fortios.filter/dns.Profile
Explore with Pulumi AI
Configure DNS domain filter profiles.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as fortios from "@pulumiverse/fortios";
const trname = new fortios.filter.dns.Profile("trname", {
    blockAction: "redirect",
    blockBotnet: "disable",
    domainFilter: {
        domainFilterTable: 0,
    },
    ftgdDns: {
        filters: [
            {
                action: "block",
                category: 26,
                id: 1,
                log: "enable",
            },
            {
                action: "block",
                category: 61,
                id: 2,
                log: "enable",
            },
            {
                action: "block",
                category: 86,
                id: 3,
                log: "enable",
            },
            {
                action: "block",
                category: 88,
                id: 4,
                log: "enable",
            },
        ],
    },
    logAllDomain: "disable",
    redirectPortal: "0.0.0.0",
    safeSearch: "disable",
    sdnsDomainLog: "enable",
    sdnsFtgdErrLog: "enable",
    youtubeRestrict: "strict",
});
import pulumi
import pulumiverse_fortios as fortios
trname = fortios.filter.dns.Profile("trname",
    block_action="redirect",
    block_botnet="disable",
    domain_filter=fortios.filter.dns.ProfileDomainFilterArgs(
        domain_filter_table=0,
    ),
    ftgd_dns=fortios.filter.dns.ProfileFtgdDnsArgs(
        filters=[
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=26,
                id=1,
                log="enable",
            ),
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=61,
                id=2,
                log="enable",
            ),
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=86,
                id=3,
                log="enable",
            ),
            fortios.filter.dns.ProfileFtgdDnsFilterArgs(
                action="block",
                category=88,
                id=4,
                log="enable",
            ),
        ],
    ),
    log_all_domain="disable",
    redirect_portal="0.0.0.0",
    safe_search="disable",
    sdns_domain_log="enable",
    sdns_ftgd_err_log="enable",
    youtube_restrict="strict")
package main
import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-fortios/sdk/go/fortios/filter"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := filter.NewProfile(ctx, "trname", &filter.ProfileArgs{
			BlockAction: pulumi.String("redirect"),
			BlockBotnet: pulumi.String("disable"),
			DomainFilter: &dns.ProfileDomainFilterArgs{
				DomainFilterTable: pulumi.Int(0),
			},
			FtgdDns: &dns.ProfileFtgdDnsArgs{
				Filters: dns.ProfileFtgdDnsFilterArray{
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(26),
						Id:       pulumi.Int(1),
						Log:      pulumi.String("enable"),
					},
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(61),
						Id:       pulumi.Int(2),
						Log:      pulumi.String("enable"),
					},
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(86),
						Id:       pulumi.Int(3),
						Log:      pulumi.String("enable"),
					},
					&dns.ProfileFtgdDnsFilterArgs{
						Action:   pulumi.String("block"),
						Category: pulumi.Int(88),
						Id:       pulumi.Int(4),
						Log:      pulumi.String("enable"),
					},
				},
			},
			LogAllDomain:    pulumi.String("disable"),
			RedirectPortal:  pulumi.String("0.0.0.0"),
			SafeSearch:      pulumi.String("disable"),
			SdnsDomainLog:   pulumi.String("enable"),
			SdnsFtgdErrLog:  pulumi.String("enable"),
			YoutubeRestrict: pulumi.String("strict"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortios = Pulumiverse.Fortios;
return await Deployment.RunAsync(() => 
{
    var trname = new Fortios.Filter.Dns.Profile("trname", new()
    {
        BlockAction = "redirect",
        BlockBotnet = "disable",
        DomainFilter = new Fortios.Filter.Dns.Inputs.ProfileDomainFilterArgs
        {
            DomainFilterTable = 0,
        },
        FtgdDns = new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsArgs
        {
            Filters = new[]
            {
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 26,
                    Id = 1,
                    Log = "enable",
                },
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 61,
                    Id = 2,
                    Log = "enable",
                },
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 86,
                    Id = 3,
                    Log = "enable",
                },
                new Fortios.Filter.Dns.Inputs.ProfileFtgdDnsFilterArgs
                {
                    Action = "block",
                    Category = 88,
                    Id = 4,
                    Log = "enable",
                },
            },
        },
        LogAllDomain = "disable",
        RedirectPortal = "0.0.0.0",
