this policy. Valid values: disable, enable.
TcpTimeoutPid string
TCP timeout profile ID
TrafficShaper string
Traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UdpTimeoutPid string
UDP timeout profile ID
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
Pkg This property is required. string
Package.
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
CgnEif string
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
CgnEim string
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
CgnLogServerGrp string
NP log server group name
CgnResourceQuota float64
resource quota
CgnSessionQuota float64
session quota
Comments string
Comment.
DelayTcpNpuSession string
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
Dstaddr string
Destination address and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
FirewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
Label string
Label for the policy that appears when the GUI is in Section View mode.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
PackagesFirewallHyperscalepolicyId string
an identifier for the resource with format {{policyid}}.
PkgFolderPath string
Pkg Folder Path.
PolicyOffload string
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
Policyid float64
Policy ID (0 - 15000).
Poolname string
IP Pool names.
Poolname6 string
IPv6 pool names.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
Srcaddr string
Source address and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
Status string
Enable or disable this policy. Valid values: disable, enable.
TcpTimeoutPid string
TCP timeout profile ID
TrafficShaper string
Traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UdpTimeoutPid string
UDP timeout profile ID
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
pkg This property is required. String
Package.
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
cgnEif String
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
cgnEim String
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
cgnLogServerGrp String
NP log server group name
cgnResourceQuota Double
resource quota
cgnSessionQuota Double
session quota
comments String
Comment.
delayTcpNpuSession String
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
dstaddr String
Destination address and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
firewallSessionDirty String
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
label String
Label for the policy that appears when the GUI is in Section View mode.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
packagesFirewallHyperscalepolicyId String
an identifier for the resource with format {{policyid}}.
pkgFolderPath String
Pkg Folder Path.
policyOffload String
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
policyid Double
Policy ID (0 - 15000).
poolname String
IP Pool names.
poolname6 String
IPv6 pool names.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sendDenyPacket String
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr String
Source address and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
status String
Enable or disable this policy. Valid values: disable, enable.
tcpTimeoutPid String
TCP timeout profile ID
trafficShaper String
Traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
udpTimeoutPid String
UDP timeout profile ID
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
pkg This property is required. string
Package.
action string
Policy action (allow/deny/ipsec). Valid values: deny, accept.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
autoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
cgnEif string
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
cgnEim string
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
cgnLogServerGrp string
NP log server group name
cgnResourceQuota number
resource quota
cgnSessionQuota number
session quota
comments string
Comment.
delayTcpNpuSession string
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
dstaddr string
Destination address and address group names.
dstaddr6 string
Destination IPv6 address name and address group names.
dstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf string
Outgoing (egress) interface.
firewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
globalLabel string
Label for the policy that appears when the GUI is in Global View mode.
ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
label string
Label for the policy that appears when the GUI is in Section View mode.
name string
Policy name.
nat string
Enable/disable source NAT. Valid values: disable, enable.
packagesFirewallHyperscalepolicyId string
an identifier for the resource with format {{policyid}}.
pkgFolderPath string
Pkg Folder Path.
policyOffload string