        SafeSearch = "disable",
        SdnsDomainLog = "enable",
        SdnsFtgdErrLog = "enable",
        YoutubeRestrict = "strict",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortios.filter.Profile;
import com.pulumi.fortios.filter.ProfileArgs;
import com.pulumi.fortios.filter.inputs.ProfileDomainFilterArgs;
import com.pulumi.fortios.filter.inputs.ProfileFtgdDnsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var trname = new Profile("trname", ProfileArgs.builder()
            .blockAction("redirect")
            .blockBotnet("disable")
            .domainFilter(ProfileDomainFilterArgs.builder()
                .domainFilterTable(0)
                .build())
            .ftgdDns(ProfileFtgdDnsArgs.builder()
                .filters(                
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(26)
                        .id(1)
                        .log("enable")
                        .build(),
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(61)
                        .id(2)
                        .log("enable")
                        .build(),
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(86)
                        .id(3)
                        .log("enable")
                        .build(),
                    ProfileFtgdDnsFilterArgs.builder()
                        .action("block")
                        .category(88)
                        .id(4)
                        .log("enable")
                        .build())
                .build())
            .logAllDomain("disable")
            .redirectPortal("0.0.0.0")
            .safeSearch("disable")
            .sdnsDomainLog("enable")
            .sdnsFtgdErrLog("enable")
            .youtubeRestrict("strict")
            .build());
    }
}
resources:
  trname:
    type: fortios:filter/dns:Profile
    properties:
      blockAction: redirect
      blockBotnet: disable
      domainFilter:
        domainFilterTable: 0
      ftgdDns:
        filters:
          - action: block
            category: 26
            id: 1
            log: enable
          - action: block
            category: 61
            id: 2
            log: enable
          - action: block
            category: 86
            id: 3
            log: enable
          - action: block
            category: 88
            id: 4
            log: enable
      logAllDomain: disable
      redirectPortal: 0.0.0.0
      safeSearch: disable
      sdnsDomainLog: enable
      sdnsFtgdErrLog: enable
      youtubeRestrict: strict
Create Profile Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Profile(name: string, args?: ProfileArgs, opts?: CustomResourceOptions);@overload
def Profile(resource_name: str,
            args: Optional[ProfileArgs] = None,
            opts: Optional[ResourceOptions] = None)
@overload
def Profile(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            block_action: Optional[str] = None,
            block_botnet: Optional[str] = None,
            comment: Optional[str] = None,
            dns_translations: Optional[Sequence[ProfileDnsTranslationArgs]] = None,
            domain_filter: Optional[ProfileDomainFilterArgs] = None,
            dynamic_sort_subtable: Optional[str] = None,
            external_ip_blocklists: Optional[Sequence[ProfileExternalIpBlocklistArgs]] = None,
            ftgd_dns: Optional[ProfileFtgdDnsArgs] = None,
            get_all_tables: Optional[str] = None,
            log_all_domain: Optional[str] = None,
            name: Optional[str] = None,
            redirect_portal: Optional[str] = None,
            redirect_portal6: Optional[str] = None,
            safe_search: Optional[str] = None,
            sdns_domain_log: Optional[str] = None,
            sdns_ftgd_err_log: Optional[str] = None,
            strip_ech: Optional[str] = None,
            transparent_dns_databases: Optional[Sequence[ProfileTransparentDnsDatabaseArgs]] = None,
            vdomparam: Optional[str] = None,
            youtube_restrict: Optional[str] = None)func NewProfile(ctx *Context, name string, args *ProfileArgs, opts ...ResourceOption) (*Profile, error)public Profile(string name, ProfileArgs? args = null, CustomResourceOptions? opts = null)
public Profile(String name, ProfileArgs args)
public Profile(String name, ProfileArgs args, CustomResourceOptions options)
type: fortios:filter/dns/profile:Profile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ProfileArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ProfileArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ProfileArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ProfileArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ProfileArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Profile Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Profile resource accepts the following input properties:
- BlockAction string
- Action to take for blocked domains.
- BlockBotnet string
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- Comment string
- Comment.
- DnsTranslations List<Pulumiverse.Fortios. Filter. Dns. Inputs. Profile Dns Translation> 
- DNS translation settings. The structure of dns_translationblock is documented below.
- DomainFilter Pulumiverse.Fortios. Filter. Dns. Inputs. Profile Domain Filter 
- Domain filter settings. The structure of domain_filterblock is documented below.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- ExternalIp List<Pulumiverse.Blocklists Fortios. Filter. Dns. Inputs. Profile External Ip Blocklist> 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- FtgdDns Pulumiverse.Fortios. Filter. Dns. Inputs. Profile Ftgd Dns 
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- LogAll stringDomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- Name string
- Profile name.
- RedirectPortal string
- IP address of the SDNS redirect portal.
- RedirectPortal6 string
- IPv6 address of the SDNS redirect portal.
- SafeSearch string
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- SdnsDomain stringLog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- SdnsFtgd stringErr Log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- StripEch string
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- TransparentDns List<Pulumiverse.Databases Fortios. Filter. Dns. Inputs. Profile Transparent Dns Database> 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- YoutubeRestrict string
- Set safe search for YouTube restriction level.
- BlockAction string
- Action to take for blocked domains.
- BlockBotnet string
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- Comment string
- Comment.
- DnsTranslations []ProfileDns Translation Args 
- DNS translation settings. The structure of dns_translationblock is documented below.
- DomainFilter ProfileDomain Filter Args 
- Domain filter settings. The structure of domain_filterblock is documented below.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- ExternalIp []ProfileBlocklists External Ip Blocklist Args 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- FtgdDns ProfileFtgd Dns Args 
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- LogAll stringDomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- Name string
- Profile name.
- RedirectPortal string
- IP address of the SDNS redirect portal.
- RedirectPortal6 string
- IPv6 address of the SDNS redirect portal.
- SafeSearch string
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- SdnsDomain stringLog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- SdnsFtgd stringErr Log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- StripEch string
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- TransparentDns []ProfileDatabases Transparent Dns Database Args 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- YoutubeRestrict string
- Set safe search for YouTube restriction level.
- blockAction String
- Action to take for blocked domains.
- blockBotnet String
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- comment String
- Comment.
- dnsTranslations List<ProfileDns Translation> 
- DNS translation settings. The structure of dns_translationblock is documented below.
- domainFilter ProfileDomain Filter 
- Domain filter settings. The structure of domain_filterblock is documented below.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- externalIp List<ProfileBlocklists External Ip Blocklist> 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- ftgdDns ProfileFtgd Dns 
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- logAll StringDomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- name String
- Profile name.
- redirectPortal String
- IP address of the SDNS redirect portal.
- redirectPortal6 String
- IPv6 address of the SDNS redirect portal.
- safeSearch String
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- sdnsDomain StringLog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- sdnsFtgd StringErr Log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- stripEch String
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- transparentDns List<ProfileDatabases Transparent Dns Database> 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- youtubeRestrict String
- Set safe search for YouTube restriction level.
- blockAction string
- Action to take for blocked domains.
- blockBotnet string
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- comment string
- Comment.
- dnsTranslations ProfileDns Translation[] 
- DNS translation settings. The structure of dns_translationblock is documented below.
- domainFilter ProfileDomain Filter 
- Domain filter settings. The structure of domain_filterblock is documented below.
- dynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- externalIp ProfileBlocklists External Ip Blocklist[] 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- ftgdDns ProfileFtgd Dns 
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- getAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- logAll stringDomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- name string
- Profile name.