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
policyid number
Policy ID (0 - 15000).
poolname string
IP Pool names.
poolname6 string
IPv6 pool names.
scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service string
Service and service group names.
serviceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr string
Source address and address group names.
srcaddr6 string
Source IPv6 address name and address group names.
srcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf string
Incoming (ingress) interface.
status string
Enable or disable this policy. Valid values: disable, enable.
tcpTimeoutPid string
TCP timeout profile ID
trafficShaper string
Traffic shaper.
trafficShaperReverse string
Reverse traffic shaper.
udpTimeoutPid string
UDP timeout profile ID
uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
pkg This property is required. str
Package.
action str
Policy action (allow/deny/ipsec). Valid values: deny, accept.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
auto_asic_offload str
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
cgn_eif str
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
cgn_eim str
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
cgn_log_server_grp str
NP log server group name
cgn_resource_quota float
resource quota
cgn_session_quota float
session quota
comments str
Comment.
delay_tcp_npu_session str
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
dstaddr str
Destination address and address group names.
dstaddr6 str
Destination IPv6 address name and address group names.
dstaddr_negate str
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf str
Outgoing (egress) interface.
firewall_session_dirty str
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
global_label str
Label for the policy that appears when the GUI is in Global View mode.
ippool str
Enable to use IP Pools for source NAT. Valid values: disable, enable.
label str
Label for the policy that appears when the GUI is in Section View mode.
name str
Policy name.
nat str
Enable/disable source NAT. Valid values: disable, enable.
packages_firewall_hyperscalepolicy_id str
an identifier for the resource with format {{policyid}}.
pkg_folder_path str
Pkg Folder Path.
policy_offload str
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
policyid float
Policy ID (0 - 15000).
poolname str
IP Pool names.
poolname6 str
IPv6 pool names.
scopetype str
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
send_deny_packet str
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service str
Service and service group names.
service_negate str
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr str
Source address and address group names.
srcaddr6 str
Source IPv6 address name and address group names.
srcaddr_negate str
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf str
Incoming (ingress) interface.
status str
Enable or disable this policy. Valid values: disable, enable.
tcp_timeout_pid str
TCP timeout profile ID
traffic_shaper str
Traffic shaper.
traffic_shaper_reverse str
Reverse traffic shaper.
udp_timeout_pid str
UDP timeout profile ID
uuid str
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
pkg This property is required. String
Package.
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
cgnEif String
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
cgnEim String
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
cgnLogServerGrp String
NP log server group name
cgnResourceQuota Number
resource quota
cgnSessionQuota Number
session quota
comments String
Comment.
delayTcpNpuSession String
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
dstaddr String
Destination address and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
firewallSessionDirty String
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
label String
Label for the policy that appears when the GUI is in Section View mode.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
packagesFirewallHyperscalepolicyId String
an identifier for the resource with format {{policyid}}.
pkgFolderPath String
Pkg Folder Path.
policyOffload String
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
policyid Number
Policy ID (0 - 15000).
poolname String
IP Pool names.
poolname6 String
IPv6 pool names.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sendDenyPacket String
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr String
Source address and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
status String
Enable or disable this policy. Valid values: disable, enable.
tcpTimeoutPid String
TCP timeout profile ID
trafficShaper String
Traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
udpTimeoutPid String
UDP timeout profile ID
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