- redirectPortal string
- IP address of the SDNS redirect portal.
- redirectPortal6 string
- IPv6 address of the SDNS redirect portal.
- safeSearch string
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- sdnsDomain stringLog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- sdnsFtgd stringErr Log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- stripEch string
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- transparentDns ProfileDatabases Transparent Dns Database[] 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- youtubeRestrict string
- Set safe search for YouTube restriction level.
- block_action str
- Action to take for blocked domains.
- block_botnet str
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- comment str
- Comment.
- dns_translations Sequence[ProfileDns Translation Args] 
- DNS translation settings. The structure of dns_translationblock is documented below.
- domain_filter ProfileDomain Filter Args 
- Domain filter settings. The structure of domain_filterblock is documented below.
- dynamic_sort_ strsubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- external_ip_ Sequence[Profileblocklists External Ip Blocklist Args] 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- ftgd_dns ProfileFtgd Dns Args 
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- get_all_ strtables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- log_all_ strdomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- name str
- Profile name.
- redirect_portal str
- IP address of the SDNS redirect portal.
- redirect_portal6 str
- IPv6 address of the SDNS redirect portal.
- safe_search str
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- sdns_domain_ strlog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- sdns_ftgd_ strerr_ log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- strip_ech str
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- transparent_dns_ Sequence[Profiledatabases Transparent Dns Database Args] 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- youtube_restrict str
- Set safe search for YouTube restriction level.
- blockAction String
- Action to take for blocked domains.
- blockBotnet String
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- comment String
- Comment.
- dnsTranslations List<Property Map>
- DNS translation settings. The structure of dns_translationblock is documented below.
- domainFilter Property Map
- Domain filter settings. The structure of domain_filterblock is documented below.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- externalIp List<Property Map>Blocklists 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- ftgdDns Property Map
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- logAll StringDomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- name String
- Profile name.
- redirectPortal String
- IP address of the SDNS redirect portal.
- redirectPortal6 String
- IPv6 address of the SDNS redirect portal.
- safeSearch String
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- sdnsDomain StringLog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- sdnsFtgd StringErr Log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- stripEch String
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- transparentDns List<Property Map>Databases 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- youtubeRestrict String
- Set safe search for YouTube restriction level.
Outputs
All input properties are implicitly available as output properties. Additionally, the Profile resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Profile Resource
Get an existing Profile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ProfileState, opts?: CustomResourceOptions): Profile@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        block_action: Optional[str] = None,
        block_botnet: Optional[str] = None,
        comment: Optional[str] = None,
        dns_translations: Optional[Sequence[ProfileDnsTranslationArgs]] = None,
        domain_filter: Optional[ProfileDomainFilterArgs] = None,
        dynamic_sort_subtable: Optional[str] = None,
        external_ip_blocklists: Optional[Sequence[ProfileExternalIpBlocklistArgs]] = None,
        ftgd_dns: Optional[ProfileFtgdDnsArgs] = None,
        get_all_tables: Optional[str] = None,
        log_all_domain: Optional[str] = None,
        name: Optional[str] = None,
        redirect_portal: Optional[str] = None,
        redirect_portal6: Optional[str] = None,
        safe_search: Optional[str] = None,
        sdns_domain_log: Optional[str] = None,
        sdns_ftgd_err_log: Optional[str] = None,
        strip_ech: Optional[str] = None,
        transparent_dns_databases: Optional[Sequence[ProfileTransparentDnsDatabaseArgs]] = None,
        vdomparam: Optional[str] = None,
        youtube_restrict: Optional[str] = None) -> Profilefunc GetProfile(ctx *Context, name string, id IDInput, state *ProfileState, opts ...ResourceOption) (*Profile, error)public static Profile Get(string name, Input<string> id, ProfileState? state, CustomResourceOptions? opts = null)public static Profile get(String name, Output<String> id, ProfileState state, CustomResourceOptions options)resources:  _:    type: fortios:filter/dns/profile:Profile    get:      id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- BlockAction string
- Action to take for blocked domains.
- BlockBotnet string
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- Comment string
- Comment.
- DnsTranslations List<Pulumiverse.Fortios. Filter. Dns. Inputs. Profile Dns Translation> 
- DNS translation settings. The structure of dns_translationblock is documented below.
- DomainFilter Pulumiverse.Fortios. Filter. Dns. Inputs. Profile Domain Filter 
- Domain filter settings. The structure of domain_filterblock is documented below.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- ExternalIp List<Pulumiverse.Blocklists Fortios. Filter. Dns. Inputs. Profile External Ip Blocklist> 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- FtgdDns Pulumiverse.Fortios. Filter. Dns. Inputs. Profile Ftgd Dns 
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- LogAll stringDomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- Name string
- Profile name.
- RedirectPortal string
- IP address of the SDNS redirect portal.
- RedirectPortal6 string
- IPv6 address of the SDNS redirect portal.
- SafeSearch string
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- SdnsDomain stringLog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- SdnsFtgd stringErr Log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- StripEch string
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- TransparentDns List<Pulumiverse.Databases Fortios. Filter. Dns. Inputs. Profile Transparent Dns Database> 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- YoutubeRestrict string
- Set safe search for YouTube restriction level.
- BlockAction string
- Action to take for blocked domains.
- BlockBotnet string
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- Comment string
- Comment.
- DnsTranslations []ProfileDns Translation Args 
- DNS translation settings. The structure of dns_translationblock is documented below.
- DomainFilter ProfileDomain Filter Args 
- Domain filter settings. The structure of domain_filterblock is documented below.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- ExternalIp []ProfileBlocklists External Ip Blocklist Args 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- FtgdDns ProfileFtgd Dns Args 
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- LogAll stringDomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- Name string
- Profile name.
- RedirectPortal string
- IP address of the SDNS redirect portal.
- RedirectPortal6 string
- IPv6 address of the SDNS redirect portal.
- SafeSearch string
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- SdnsDomain stringLog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- SdnsFtgd stringErr Log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- StripEch string
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- TransparentDns []ProfileDatabases Transparent Dns Database Args 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- YoutubeRestrict string
- Set safe search for YouTube restriction level.
- blockAction String
- Action to take for blocked domains.
- blockBotnet String
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- comment String
- Comment.
- dnsTranslations List<ProfileDns Translation> 
- DNS translation settings. The structure of dns_translationblock is documented below.
- domainFilter ProfileDomain Filter 
- Domain filter settings. The structure of domain_filterblock is documented below.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- externalIp List<ProfileBlocklists External Ip Blocklist> 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- ftgdDns ProfileFtgd Dns 
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- logAll StringDomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- name String
- Profile name.
- redirectPortal String
- IP address of the SDNS redirect portal.
- redirectPortal6 String
- IPv6 address of the SDNS redirect portal.
- safeSearch String
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- sdnsDomain StringLog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- sdnsFtgd StringErr Log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- stripEch String
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- transparentDns List<ProfileDatabases Transparent Dns Database> 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- youtubeRestrict String
- Set safe search for YouTube restriction level.
- blockAction string
- Action to take for blocked domains.
- blockBotnet string
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- comment string
- Comment.
- dnsTranslations ProfileDns Translation[] 
- DNS translation settings. The structure of dns_translationblock is documented below.
- domainFilter ProfileDomain Filter 
- Domain filter settings. The structure of domain_filterblock is documented below.
- dynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- externalIp ProfileBlocklists External Ip Blocklist[] 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- ftgdDns ProfileFtgd Dns 
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- getAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- logAll stringDomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- name string
- Profile name.
- redirectPortal string
- IP address of the SDNS redirect portal.
- redirectPortal6 string
- IPv6 address of the SDNS redirect portal.
- safeSearch string
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- sdnsDomain stringLog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- sdnsFtgd stringErr Log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- stripEch string
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- transparentDns ProfileDatabases Transparent Dns Database[] 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- youtubeRestrict string
- Set safe search for YouTube restriction level.
- block_action str
- Action to take for blocked domains.
- block_botnet str
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- comment str
- Comment.
- dns_translations Sequence[ProfileDns Translation Args] 
- DNS translation settings. The structure of dns_translationblock is documented below.
- domain_filter ProfileDomain Filter Args 
- Domain filter settings. The structure of domain_filterblock is documented below.
- dynamic_sort_ strsubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- external_ip_ Sequence[Profileblocklists External Ip Blocklist Args] 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- ftgd_dns ProfileFtgd Dns Args 
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- get_all_ strtables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- log_all_ strdomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- name str
- Profile name.
- redirect_portal str
- IP address of the SDNS redirect portal.
- redirect_portal6 str
- IPv6 address of the SDNS redirect portal.
- safe_search str
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- sdns_domain_ strlog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- sdns_ftgd_ strerr_ log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- strip_ech str
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- transparent_dns_ Sequence[Profiledatabases Transparent Dns Database Args] 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- youtube_restrict str
- Set safe search for YouTube restriction level.
- blockAction String
- Action to take for blocked domains.
- blockBotnet String
- Enable/disable blocking botnet C&C DNS lookups. Valid values: disable,enable.
- comment String
- Comment.
- dnsTranslations List<Property Map>
- DNS translation settings. The structure of dns_translationblock is documented below.
- domainFilter Property Map
- Domain filter settings. The structure of domain_filterblock is documented below.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- externalIp List<Property Map>Blocklists 
- One or more external IP block lists. The structure of external_ip_blocklistblock is documented below.
- ftgdDns Property Map
- FortiGuard DNS Filter settings. The structure of ftgd_dnsblock is documented below.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- logAll StringDomain 
- Enable/disable logging of all domains visited (detailed DNS logging). Valid values: enable,disable.
- name String
- Profile name.
- redirectPortal String
- IP address of the SDNS redirect portal.
- redirectPortal6 String
- IPv6 address of the SDNS redirect portal.
- safeSearch String
- Enable/disable Google, Bing, and YouTube safe search. Valid values: disable,enable.
- sdnsDomain StringLog 
- Enable/disable domain filtering and botnet domain logging. Valid values: enable,disable.
- sdnsFtgd StringErr Log 
- Enable/disable FortiGuard SDNS rating error logging. Valid values: enable,disable.
- stripEch String
- Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable,enable.
- transparentDns List<Property Map>Databases 
- Transparent DNS database zones. The structure of transparent_dns_databaseblock is documented below.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- youtubeRestrict String
- Set safe search for YouTube restriction level.
Supporting Types
ProfileDnsTranslation, ProfileDnsTranslationArgs      
- AddrType string
- DNS translation type (IPv4 or IPv6). Valid values: ipv4,ipv6.
- Dst string
- IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
- Dst6 string
- IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
- Id int
- ID.
- Netmask string
- If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
- Prefix int
- If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
- Src string
- IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
- Src6 string
- IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
- Status string
- Enable/disable this DNS translation entry. Valid values: enable,disable.
- AddrType string
- DNS translation type (IPv4 or IPv6). Valid values: ipv4,ipv6.
- Dst string
- IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
- Dst6 string
- IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
- Id int
- ID.
- Netmask string
- If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
- Prefix int
- If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
- Src string
- IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
- Src6 string
- IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
- Status string
- Enable/disable this DNS translation entry. Valid values: enable,disable.
- addrType String
- DNS translation type (IPv4 or IPv6). Valid values: ipv4,ipv6.
- dst String
- IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
- dst6 String
- IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
- id Integer
- ID.
- netmask String
- If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
- prefix Integer
- If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
- src String
- IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
- src6 String
- IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
- status String
- Enable/disable this DNS translation entry. Valid values: enable,disable.
- addrType string
- DNS translation type (IPv4 or IPv6). Valid values: ipv4,ipv6.
- dst string
- IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
- dst6 string
- IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
- id number
- ID.