Outputs

All input properties are implicitly available as output properties. Additionally, the PackagesFirewallHyperscalepolicy resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing PackagesFirewallHyperscalepolicy Resource

Get an existing PackagesFirewallHyperscalepolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PackagesFirewallHyperscalepolicyState, opts?: CustomResourceOptions): PackagesFirewallHyperscalepolicy
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        action: Optional[str] = None,
        adom: Optional[str] = None,
        auto_asic_offload: Optional[str] = None,
        cgn_eif: Optional[str] = None,
        cgn_eim: Optional[str] = None,
        cgn_log_server_grp: Optional[str] = None,
        cgn_resource_quota: Optional[float] = None,
        cgn_session_quota: Optional[float] = None,
        comments: Optional[str] = None,
        delay_tcp_npu_session: Optional[str] = None,
        dstaddr: Optional[str] = None,
        dstaddr6: Optional[str] = None,
        dstaddr_negate: Optional[str] = None,
        dstintf: Optional[str] = None,
        firewall_session_dirty: Optional[str] = None,
        global_label: Optional[str] = None,
        ippool: Optional[str] = None,
        label: Optional[str] = None,
        name: Optional[str] = None,
        nat: Optional[str] = None,
        packages_firewall_hyperscalepolicy_id: Optional[str] = None,
        pkg: Optional[str] = None,
        pkg_folder_path: Optional[str] = None,
        policy_offload: Optional[str] = None,
        policyid: Optional[float] = None,
        poolname: Optional[str] = None,
        poolname6: Optional[str] = None,
        scopetype: Optional[str] = None,
        send_deny_packet: Optional[str] = None,
        service: Optional[str] = None,
        service_negate: Optional[str] = None,
        srcaddr: Optional[str] = None,
        srcaddr6: Optional[str] = None,
        srcaddr_negate: Optional[str] = None,
        srcintf: Optional[str] = None,
        status: Optional[str] = None,
        tcp_timeout_pid: Optional[str] = None,
        traffic_shaper: Optional[str] = None,
        traffic_shaper_reverse: Optional[str] = None,
        udp_timeout_pid: Optional[str] = None,
        uuid: Optional[str] = None) -> PackagesFirewallHyperscalepolicy
func GetPackagesFirewallHyperscalepolicy(ctx *Context, name string, id IDInput, state *PackagesFirewallHyperscalepolicyState, opts ...ResourceOption) (*PackagesFirewallHyperscalepolicy, error)
public static PackagesFirewallHyperscalepolicy Get(string name, Input<string> id, PackagesFirewallHyperscalepolicyState? state, CustomResourceOptions? opts = null)
public static PackagesFirewallHyperscalepolicy get(String name, Output<String> id, PackagesFirewallHyperscalepolicyState state, CustomResourceOptions options)
resources:  _:    type: fortimanager:PackagesFirewallHyperscalepolicy    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
CgnEif string
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
CgnEim string
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
CgnLogServerGrp string
NP log server group name
CgnResourceQuota double
resource quota
CgnSessionQuota double
session quota
Comments string
Comment.
DelayTcpNpuSession string
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
Dstaddr string
Destination address and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
FirewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
Label string
Label for the policy that appears when the GUI is in Section View mode.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
PackagesFirewallHyperscalepolicyId string
an identifier for the resource with format {{policyid}}.
Pkg string
Package.
PkgFolderPath string
Pkg Folder Path.
PolicyOffload string
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
Policyid double
Policy ID (0 - 15000).
Poolname string
IP Pool names.
Poolname6 string
IPv6 pool names.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
Srcaddr string
Source address and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
Status string
Enable or disable this policy. Valid values: disable, enable.
TcpTimeoutPid string
TCP timeout profile ID
TrafficShaper string
Traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UdpTimeoutPid string
UDP timeout profile ID
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
Action string
Policy action (allow/deny/ipsec). Valid values: deny, accept.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AutoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
CgnEif string
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
CgnEim string
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
CgnLogServerGrp string
NP log server group name
CgnResourceQuota float64
resource quota
CgnSessionQuota float64
session quota
Comments string
Comment.
DelayTcpNpuSession string
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
Dstaddr string
Destination address and address group names.
Dstaddr6 string
Destination IPv6 address name and address group names.
DstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
Dstintf string
Outgoing (egress) interface.
FirewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
GlobalLabel string
Label for the policy that appears when the GUI is in Global View mode.
Ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
Label string
Label for the policy that appears when the GUI is in Section View mode.
Name string
Policy name.
Nat string
Enable/disable source NAT. Valid values: disable, enable.
PackagesFirewallHyperscalepolicyId string
an identifier for the resource with format {{policyid}}.
Pkg string
Package.
PkgFolderPath string
Pkg Folder Path.
PolicyOffload string
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
Policyid float64
Policy ID (0 - 15000).
Poolname string
IP Pool names.
Poolname6 string
IPv6 pool names.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
Service string
Service and service group names.
ServiceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
Srcaddr string
Source address and address group names.
Srcaddr6 string
Source IPv6 address name and address group names.
SrcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
Srcintf string
Incoming (ingress) interface.
Status string
Enable or disable this policy. Valid values: disable, enable.
TcpTimeoutPid string
TCP timeout profile ID
TrafficShaper string
Traffic shaper.
TrafficShaperReverse string
Reverse traffic shaper.
UdpTimeoutPid string
UDP timeout profile ID
Uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
cgnEif String
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
cgnEim String
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
cgnLogServerGrp String
NP log server group name
cgnResourceQuota Double
resource quota
cgnSessionQuota Double
session quota
comments String
Comment.
delayTcpNpuSession String
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
dstaddr String
Destination address and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
firewallSessionDirty String
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
label String
Label for the policy that appears when the GUI is in Section View mode.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
packagesFirewallHyperscalepolicyId String
an identifier for the resource with format {{policyid}}.
pkg String
Package.
pkgFolderPath String
Pkg Folder Path.
policyOffload String
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
policyid Double
Policy ID (0 - 15000).
poolname String
IP Pool names.
poolname6 String
IPv6 pool names.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sendDenyPacket String
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr String
Source address and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
status String
Enable or disable this policy. Valid values: disable, enable.
tcpTimeoutPid String
TCP timeout profile ID
trafficShaper String
Traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
udpTimeoutPid String
UDP timeout profile ID
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
action string
Policy action (allow/deny/ipsec). Valid values: deny, accept.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
autoAsicOffload string
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
cgnEif string
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
cgnEim string
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
cgnLogServerGrp string
NP log server group name
cgnResourceQuota number
resource quota
cgnSessionQuota number
session quota
comments string
Comment.
delayTcpNpuSession string
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
dstaddr string
Destination address and address group names.
dstaddr6 string
Destination IPv6 address name and address group names.
dstaddrNegate string
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf string
Outgoing (egress) interface.
firewallSessionDirty string
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
globalLabel string
Label for the policy that appears when the GUI is in Global View mode.
ippool string
Enable to use IP Pools for source NAT. Valid values: disable, enable.
label string
Label for the policy that appears when the GUI is in Section View mode.
name string
Policy name.
nat string
Enable/disable source NAT. Valid values: disable, enable.
packagesFirewallHyperscalepolicyId string
an identifier for the resource with format {{policyid}}.
pkg string
Package.
pkgFolderPath string
Pkg Folder Path.
policyOffload string
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
policyid number
Policy ID (0 - 15000).
poolname string
IP Pool names.
poolname6 string
IPv6 pool names.
scopetype string
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sendDenyPacket string
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service string
Service and service group names.
serviceNegate string
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr string
Source address and address group names.
srcaddr6 string
Source IPv6 address name and address group names.
srcaddrNegate string
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf string
Incoming (ingress) interface.
status string
Enable or disable this policy. Valid values: disable, enable.
tcpTimeoutPid string
TCP timeout profile ID
trafficShaper string
Traffic shaper.
trafficShaperReverse string
Reverse traffic shaper.
udpTimeoutPid string
UDP timeout profile ID
uuid string
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
action str
Policy action (allow/deny/ipsec). Valid values: deny, accept.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
auto_asic_offload str
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
cgn_eif str
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
cgn_eim str
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
cgn_log_server_grp str
NP log server group name
cgn_resource_quota float
resource quota