- netmask string
- If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
- prefix number
- If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
- src string
- IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
- src6 string
- IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
- status string
- Enable/disable this DNS translation entry. Valid values: enable,disable.
- addr_type str
- DNS translation type (IPv4 or IPv6). Valid values: ipv4,ipv6.
- dst str
- IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
- dst6 str
- IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
- id int
- ID.
- netmask str
- If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
- prefix int
- If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
- src str
- IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
- src6 str
- IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
- status str
- Enable/disable this DNS translation entry. Valid values: enable,disable.
- addrType String
- DNS translation type (IPv4 or IPv6). Valid values: ipv4,ipv6.
- dst String
- IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
- dst6 String
- IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
- id Number
- ID.
- netmask String
- If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
- prefix Number
- If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
- src String
- IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
- src6 String
- IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
- status String
- Enable/disable this DNS translation entry. Valid values: enable,disable.
ProfileDomainFilter, ProfileDomainFilterArgs      
- DomainFilter intTable 
- DNS domain filter table ID.
- DomainFilter intTable 
- DNS domain filter table ID.
- domainFilter IntegerTable 
- DNS domain filter table ID.
- domainFilter numberTable 
- DNS domain filter table ID.
- domain_filter_ inttable 
- DNS domain filter table ID.
- domainFilter NumberTable 
- DNS domain filter table ID.
ProfileExternalIpBlocklist, ProfileExternalIpBlocklistArgs        
- Name string
- External domain block list name.
- Name string
- External domain block list name.
- name String
- External domain block list name.
- name string
- External domain block list name.
- name str
- External domain block list name.
- name String
- External domain block list name.
ProfileFtgdDns, ProfileFtgdDnsArgs      
- Filters
List<Pulumiverse.Fortios. Filter. Dns. Inputs. Profile Ftgd Dns Filter> 
- FortiGuard DNS domain filters. The structure of filtersblock is documented below.
- Options string
- FortiGuard DNS filter options. Valid values: error-allow,ftgd-disable.
- Filters
[]ProfileFtgd Dns Filter 
- FortiGuard DNS domain filters. The structure of filtersblock is documented below.
- Options string
- FortiGuard DNS filter options. Valid values: error-allow,ftgd-disable.
- filters
List<ProfileFtgd Dns Filter> 
- FortiGuard DNS domain filters. The structure of filtersblock is documented below.
- options String
- FortiGuard DNS filter options. Valid values: error-allow,ftgd-disable.
- filters
ProfileFtgd Dns Filter[] 
- FortiGuard DNS domain filters. The structure of filtersblock is documented below.
- options string
- FortiGuard DNS filter options. Valid values: error-allow,ftgd-disable.
- filters
Sequence[ProfileFtgd Dns Filter] 
- FortiGuard DNS domain filters. The structure of filtersblock is documented below.
- options str
- FortiGuard DNS filter options. Valid values: error-allow,ftgd-disable.
- filters List<Property Map>
- FortiGuard DNS domain filters. The structure of filtersblock is documented below.
- options String
- FortiGuard DNS filter options. Valid values: error-allow,ftgd-disable.
ProfileFtgdDnsFilter, ProfileFtgdDnsFilterArgs        
ProfileTransparentDnsDatabase, ProfileTransparentDnsDatabaseArgs        
- Name string
- DNS database zone name.
- Name string
- DNS database zone name.
- name String
- DNS database zone name.
- name string
- DNS database zone name.
- name str
- DNS database zone name.
- name String
- DNS database zone name.
Import
Dnsfilter Profile can be imported using any of these accepted formats:
$ pulumi import fortios:filter/dns/profile:Profile labelname {{name}}
If you do not want to import arguments of block:
$ export “FORTIOS_IMPORT_TABLE”=“false”
$ pulumi import fortios:filter/dns/profile:Profile labelname {{name}}
$ unset “FORTIOS_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortios pulumiverse/pulumi-fortios
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the fortiosTerraform Provider.