cgn_session_quota float
session quota
comments str
Comment.
delay_tcp_npu_session str
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
dstaddr str
Destination address and address group names.
dstaddr6 str
Destination IPv6 address name and address group names.
dstaddr_negate str
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf str
Outgoing (egress) interface.
firewall_session_dirty str
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
global_label str
Label for the policy that appears when the GUI is in Global View mode.
ippool str
Enable to use IP Pools for source NAT. Valid values: disable, enable.
label str
Label for the policy that appears when the GUI is in Section View mode.
name str
Policy name.
nat str
Enable/disable source NAT. Valid values: disable, enable.
packages_firewall_hyperscalepolicy_id str
an identifier for the resource with format {{policyid}}.
pkg str
Package.
pkg_folder_path str
Pkg Folder Path.
policy_offload str
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
policyid float
Policy ID (0 - 15000).
poolname str
IP Pool names.
poolname6 str
IPv6 pool names.
scopetype str
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
send_deny_packet str
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service str
Service and service group names.
service_negate str
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr str
Source address and address group names.
srcaddr6 str
Source IPv6 address name and address group names.
srcaddr_negate str
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf str
Incoming (ingress) interface.
status str
Enable or disable this policy. Valid values: disable, enable.
tcp_timeout_pid str
TCP timeout profile ID
traffic_shaper str
Traffic shaper.
traffic_shaper_reverse str
Reverse traffic shaper.
udp_timeout_pid str
UDP timeout profile ID
uuid str
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
action String
Policy action (allow/deny/ipsec). Valid values: deny, accept.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
autoAsicOffload String
Enable/disable policy traffic ASIC offloading. Valid values: disable, enable.
cgnEif String
Enable/Disable CGN endpoint independent filtering. Valid values: disable, enable.
cgnEim String
Enable/Disable CGN endpoint independent mapping Valid values: disable, enable.
cgnLogServerGrp String
NP log server group name
cgnResourceQuota Number
resource quota
cgnSessionQuota Number
session quota
comments String
Comment.
delayTcpNpuSession String
Enable TCP NPU session delay to guarantee packet order of 3-way handshake. Valid values: disable, enable.
dstaddr String
Destination address and address group names.
dstaddr6 String
Destination IPv6 address name and address group names.
dstaddrNegate String
When enabled dstaddr specifies what the destination address must NOT be. Valid values: disable, enable.
dstintf String
Outgoing (egress) interface.
firewallSessionDirty String
How to handle sessions if the configuration of this firewall policy changes. Valid values: check-all, check-new.
globalLabel String
Label for the policy that appears when the GUI is in Global View mode.
ippool String
Enable to use IP Pools for source NAT. Valid values: disable, enable.
label String
Label for the policy that appears when the GUI is in Section View mode.
name String
Policy name.
nat String
Enable/disable source NAT. Valid values: disable, enable.
packagesFirewallHyperscalepolicyId String
an identifier for the resource with format {{policyid}}.
pkg String
Package.
pkgFolderPath String
Pkg Folder Path.
policyOffload String
Enable/Disable hardware session setup for CGNAT. Valid values: disable, enable.
policyid Number
Policy ID (0 - 15000).
poolname String
IP Pool names.
poolname6 String
IPv6 pool names.
scopetype String
The scope of application of the resource. Valid values: inherit, adom. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sendDenyPacket String
Enable to send a reply when a session is denied or blocked by a firewall policy. Valid values: disable, enable.
service String
Service and service group names.
serviceNegate String
When enabled service specifies what the service must NOT be. Valid values: disable, enable.
srcaddr String
Source address and address group names.
srcaddr6 String
Source IPv6 address name and address group names.
srcaddrNegate String
When enabled srcaddr specifies what the source address must NOT be. Valid values: disable, enable.
srcintf String
Incoming (ingress) interface.
status String
Enable or disable this policy. Valid values: disable, enable.
tcpTimeoutPid String
TCP timeout profile ID
trafficShaper String
Traffic shaper.
trafficShaperReverse String
Reverse traffic shaper.
udpTimeoutPid String
UDP timeout profile ID
uuid String
Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

Import

Packages FirewallHyperscalePolicy can be imported using any of these accepted formats:

Set import_options = [“pkg_folder_path=YOUR_VALUE”, “pkg=YOUR_VALUE”] in the provider section.

$ export “FORTIMANAGER_IMPORT_TABLE”=“true”

$ pulumi import fortimanager:index/packagesFirewallHyperscalepolicy:PackagesFirewallHyperscalepolicy labelname {{policyid}}
Copy

$ unset “FORTIMANAGER_IMPORT_TABLE”

-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortimanager fortinetdev/terraform-provider-fortimanager
License
Notes
This Pulumi package is based on the fortimanager Terraform Provider.
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager