fortios.vpn/ssl/web.Portal
Explore with Pulumi AI
Portal.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as fortios from "@pulumiverse/fortios";
const trname = new fortios.vpn.ssl.web.Portal("trname", {
    allowUserAccess: "web ftp smb sftp telnet ssh vnc rdp ping citrix portforward",
    autoConnect: "disable",
    customizeForticlientDownloadUrl: "disable",
    displayBookmark: "enable",
    displayConnectionTools: "enable",
    displayHistory: "enable",
    displayStatus: "enable",
    dnsServer1: "0.0.0.0",
    dnsServer2: "0.0.0.0",
    exclusiveRouting: "disable",
    forticlientDownload: "enable",
    forticlientDownloadMethod: "direct",
    heading: "SSL-VPN Portal",
    hideSsoCredential: "enable",
    hostCheck: "none",
    ipMode: "range",
    ipPools: [{
        name: "SSLVPN_TUNNEL_ADDR1",
    }],
    ipv6DnsServer1: "::",
    ipv6DnsServer2: "::",
    ipv6ExclusiveRouting: "disable",
    ipv6Pools: [{
        name: "SSLVPN_TUNNEL_IPv6_ADDR1",
    }],
    ipv6ServiceRestriction: "disable",
    ipv6SplitTunneling: "enable",
    ipv6TunnelMode: "enable",
    ipv6WinsServer1: "::",
    ipv6WinsServer2: "::",
    keepAlive: "disable",
    limitUserLogins: "disable",
    macAddrAction: "allow",
    macAddrCheck: "disable",
    osCheck: "disable",
    savePassword: "disable",
    serviceRestriction: "disable",
    skipCheckForBrowser: "enable",
    skipCheckForUnsupportedOs: "enable",
    smbNtlmv1Auth: "disable",
    smbv1: "disable",
    splitTunneling: "enable",
    theme: "blue",
    tunnelMode: "enable",
    userBookmark: "enable",
    userGroupBookmark: "enable",
    webMode: "disable",
    winsServer1: "0.0.0.0",
    winsServer2: "0.0.0.0",
});
import pulumi
import pulumiverse_fortios as fortios
trname = fortios.vpn.ssl.web.Portal("trname",
    allow_user_access="web ftp smb sftp telnet ssh vnc rdp ping citrix portforward",
    auto_connect="disable",
    customize_forticlient_download_url="disable",
    display_bookmark="enable",
    display_connection_tools="enable",
    display_history="enable",
    display_status="enable",
    dns_server1="0.0.0.0",
    dns_server2="0.0.0.0",
    exclusive_routing="disable",
    forticlient_download="enable",
    forticlient_download_method="direct",
    heading="SSL-VPN Portal",
    hide_sso_credential="enable",
    host_check="none",
    ip_mode="range",
    ip_pools=[fortios.vpn.ssl.web.PortalIpPoolArgs(
        name="SSLVPN_TUNNEL_ADDR1",
    )],
    ipv6_dns_server1="::",
    ipv6_dns_server2="::",
    ipv6_exclusive_routing="disable",
    ipv6_pools=[fortios.vpn.ssl.web.PortalIpv6PoolArgs(
        name="SSLVPN_TUNNEL_IPv6_ADDR1",
    )],
    ipv6_service_restriction="disable",
    ipv6_split_tunneling="enable",
    ipv6_tunnel_mode="enable",
    ipv6_wins_server1="::",
    ipv6_wins_server2="::",
    keep_alive="disable",
    limit_user_logins="disable",
    mac_addr_action="allow",
    mac_addr_check="disable",
    os_check="disable",
    save_password="disable",
    service_restriction="disable",
    skip_check_for_browser="enable",
    skip_check_for_unsupported_os="enable",
    smb_ntlmv1_auth="disable",
    smbv1="disable",
    split_tunneling="enable",
    theme="blue",
    tunnel_mode="enable",
    user_bookmark="enable",
    user_group_bookmark="enable",
    web_mode="disable",
    wins_server1="0.0.0.0",
    wins_server2="0.0.0.0")
package main
import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-fortios/sdk/go/fortios/vpn"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := vpn.NewPortal(ctx, "trname", &vpn.PortalArgs{
			AllowUserAccess:                 pulumi.String("web ftp smb sftp telnet ssh vnc rdp ping citrix portforward"),
			AutoConnect:                     pulumi.String("disable"),
			CustomizeForticlientDownloadUrl: pulumi.String("disable"),
			DisplayBookmark:                 pulumi.String("enable"),
			DisplayConnectionTools:          pulumi.String("enable"),
			DisplayHistory:                  pulumi.String("enable"),
			DisplayStatus:                   pulumi.String("enable"),
			DnsServer1:                      pulumi.String("0.0.0.0"),
			DnsServer2:                      pulumi.String("0.0.0.0"),
			ExclusiveRouting:                pulumi.String("disable"),
			ForticlientDownload:             pulumi.String("enable"),
			ForticlientDownloadMethod:       pulumi.String("direct"),
			Heading:                         pulumi.String("SSL-VPN Portal"),
			HideSsoCredential:               pulumi.String("enable"),
			HostCheck:                       pulumi.String("none"),
			IpMode:                          pulumi.String("range"),
			IpPools: ssl / web.PortalIpPoolArray{
				&ssl / web.PortalIpPoolArgs{
					Name: pulumi.String("SSLVPN_TUNNEL_ADDR1"),
				},
			},
			Ipv6DnsServer1:       pulumi.String("::"),
			Ipv6DnsServer2:       pulumi.String("::"),
			Ipv6ExclusiveRouting: pulumi.String("disable"),
			Ipv6Pools: ssl / web.PortalIpv6PoolArray{
				&ssl / web.PortalIpv6PoolArgs{
					Name: pulumi.String("SSLVPN_TUNNEL_IPv6_ADDR1"),
				},
			},
			Ipv6ServiceRestriction:    pulumi.String("disable"),
			Ipv6SplitTunneling:        pulumi.String("enable"),
			Ipv6TunnelMode:            pulumi.String("enable"),
			Ipv6WinsServer1:           pulumi.String("::"),
			Ipv6WinsServer2:           pulumi.String("::"),
			KeepAlive:                 pulumi.String("disable"),
			LimitUserLogins:           pulumi.String("disable"),
			MacAddrAction:             pulumi.String("allow"),
			MacAddrCheck:              pulumi.String("disable"),
			OsCheck:                   pulumi.String("disable"),
			SavePassword:              pulumi.String("disable"),
			ServiceRestriction:        pulumi.String("disable"),
			SkipCheckForBrowser:       pulumi.String("enable"),
			SkipCheckForUnsupportedOs: pulumi.String("enable"),
			SmbNtlmv1Auth:             pulumi.String("disable"),
			Smbv1:                     pulumi.String("disable"),
			SplitTunneling:            pulumi.String("enable"),
			Theme:                     pulumi.String("blue"),
			TunnelMode:                pulumi.String("enable"),
			UserBookmark:              pulumi.String("enable"),
			UserGroupBookmark:         pulumi.String("enable"),
			WebMode:                   pulumi.String("disable"),
			WinsServer1:               pulumi.String("0.0.0.0"),
			WinsServer2:               pulumi.String("0.0.0.0"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortios = Pulumiverse.Fortios;
return await Deployment.RunAsync(() => 
{
    var trname = new Fortios.Vpn.Ssl.Web.Portal("trname", new()
    {
        AllowUserAccess = "web ftp smb sftp telnet ssh vnc rdp ping citrix portforward",
        AutoConnect = "disable",
        CustomizeForticlientDownloadUrl = "disable",
        DisplayBookmark = "enable",
        DisplayConnectionTools = "enable",
        DisplayHistory = "enable",
        DisplayStatus = "enable",
        DnsServer1 = "0.0.0.0",
        DnsServer2 = "0.0.0.0",
        ExclusiveRouting = "disable",
        ForticlientDownload = "enable",
        ForticlientDownloadMethod = "direct",
        Heading = "SSL-VPN Portal",
        HideSsoCredential = "enable",
        HostCheck = "none",
        IpMode = "range",
        IpPools = new[]
        {
            new Fortios.Vpn.Ssl.Web.Inputs.PortalIpPoolArgs
            {
                Name = "SSLVPN_TUNNEL_ADDR1",
            },
        },
        Ipv6DnsServer1 = "::",
        Ipv6DnsServer2 = "::",
        Ipv6ExclusiveRouting = "disable",
        Ipv6Pools = new[]
        {
            new Fortios.Vpn.Ssl.Web.Inputs.PortalIpv6PoolArgs
            {
                Name = "SSLVPN_TUNNEL_IPv6_ADDR1",
            },
        },
        Ipv6ServiceRestriction = "disable",
        Ipv6SplitTunneling = "enable",
        Ipv6TunnelMode = "enable",
        Ipv6WinsServer1 = "::",
        Ipv6WinsServer2 = "::",
        KeepAlive = "disable",
        LimitUserLogins = "disable",
        MacAddrAction = "allow",
        MacAddrCheck = "disable",
        OsCheck = "disable",
        SavePassword = "disable",
        ServiceRestriction = "disable",
        SkipCheckForBrowser = "enable",
        SkipCheckForUnsupportedOs = "enable",
        SmbNtlmv1Auth = "disable",
        Smbv1 = "disable",
        SplitTunneling = "enable",
        Theme = "blue",
        TunnelMode = "enable",
        UserBookmark = "enable",
        UserGroupBookmark = "enable",
        WebMode = "disable",
        WinsServer1 = "0.0.0.0",
        WinsServer2 = "0.0.0.0",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortios.vpn.Portal;
import com.pulumi.fortios.vpn.PortalArgs;
import com.pulumi.fortios.vpn.inputs.PortalIpPoolArgs;
import com.pulumi.fortios.vpn.inputs.PortalIpv6PoolArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var trname = new Portal("trname", PortalArgs.builder()
            .allowUserAccess("web ftp smb sftp telnet ssh vnc rdp ping citrix portforward")
            .autoConnect("disable")
            .customizeForticlientDownloadUrl("disable")
            .displayBookmark("enable")
            .displayConnectionTools("enable")
            .displayHistory("enable")
            .displayStatus("enable")
            .dnsServer1("0.0.0.0")
            .dnsServer2("0.0.0.0")
            .exclusiveRouting("disable")
            .forticlientDownload("enable")
            .forticlientDownloadMethod("direct")
            .heading("SSL-VPN Portal")
            .hideSsoCredential("enable")
            .hostCheck("none")
            .ipMode("range")
            .ipPools(PortalIpPoolArgs.builder()
                .name("SSLVPN_TUNNEL_ADDR1")
                .build())
            .ipv6DnsServer1("::")
            .ipv6DnsServer2("::")
            .ipv6ExclusiveRouting("disable")
            .ipv6Pools(PortalIpv6PoolArgs.builder()
                .name("SSLVPN_TUNNEL_IPv6_ADDR1")
                .build())
            .ipv6ServiceRestriction("disable")
            .ipv6SplitTunneling("enable")
            .ipv6TunnelMode("enable")
            .ipv6WinsServer1("::")
            .ipv6WinsServer2("::")
            .keepAlive("disable")
            .limitUserLogins("disable")
            .macAddrAction("allow")
            .macAddrCheck("disable")
            .osCheck("disable")
            .savePassword("disable")
            .serviceRestriction("disable")
            .skipCheckForBrowser("enable")
            .skipCheckForUnsupportedOs("enable")
            .smbNtlmv1Auth("disable")
            .smbv1("disable")
            .splitTunneling("enable")
            .theme("blue")
            .tunnelMode("enable")
            .userBookmark("enable")
            .userGroupBookmark("enable")
            .webMode("disable")
            .winsServer1("0.0.0.0")
            .winsServer2("0.0.0.0")
            .build());
    }
}
resources:
  trname:
    type: fortios:vpn/ssl/web:Portal
    properties:
      allowUserAccess: web ftp smb sftp telnet ssh vnc rdp ping citrix portforward
      autoConnect: disable
      customizeForticlientDownloadUrl: disable
      displayBookmark: enable
      displayConnectionTools: enable
      displayHistory: enable
      displayStatus: enable
      dnsServer1: 0.0.0.0
      dnsServer2: 0.0.0.0
      exclusiveRouting: disable
      forticlientDownload: enable
      forticlientDownloadMethod: direct
      heading: SSL-VPN Portal
      hideSsoCredential: enable
      hostCheck: none
      ipMode: range
      ipPools:
        - name: SSLVPN_TUNNEL_ADDR1
      ipv6DnsServer1: '::'
      ipv6DnsServer2: '::'
      ipv6ExclusiveRouting: disable
      ipv6Pools:
        - name: SSLVPN_TUNNEL_IPv6_ADDR1
      ipv6ServiceRestriction: disable
      ipv6SplitTunneling: enable
      ipv6TunnelMode: enable
      ipv6WinsServer1: '::'
      ipv6WinsServer2: '::'
      keepAlive: disable
      limitUserLogins: disable
      macAddrAction: allow
      macAddrCheck: disable
      osCheck: disable
      savePassword: disable
      serviceRestriction: disable
      skipCheckForBrowser: enable
      skipCheckForUnsupportedOs: enable
      smbNtlmv1Auth: disable
      smbv1: disable
      splitTunneling: enable
      theme: blue
      tunnelMode: enable
      userBookmark: enable
      userGroupBookmark: enable
      webMode: disable
      winsServer1: 0.0.0.0
      winsServer2: 0.0.0.0
Create Portal Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Portal(name: string, args?: PortalArgs, opts?: CustomResourceOptions);@overload
def Portal(resource_name: str,
           args: Optional[PortalArgs] = None,
           opts: Optional[ResourceOptions] = None)
@overload
def Portal(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           allow_user_access: Optional[str] = None,
           auto_connect: Optional[str] = None,
           bookmark_groups: Optional[Sequence[PortalBookmarkGroupArgs]] = None,
           client_src_range: Optional[str] = None,
           clipboard: Optional[str] = None,
           custom_lang: Optional[str] = None,
           customize_forticlient_download_url: Optional[str] = None,
           default_protocol: Optional[str] = None,
           default_window_height: Optional[int] = None,
           default_window_width: Optional[int] = None,
           dhcp6_ra_linkaddr: Optional[str] = None,
           dhcp_ip_overlap: Optional[str] = None,
           dhcp_ra_giaddr: Optional[str] = None,
           display_bookmark: Optional[str] = None,
           display_connection_tools: Optional[str] = None,
           display_history: Optional[str] = None,
           display_status: Optional[str] = None,
           dns_server1: Optional[str] = None,
           dns_server2: Optional[str] = None,
           dns_suffix: Optional[str] = None,
           dynamic_sort_subtable: Optional[str] = None,
           exclusive_routing: Optional[str] = None,
           focus_bookmark: Optional[str] = None,
           forticlient_download: Optional[str] = None,
           forticlient_download_method: Optional[str] = None,
           get_all_tables: Optional[str] = None,
           heading: Optional[str] = None,
           hide_sso_credential: Optional[str] = None,
           host_check: Optional[str] = None,
           host_check_interval: Optional[int] = None,
           host_check_policies: Optional[Sequence[PortalHostCheckPolicyArgs]] = None,
           ip_mode: Optional[str] = None,
           ip_pools: Optional[Sequence[PortalIpPoolArgs]] = None,
           ipv6_dns_server1: Optional[str] = None,
           ipv6_dns_server2: Optional[str] = None,
           ipv6_exclusive_routing: Optional[str] = None,
           ipv6_pools: Optional[Sequence[PortalIpv6PoolArgs]] = None,
           ipv6_service_restriction: Optional[str] = None,
           ipv6_split_tunneling: Optional[str] = None,
           ipv6_split_tunneling_routing_addresses: Optional[Sequence[PortalIpv6SplitTunnelingRoutingAddressArgs]] = None,
           ipv6_split_tunneling_routing_negate: Optional[str] = None,
           ipv6_tunnel_mode: Optional[str] = None,
           ipv6_wins_server1: Optional[str] = None,
           ipv6_wins_server2: Optional[str] = None,
           keep_alive: Optional[str] = None,
           landing_page: Optional[PortalLandingPageArgs] = None,
           landing_page_mode: Optional[str] = None,
           limit_user_logins: Optional[str] = None,
           mac_addr_action: Optional[str] = None,
           mac_addr_check: Optional[str] = None,
           mac_addr_check_rules: Optional[Sequence[PortalMacAddrCheckRuleArgs]] = None,
           macos_forticlient_download_url: Optional[str] = None,
           name: Optional[str] = None,
           os_check: Optional[str] = None,
           os_check_lists: Optional[Sequence[PortalOsCheckListArgs]] = None,
           prefer_ipv6_dns: Optional[str] = None,
           redir_url: Optional[str] = None,
           rewrite_ip_uri_ui: Optional[str] = None,
           save_password: Optional[str] = None,
           service_restriction: Optional[str] = None,
           skip_check_for_browser: Optional[str] = None,
           skip_check_for_unsupported_os: Optional[str] = None,
           smb_max_version: Optional[str] = None,
           smb_min_version: Optional[str] = None,
           smb_ntlmv1_auth: Optional[str] = None,
           smbv1: Optional[str] = None,
           split_dns: Optional[Sequence[PortalSplitDnArgs]] = None,
           split_tunneling: Optional[str] = None,
           split_tunneling_routing_addresses: Optional[Sequence[PortalSplitTunnelingRoutingAddressArgs]] = None,
           split_tunneling_routing_negate: Optional[str] = None,
           theme: Optional[str] = None,
           transform_backward_slashes: Optional[str] = None,
           tunnel_mode: Optional[str] = None,
           use_sdwan: Optional[str] = None,
           user_bookmark: Optional[str] = None,
           user_group_bookmark: Optional[str] = None,
           vdomparam: Optional[str] = None,
           web_mode: Optional[str] = None,
           windows_forticlient_download_url: Optional[str] = None,
           wins_server1: Optional[str] = None,
           wins_server2: Optional[str] = None)func NewPortal(ctx *Context, name string, args *PortalArgs, opts ...ResourceOption) (*Portal, error)public Portal(string name, PortalArgs? args = null, CustomResourceOptions? opts = null)
public Portal(String name, PortalArgs args)
public Portal(String name, PortalArgs args, CustomResourceOptions options)
type: fortios:vpn/ssl/web/portal:Portal
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args PortalArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args PortalArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args PortalArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args PortalArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args PortalArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Portal Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Portal resource accepts the following input properties:
- AllowUser stringAccess 
- Allow user access to SSL-VPN applications.
- AutoConnect string
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- BookmarkGroups List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Bookmark Group> 
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- ClientSrc stringRange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- Clipboard string
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- CustomLang string
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- CustomizeForticlient stringDownload Url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- DefaultProtocol string
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- DefaultWindow intHeight 
- Screen height (range from 0 - 65535, default = 768).
- DefaultWindow intWidth 
- Screen width (range from 0 - 65535, default = 1024).
- Dhcp6RaLinkaddr string
- Relay agent IPv6 link address to use in DHCP6 requests.
- DhcpIp stringOverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- DhcpRa stringGiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- DisplayBookmark string
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- DisplayConnection stringTools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- DisplayHistory string
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- DisplayStatus string
- Enable to display the web portal status widget. Valid values: enable,disable.
- DnsServer1 string
- IPv4 DNS server 1.
- DnsServer2 string
- IPv4 DNS server 2.
- DnsSuffix string
- DNS suffix.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- ExclusiveRouting string
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- FocusBookmark string
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- ForticlientDownload string
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- ForticlientDownload stringMethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Heading string
- Web portal heading message.
- HideSso stringCredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- HostCheck string
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- HostCheck intInterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- HostCheck List<Pulumiverse.Policies Fortios. Vpn. Ssl. Web. Inputs. Portal Host Check Policy> 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- IpMode string
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- IpPools List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Ip Pool> 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- Ipv6DnsServer1 string
- IPv6 DNS server 1.
- Ipv6DnsServer2 string
- IPv6 DNS server 2.
- Ipv6ExclusiveRouting string
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- Ipv6Pools
List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Ipv6Pool> 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- Ipv6ServiceRestriction string
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- Ipv6SplitTunneling string
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- Ipv6SplitTunneling List<Pulumiverse.Routing Addresses Fortios. Vpn. Ssl. Web. Inputs. Portal Ipv6Split Tunneling Routing Address> 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- Ipv6SplitTunneling stringRouting Negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- Ipv6TunnelMode string
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- Ipv6WinsServer1 string
- IPv6 WINS server 1.
- Ipv6WinsServer2 string
- IPv6 WINS server 2.
- KeepAlive string
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- LandingPage Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Landing Page 
- Landing page options. The structure of landing_pageblock is documented below.
- LandingPage stringMode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- LimitUser stringLogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- MacAddr stringAction 
- Client MAC address action. Valid values: allow,deny.
- MacAddr stringCheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- MacAddr List<Pulumiverse.Check Rules Fortios. Vpn. Ssl. Web. Inputs. Portal Mac Addr Check Rule> 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- MacosForticlient stringDownload Url 
- Download URL for Mac FortiClient.
- Name string
- Portal name.
- OsCheck string
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- OsCheck List<Pulumiverse.Lists Fortios. Vpn. Ssl. Web. Inputs. Portal Os Check List> 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- PreferIpv6Dns string
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- RedirUrl string
- Client login redirect URL.
- RewriteIp stringUri Ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- SavePassword string
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- ServiceRestriction string
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- SkipCheck stringFor Browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- SkipCheck stringFor Unsupported Os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- SmbMax stringVersion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- SmbMin stringVersion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- SmbNtlmv1Auth string
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- Smbv1 string
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- SplitDns List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Split Dn> 
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- SplitTunneling string
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- SplitTunneling List<Pulumiverse.Routing Addresses Fortios. Vpn. Ssl. Web. Inputs. Portal Split Tunneling Routing Address> 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- SplitTunneling stringRouting Negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- Theme string
- Web portal color scheme.
- TransformBackward stringSlashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- TunnelMode string
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- UseSdwan string
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- UserBookmark string
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- UserGroup stringBookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- WebMode string
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- WindowsForticlient stringDownload Url 
- Download URL for Windows FortiClient.
- WinsServer1 string
- IPv4 WINS server 1.
- WinsServer2 string
- IPv4 WINS server 1.
- AllowUser stringAccess 
- Allow user access to SSL-VPN applications.
- AutoConnect string
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- BookmarkGroups []PortalBookmark Group Args 
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- ClientSrc stringRange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- Clipboard string
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- CustomLang string
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- CustomizeForticlient stringDownload Url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- DefaultProtocol string
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- DefaultWindow intHeight 
- Screen height (range from 0 - 65535, default = 768).
- DefaultWindow intWidth 
- Screen width (range from 0 - 65535, default = 1024).
- Dhcp6RaLinkaddr string
- Relay agent IPv6 link address to use in DHCP6 requests.
- DhcpIp stringOverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- DhcpRa stringGiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- DisplayBookmark string
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- DisplayConnection stringTools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- DisplayHistory string
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- DisplayStatus string
- Enable to display the web portal status widget. Valid values: enable,disable.
- DnsServer1 string
- IPv4 DNS server 1.
- DnsServer2 string
- IPv4 DNS server 2.
- DnsSuffix string
- DNS suffix.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- ExclusiveRouting string
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- FocusBookmark string
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- ForticlientDownload string
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- ForticlientDownload stringMethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Heading string
- Web portal heading message.
- HideSso stringCredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- HostCheck string
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- HostCheck intInterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- HostCheck []PortalPolicies Host Check Policy Args 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- IpMode string
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- IpPools []PortalIp Pool Args 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- Ipv6DnsServer1 string
- IPv6 DNS server 1.
- Ipv6DnsServer2 string
- IPv6 DNS server 2.
- Ipv6ExclusiveRouting string
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- Ipv6Pools
[]PortalIpv6Pool Args 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- Ipv6ServiceRestriction string
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- Ipv6SplitTunneling string
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- Ipv6SplitTunneling []PortalRouting Addresses Ipv6Split Tunneling Routing Address Args 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- Ipv6SplitTunneling stringRouting Negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- Ipv6TunnelMode string
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- Ipv6WinsServer1 string
- IPv6 WINS server 1.
- Ipv6WinsServer2 string
- IPv6 WINS server 2.
- KeepAlive string
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- LandingPage PortalLanding Page Args 
- Landing page options. The structure of landing_pageblock is documented below.
- LandingPage stringMode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- LimitUser stringLogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- MacAddr stringAction 
- Client MAC address action. Valid values: allow,deny.
- MacAddr stringCheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- MacAddr []PortalCheck Rules Mac Addr Check Rule Args 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- MacosForticlient stringDownload Url 
- Download URL for Mac FortiClient.
- Name string
- Portal name.
- OsCheck string
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- OsCheck []PortalLists Os Check List Args 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- PreferIpv6Dns string
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- RedirUrl string
- Client login redirect URL.
- RewriteIp stringUri Ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- SavePassword string
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- ServiceRestriction string
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- SkipCheck stringFor Browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- SkipCheck stringFor Unsupported Os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- SmbMax stringVersion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- SmbMin stringVersion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- SmbNtlmv1Auth string
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- Smbv1 string
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- SplitDns []PortalSplit Dn Args 
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- SplitTunneling string
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- SplitTunneling []PortalRouting Addresses Split Tunneling Routing Address Args 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- SplitTunneling stringRouting Negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- Theme string
- Web portal color scheme.
- TransformBackward stringSlashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- TunnelMode string
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- UseSdwan string
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- UserBookmark string
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- UserGroup stringBookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- WebMode string
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- WindowsForticlient stringDownload Url 
- Download URL for Windows FortiClient.
- WinsServer1 string
- IPv4 WINS server 1.
- WinsServer2 string
- IPv4 WINS server 1.
- allowUser StringAccess 
- Allow user access to SSL-VPN applications.
- autoConnect String
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- bookmarkGroups List<PortalBookmark Group> 
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- clientSrc StringRange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- clipboard String
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- customLang String
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- customizeForticlient StringDownload Url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- defaultProtocol String
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- defaultWindow IntegerHeight 
- Screen height (range from 0 - 65535, default = 768).
- defaultWindow IntegerWidth 
- Screen width (range from 0 - 65535, default = 1024).
- dhcp6RaLinkaddr String
- Relay agent IPv6 link address to use in DHCP6 requests.
- dhcpIp StringOverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- dhcpRa StringGiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- displayBookmark String
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- displayConnection StringTools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- displayHistory String
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- displayStatus String
- Enable to display the web portal status widget. Valid values: enable,disable.
- dnsServer1 String
- IPv4 DNS server 1.
- dnsServer2 String
- IPv4 DNS server 2.
- dnsSuffix String
- DNS suffix.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- exclusiveRouting String
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- focusBookmark String
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- forticlientDownload String
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- forticlientDownload StringMethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- heading String
- Web portal heading message.
- hideSso StringCredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- hostCheck String
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- hostCheck IntegerInterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- hostCheck List<PortalPolicies Host Check Policy> 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- ipMode String
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- ipPools List<PortalIp Pool> 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- ipv6DnsServer1 String
- IPv6 DNS server 1.
- ipv6DnsServer2 String
- IPv6 DNS server 2.
- ipv6ExclusiveRouting String
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- ipv6Pools
List<PortalIpv6Pool> 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- ipv6ServiceRestriction String
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- ipv6SplitTunneling String
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- ipv6SplitTunneling List<PortalRouting Addresses Ipv6Split Tunneling Routing Address> 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- ipv6SplitTunneling StringRouting Negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- ipv6TunnelMode String
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- ipv6WinsServer1 String
- IPv6 WINS server 1.
- ipv6WinsServer2 String
- IPv6 WINS server 2.
- keepAlive String
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- landingPage PortalLanding Page 
- Landing page options. The structure of landing_pageblock is documented below.
- landingPage StringMode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- limitUser StringLogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- macAddr StringAction 
- Client MAC address action. Valid values: allow,deny.
- macAddr StringCheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- macAddr List<PortalCheck Rules Mac Addr Check Rule> 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- macosForticlient StringDownload Url 
- Download URL for Mac FortiClient.
- name String
- Portal name.
- osCheck String
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- osCheck List<PortalLists Os Check List> 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- preferIpv6Dns String
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- redirUrl String
- Client login redirect URL.
- rewriteIp StringUri Ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- savePassword String
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- serviceRestriction String
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- skipCheck StringFor Browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- skipCheck StringFor Unsupported Os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- smbMax StringVersion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbMin StringVersion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbNtlmv1Auth String
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- smbv1 String
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- splitDns List<PortalSplit Dn> 
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- splitTunneling String
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- splitTunneling List<PortalRouting Addresses Split Tunneling Routing Address> 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- splitTunneling StringRouting Negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- theme String
- Web portal color scheme.
- transformBackward StringSlashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- tunnelMode String
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- useSdwan String
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- userBookmark String
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- userGroup StringBookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- webMode String
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- windowsForticlient StringDownload Url 
- Download URL for Windows FortiClient.
- winsServer1 String
- IPv4 WINS server 1.
- winsServer2 String
- IPv4 WINS server 1.
- allowUser stringAccess 
- Allow user access to SSL-VPN applications.
- autoConnect string
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- bookmarkGroups PortalBookmark Group[] 
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- clientSrc stringRange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- clipboard string
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- customLang string
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- customizeForticlient stringDownload Url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- defaultProtocol string
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- defaultWindow numberHeight 
- Screen height (range from 0 - 65535, default = 768).
- defaultWindow numberWidth 
- Screen width (range from 0 - 65535, default = 1024).
- dhcp6RaLinkaddr string
- Relay agent IPv6 link address to use in DHCP6 requests.
- dhcpIp stringOverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- dhcpRa stringGiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- displayBookmark string
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- displayConnection stringTools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- displayHistory string
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- displayStatus string
- Enable to display the web portal status widget. Valid values: enable,disable.
- dnsServer1 string
- IPv4 DNS server 1.
- dnsServer2 string
- IPv4 DNS server 2.
- dnsSuffix string
- DNS suffix.
- dynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- exclusiveRouting string
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- focusBookmark string
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- forticlientDownload string
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- forticlientDownload stringMethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- getAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- heading string
- Web portal heading message.
- hideSso stringCredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- hostCheck string
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- hostCheck numberInterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- hostCheck PortalPolicies Host Check Policy[] 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- ipMode string
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- ipPools PortalIp Pool[] 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- ipv6DnsServer1 string
- IPv6 DNS server 1.
- ipv6DnsServer2 string
- IPv6 DNS server 2.
- ipv6ExclusiveRouting string
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- ipv6Pools
PortalIpv6Pool[] 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- ipv6ServiceRestriction string
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- ipv6SplitTunneling string
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- ipv6SplitTunneling PortalRouting Addresses Ipv6Split Tunneling Routing Address[] 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- ipv6SplitTunneling stringRouting Negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- ipv6TunnelMode string
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- ipv6WinsServer1 string
- IPv6 WINS server 1.
- ipv6WinsServer2 string
- IPv6 WINS server 2.
- keepAlive string
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- landingPage PortalLanding Page 
- Landing page options. The structure of landing_pageblock is documented below.
- landingPage stringMode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- limitUser stringLogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- macAddr stringAction 
- Client MAC address action. Valid values: allow,deny.
- macAddr stringCheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- macAddr PortalCheck Rules Mac Addr Check Rule[] 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- macosForticlient stringDownload Url 
- Download URL for Mac FortiClient.
- name string
- Portal name.
- osCheck string
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- osCheck PortalLists Os Check List[] 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- preferIpv6Dns string
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- redirUrl string
- Client login redirect URL.
- rewriteIp stringUri Ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- savePassword string
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- serviceRestriction string
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- skipCheck stringFor Browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- skipCheck stringFor Unsupported Os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- smbMax stringVersion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbMin stringVersion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbNtlmv1Auth string
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- smbv1 string
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- splitDns PortalSplit Dn[] 
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- splitTunneling string
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- splitTunneling PortalRouting Addresses Split Tunneling Routing Address[] 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- splitTunneling stringRouting Negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- theme string
- Web portal color scheme.
- transformBackward stringSlashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- tunnelMode string
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- useSdwan string
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- userBookmark string
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- userGroup stringBookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- webMode string
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- windowsForticlient stringDownload Url 
- Download URL for Windows FortiClient.
- winsServer1 string
- IPv4 WINS server 1.
- winsServer2 string
- IPv4 WINS server 1.
- allow_user_ straccess 
- Allow user access to SSL-VPN applications.
- auto_connect str
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- bookmark_groups Sequence[PortalBookmark Group Args] 
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- client_src_ strrange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- clipboard str
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- custom_lang str
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- customize_forticlient_ strdownload_ url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- default_protocol str
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- default_window_ intheight 
- Screen height (range from 0 - 65535, default = 768).
- default_window_ intwidth 
- Screen width (range from 0 - 65535, default = 1024).
- dhcp6_ra_ strlinkaddr 
- Relay agent IPv6 link address to use in DHCP6 requests.
- dhcp_ip_ stroverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- dhcp_ra_ strgiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- display_bookmark str
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- display_connection_ strtools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- display_history str
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- display_status str
- Enable to display the web portal status widget. Valid values: enable,disable.
- dns_server1 str
- IPv4 DNS server 1.
- dns_server2 str
- IPv4 DNS server 2.
- dns_suffix str
- DNS suffix.
- dynamic_sort_ strsubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- exclusive_routing str
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- focus_bookmark str
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- forticlient_download str
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- forticlient_download_ strmethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- get_all_ strtables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- heading str
- Web portal heading message.
- hide_sso_ strcredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- host_check str
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- host_check_ intinterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- host_check_ Sequence[Portalpolicies Host Check Policy Args] 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- ip_mode str
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- ip_pools Sequence[PortalIp Pool Args] 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- ipv6_dns_ strserver1 
- IPv6 DNS server 1.
- ipv6_dns_ strserver2 
- IPv6 DNS server 2.
- ipv6_exclusive_ strrouting 
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- ipv6_pools Sequence[PortalIpv6Pool Args] 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- ipv6_service_ strrestriction 
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- ipv6_split_ strtunneling 
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- ipv6_split_ Sequence[Portaltunneling_ routing_ addresses Ipv6Split Tunneling Routing Address Args] 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- ipv6_split_ strtunneling_ routing_ negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- ipv6_tunnel_ strmode 
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- ipv6_wins_ strserver1 
- IPv6 WINS server 1.
- ipv6_wins_ strserver2 
- IPv6 WINS server 2.
- keep_alive str
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- landing_page PortalLanding Page Args 
- Landing page options. The structure of landing_pageblock is documented below.
- landing_page_ strmode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- limit_user_ strlogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- mac_addr_ straction 
- Client MAC address action. Valid values: allow,deny.
- mac_addr_ strcheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- mac_addr_ Sequence[Portalcheck_ rules Mac Addr Check Rule Args] 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- macos_forticlient_ strdownload_ url 
- Download URL for Mac FortiClient.
- name str
- Portal name.
- os_check str
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- os_check_ Sequence[Portallists Os Check List Args] 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- prefer_ipv6_ strdns 
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- redir_url str
- Client login redirect URL.
- rewrite_ip_ struri_ ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- save_password str
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- service_restriction str
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- skip_check_ strfor_ browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- skip_check_ strfor_ unsupported_ os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- smb_max_ strversion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smb_min_ strversion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smb_ntlmv1_ strauth 
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- smbv1 str
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- split_dns Sequence[PortalSplit Dn Args] 
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- split_tunneling str
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- split_tunneling_ Sequence[Portalrouting_ addresses Split Tunneling Routing Address Args] 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- split_tunneling_ strrouting_ negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- theme str
- Web portal color scheme.
- transform_backward_ strslashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- tunnel_mode str
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- use_sdwan str
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- user_bookmark str
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- user_group_ strbookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- web_mode str
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- windows_forticlient_ strdownload_ url 
- Download URL for Windows FortiClient.
- wins_server1 str
- IPv4 WINS server 1.
- wins_server2 str
- IPv4 WINS server 1.
- allowUser StringAccess 
- Allow user access to SSL-VPN applications.
- autoConnect String
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- bookmarkGroups List<Property Map>
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- clientSrc StringRange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- clipboard String
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- customLang String
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- customizeForticlient StringDownload Url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- defaultProtocol String
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- defaultWindow NumberHeight 
- Screen height (range from 0 - 65535, default = 768).
- defaultWindow NumberWidth 
- Screen width (range from 0 - 65535, default = 1024).
- dhcp6RaLinkaddr String
- Relay agent IPv6 link address to use in DHCP6 requests.
- dhcpIp StringOverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- dhcpRa StringGiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- displayBookmark String
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- displayConnection StringTools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- displayHistory String
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- displayStatus String
- Enable to display the web portal status widget. Valid values: enable,disable.
- dnsServer1 String
- IPv4 DNS server 1.
- dnsServer2 String
- IPv4 DNS server 2.
- dnsSuffix String
- DNS suffix.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- exclusiveRouting String
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- focusBookmark String
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- forticlientDownload String
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- forticlientDownload StringMethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- heading String
- Web portal heading message.
- hideSso StringCredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- hostCheck String
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- hostCheck NumberInterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- hostCheck List<Property Map>Policies 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- ipMode String
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- ipPools List<Property Map>
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- ipv6DnsServer1 String
- IPv6 DNS server 1.
- ipv6DnsServer2 String
- IPv6 DNS server 2.
- ipv6ExclusiveRouting String
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- ipv6Pools List<Property Map>
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- ipv6ServiceRestriction String
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- ipv6SplitTunneling String
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- ipv6SplitTunneling List<Property Map>Routing Addresses 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- ipv6SplitTunneling StringRouting Negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- ipv6TunnelMode String
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- ipv6WinsServer1 String
- IPv6 WINS server 1.
- ipv6WinsServer2 String
- IPv6 WINS server 2.
- keepAlive String
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- landingPage Property Map
- Landing page options. The structure of landing_pageblock is documented below.
- landingPage StringMode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- limitUser StringLogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- macAddr StringAction 
- Client MAC address action. Valid values: allow,deny.
- macAddr StringCheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- macAddr List<Property Map>Check Rules 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- macosForticlient StringDownload Url 
- Download URL for Mac FortiClient.
- name String
- Portal name.
- osCheck String
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- osCheck List<Property Map>Lists 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- preferIpv6Dns String
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- redirUrl String
- Client login redirect URL.
- rewriteIp StringUri Ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- savePassword String
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- serviceRestriction String
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- skipCheck StringFor Browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- skipCheck StringFor Unsupported Os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- smbMax StringVersion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbMin StringVersion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbNtlmv1Auth String
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- smbv1 String
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- splitDns List<Property Map>
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- splitTunneling String
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- splitTunneling List<Property Map>Routing Addresses 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- splitTunneling StringRouting Negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- theme String
- Web portal color scheme.
- transformBackward StringSlashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- tunnelMode String
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- useSdwan String
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- userBookmark String
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- userGroup StringBookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- webMode String
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- windowsForticlient StringDownload Url 
- Download URL for Windows FortiClient.
- winsServer1 String
- IPv4 WINS server 1.
- winsServer2 String
- IPv4 WINS server 1.
Outputs
All input properties are implicitly available as output properties. Additionally, the Portal resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Portal Resource
Get an existing Portal resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: PortalState, opts?: CustomResourceOptions): Portal@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allow_user_access: Optional[str] = None,
        auto_connect: Optional[str] = None,
        bookmark_groups: Optional[Sequence[PortalBookmarkGroupArgs]] = None,
        client_src_range: Optional[str] = None,
        clipboard: Optional[str] = None,
        custom_lang: Optional[str] = None,
        customize_forticlient_download_url: Optional[str] = None,
        default_protocol: Optional[str] = None,
        default_window_height: Optional[int] = None,
        default_window_width: Optional[int] = None,
        dhcp6_ra_linkaddr: Optional[str] = None,
        dhcp_ip_overlap: Optional[str] = None,
        dhcp_ra_giaddr: Optional[str] = None,
        display_bookmark: Optional[str] = None,
        display_connection_tools: Optional[str] = None,
        display_history: Optional[str] = None,
        display_status: Optional[str] = None,
        dns_server1: Optional[str] = None,
        dns_server2: Optional[str] = None,
        dns_suffix: Optional[str] = None,
        dynamic_sort_subtable: Optional[str] = None,
        exclusive_routing: Optional[str] = None,
        focus_bookmark: Optional[str] = None,
        forticlient_download: Optional[str] = None,
        forticlient_download_method: Optional[str] = None,
        get_all_tables: Optional[str] = None,
        heading: Optional[str] = None,
        hide_sso_credential: Optional[str] = None,
        host_check: Optional[str] = None,
        host_check_interval: Optional[int] = None,
        host_check_policies: Optional[Sequence[PortalHostCheckPolicyArgs]] = None,
        ip_mode: Optional[str] = None,
        ip_pools: Optional[Sequence[PortalIpPoolArgs]] = None,
        ipv6_dns_server1: Optional[str] = None,
        ipv6_dns_server2: Optional[str] = None,
        ipv6_exclusive_routing: Optional[str] = None,
        ipv6_pools: Optional[Sequence[PortalIpv6PoolArgs]] = None,
        ipv6_service_restriction: Optional[str] = None,
        ipv6_split_tunneling: Optional[str] = None,
        ipv6_split_tunneling_routing_addresses: Optional[Sequence[PortalIpv6SplitTunnelingRoutingAddressArgs]] = None,
        ipv6_split_tunneling_routing_negate: Optional[str] = None,
        ipv6_tunnel_mode: Optional[str] = None,
        ipv6_wins_server1: Optional[str] = None,
        ipv6_wins_server2: Optional[str] = None,
        keep_alive: Optional[str] = None,
        landing_page: Optional[PortalLandingPageArgs] = None,
        landing_page_mode: Optional[str] = None,
        limit_user_logins: Optional[str] = None,
        mac_addr_action: Optional[str] = None,
        mac_addr_check: Optional[str] = None,
        mac_addr_check_rules: Optional[Sequence[PortalMacAddrCheckRuleArgs]] = None,
        macos_forticlient_download_url: Optional[str] = None,
        name: Optional[str] = None,
        os_check: Optional[str] = None,
        os_check_lists: Optional[Sequence[PortalOsCheckListArgs]] = None,
        prefer_ipv6_dns: Optional[str] = None,
        redir_url: Optional[str] = None,
        rewrite_ip_uri_ui: Optional[str] = None,
        save_password: Optional[str] = None,
        service_restriction: Optional[str] = None,
        skip_check_for_browser: Optional[str] = None,
        skip_check_for_unsupported_os: Optional[str] = None,
        smb_max_version: Optional[str] = None,
        smb_min_version: Optional[str] = None,
        smb_ntlmv1_auth: Optional[str] = None,
        smbv1: Optional[str] = None,
        split_dns: Optional[Sequence[PortalSplitDnArgs]] = None,
        split_tunneling: Optional[str] = None,
        split_tunneling_routing_addresses: Optional[Sequence[PortalSplitTunnelingRoutingAddressArgs]] = None,
        split_tunneling_routing_negate: Optional[str] = None,
        theme: Optional[str] = None,
        transform_backward_slashes: Optional[str] = None,
        tunnel_mode: Optional[str] = None,
        use_sdwan: Optional[str] = None,
        user_bookmark: Optional[str] = None,
        user_group_bookmark: Optional[str] = None,
        vdomparam: Optional[str] = None,
        web_mode: Optional[str] = None,
        windows_forticlient_download_url: Optional[str] = None,
        wins_server1: Optional[str] = None,
        wins_server2: Optional[str] = None) -> Portalfunc GetPortal(ctx *Context, name string, id IDInput, state *PortalState, opts ...ResourceOption) (*Portal, error)public static Portal Get(string name, Input<string> id, PortalState? state, CustomResourceOptions? opts = null)public static Portal get(String name, Output<String> id, PortalState state, CustomResourceOptions options)resources:  _:    type: fortios:vpn/ssl/web/portal:Portal    get:      id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- AllowUser stringAccess 
- Allow user access to SSL-VPN applications.
- AutoConnect string
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- BookmarkGroups List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Bookmark Group> 
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- ClientSrc stringRange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- Clipboard string
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- CustomLang string
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- CustomizeForticlient stringDownload Url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- DefaultProtocol string
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- DefaultWindow intHeight 
- Screen height (range from 0 - 65535, default = 768).
- DefaultWindow intWidth 
- Screen width (range from 0 - 65535, default = 1024).
- Dhcp6RaLinkaddr string
- Relay agent IPv6 link address to use in DHCP6 requests.
- DhcpIp stringOverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- DhcpRa stringGiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- DisplayBookmark string
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- DisplayConnection stringTools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- DisplayHistory string
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- DisplayStatus string
- Enable to display the web portal status widget. Valid values: enable,disable.
- DnsServer1 string
- IPv4 DNS server 1.
- DnsServer2 string
- IPv4 DNS server 2.
- DnsSuffix string
- DNS suffix.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- ExclusiveRouting string
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- FocusBookmark string
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- ForticlientDownload string
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- ForticlientDownload stringMethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Heading string
- Web portal heading message.
- HideSso stringCredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- HostCheck string
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- HostCheck intInterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- HostCheck List<Pulumiverse.Policies Fortios. Vpn. Ssl. Web. Inputs. Portal Host Check Policy> 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- IpMode string
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- IpPools List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Ip Pool> 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- Ipv6DnsServer1 string
- IPv6 DNS server 1.
- Ipv6DnsServer2 string
- IPv6 DNS server 2.
- Ipv6ExclusiveRouting string
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- Ipv6Pools
List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Ipv6Pool> 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- Ipv6ServiceRestriction string
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- Ipv6SplitTunneling string
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- Ipv6SplitTunneling List<Pulumiverse.Routing Addresses Fortios. Vpn. Ssl. Web. Inputs. Portal Ipv6Split Tunneling Routing Address> 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- Ipv6SplitTunneling stringRouting Negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- Ipv6TunnelMode string
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- Ipv6WinsServer1 string
- IPv6 WINS server 1.
- Ipv6WinsServer2 string
- IPv6 WINS server 2.
- KeepAlive string
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- LandingPage Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Landing Page 
- Landing page options. The structure of landing_pageblock is documented below.
- LandingPage stringMode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- LimitUser stringLogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- MacAddr stringAction 
- Client MAC address action. Valid values: allow,deny.
- MacAddr stringCheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- MacAddr List<Pulumiverse.Check Rules Fortios. Vpn. Ssl. Web. Inputs. Portal Mac Addr Check Rule> 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- MacosForticlient stringDownload Url 
- Download URL for Mac FortiClient.
- Name string
- Portal name.
- OsCheck string
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- OsCheck List<Pulumiverse.Lists Fortios. Vpn. Ssl. Web. Inputs. Portal Os Check List> 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- PreferIpv6Dns string
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- RedirUrl string
- Client login redirect URL.
- RewriteIp stringUri Ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- SavePassword string
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- ServiceRestriction string
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- SkipCheck stringFor Browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- SkipCheck stringFor Unsupported Os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- SmbMax stringVersion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- SmbMin stringVersion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- SmbNtlmv1Auth string
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- Smbv1 string
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- SplitDns List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Split Dn> 
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- SplitTunneling string
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- SplitTunneling List<Pulumiverse.Routing Addresses Fortios. Vpn. Ssl. Web. Inputs. Portal Split Tunneling Routing Address> 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- SplitTunneling stringRouting Negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- Theme string
- Web portal color scheme.
- TransformBackward stringSlashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- TunnelMode string
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- UseSdwan string
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- UserBookmark string
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- UserGroup stringBookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- WebMode string
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- WindowsForticlient stringDownload Url 
- Download URL for Windows FortiClient.
- WinsServer1 string
- IPv4 WINS server 1.
- WinsServer2 string
- IPv4 WINS server 1.
- AllowUser stringAccess 
- Allow user access to SSL-VPN applications.
- AutoConnect string
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- BookmarkGroups []PortalBookmark Group Args 
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- ClientSrc stringRange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- Clipboard string
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- CustomLang string
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- CustomizeForticlient stringDownload Url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- DefaultProtocol string
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- DefaultWindow intHeight 
- Screen height (range from 0 - 65535, default = 768).
- DefaultWindow intWidth 
- Screen width (range from 0 - 65535, default = 1024).
- Dhcp6RaLinkaddr string
- Relay agent IPv6 link address to use in DHCP6 requests.
- DhcpIp stringOverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- DhcpRa stringGiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- DisplayBookmark string
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- DisplayConnection stringTools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- DisplayHistory string
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- DisplayStatus string
- Enable to display the web portal status widget. Valid values: enable,disable.
- DnsServer1 string
- IPv4 DNS server 1.
- DnsServer2 string
- IPv4 DNS server 2.
- DnsSuffix string
- DNS suffix.
- DynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- ExclusiveRouting string
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- FocusBookmark string
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- ForticlientDownload string
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- ForticlientDownload stringMethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- GetAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- Heading string
- Web portal heading message.
- HideSso stringCredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- HostCheck string
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- HostCheck intInterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- HostCheck []PortalPolicies Host Check Policy Args 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- IpMode string
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- IpPools []PortalIp Pool Args 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- Ipv6DnsServer1 string
- IPv6 DNS server 1.
- Ipv6DnsServer2 string
- IPv6 DNS server 2.
- Ipv6ExclusiveRouting string
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- Ipv6Pools
[]PortalIpv6Pool Args 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- Ipv6ServiceRestriction string
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- Ipv6SplitTunneling string
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- Ipv6SplitTunneling []PortalRouting Addresses Ipv6Split Tunneling Routing Address Args 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- Ipv6SplitTunneling stringRouting Negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- Ipv6TunnelMode string
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- Ipv6WinsServer1 string
- IPv6 WINS server 1.
- Ipv6WinsServer2 string
- IPv6 WINS server 2.
- KeepAlive string
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- LandingPage PortalLanding Page Args 
- Landing page options. The structure of landing_pageblock is documented below.
- LandingPage stringMode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- LimitUser stringLogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- MacAddr stringAction 
- Client MAC address action. Valid values: allow,deny.
- MacAddr stringCheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- MacAddr []PortalCheck Rules Mac Addr Check Rule Args 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- MacosForticlient stringDownload Url 
- Download URL for Mac FortiClient.
- Name string
- Portal name.
- OsCheck string
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- OsCheck []PortalLists Os Check List Args 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- PreferIpv6Dns string
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- RedirUrl string
- Client login redirect URL.
- RewriteIp stringUri Ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- SavePassword string
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- ServiceRestriction string
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- SkipCheck stringFor Browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- SkipCheck stringFor Unsupported Os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- SmbMax stringVersion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- SmbMin stringVersion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- SmbNtlmv1Auth string
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- Smbv1 string
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- SplitDns []PortalSplit Dn Args 
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- SplitTunneling string
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- SplitTunneling []PortalRouting Addresses Split Tunneling Routing Address Args 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- SplitTunneling stringRouting Negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- Theme string
- Web portal color scheme.
- TransformBackward stringSlashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- TunnelMode string
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- UseSdwan string
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- UserBookmark string
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- UserGroup stringBookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- WebMode string
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- WindowsForticlient stringDownload Url 
- Download URL for Windows FortiClient.
- WinsServer1 string
- IPv4 WINS server 1.
- WinsServer2 string
- IPv4 WINS server 1.
- allowUser StringAccess 
- Allow user access to SSL-VPN applications.
- autoConnect String
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- bookmarkGroups List<PortalBookmark Group> 
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- clientSrc StringRange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- clipboard String
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- customLang String
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- customizeForticlient StringDownload Url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- defaultProtocol String
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- defaultWindow IntegerHeight 
- Screen height (range from 0 - 65535, default = 768).
- defaultWindow IntegerWidth 
- Screen width (range from 0 - 65535, default = 1024).
- dhcp6RaLinkaddr String
- Relay agent IPv6 link address to use in DHCP6 requests.
- dhcpIp StringOverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- dhcpRa StringGiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- displayBookmark String
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- displayConnection StringTools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- displayHistory String
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- displayStatus String
- Enable to display the web portal status widget. Valid values: enable,disable.
- dnsServer1 String
- IPv4 DNS server 1.
- dnsServer2 String
- IPv4 DNS server 2.
- dnsSuffix String
- DNS suffix.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- exclusiveRouting String
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- focusBookmark String
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- forticlientDownload String
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- forticlientDownload StringMethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- heading String
- Web portal heading message.
- hideSso StringCredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- hostCheck String
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- hostCheck IntegerInterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- hostCheck List<PortalPolicies Host Check Policy> 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- ipMode String
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- ipPools List<PortalIp Pool> 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- ipv6DnsServer1 String
- IPv6 DNS server 1.
- ipv6DnsServer2 String
- IPv6 DNS server 2.
- ipv6ExclusiveRouting String
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- ipv6Pools
List<PortalIpv6Pool> 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- ipv6ServiceRestriction String
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- ipv6SplitTunneling String
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- ipv6SplitTunneling List<PortalRouting Addresses Ipv6Split Tunneling Routing Address> 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- ipv6SplitTunneling StringRouting Negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- ipv6TunnelMode String
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- ipv6WinsServer1 String
- IPv6 WINS server 1.
- ipv6WinsServer2 String
- IPv6 WINS server 2.
- keepAlive String
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- landingPage PortalLanding Page 
- Landing page options. The structure of landing_pageblock is documented below.
- landingPage StringMode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- limitUser StringLogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- macAddr StringAction 
- Client MAC address action. Valid values: allow,deny.
- macAddr StringCheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- macAddr List<PortalCheck Rules Mac Addr Check Rule> 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- macosForticlient StringDownload Url 
- Download URL for Mac FortiClient.
- name String
- Portal name.
- osCheck String
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- osCheck List<PortalLists Os Check List> 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- preferIpv6Dns String
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- redirUrl String
- Client login redirect URL.
- rewriteIp StringUri Ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- savePassword String
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- serviceRestriction String
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- skipCheck StringFor Browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- skipCheck StringFor Unsupported Os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- smbMax StringVersion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbMin StringVersion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbNtlmv1Auth String
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- smbv1 String
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- splitDns List<PortalSplit Dn> 
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- splitTunneling String
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- splitTunneling List<PortalRouting Addresses Split Tunneling Routing Address> 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- splitTunneling StringRouting Negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- theme String
- Web portal color scheme.
- transformBackward StringSlashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- tunnelMode String
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- useSdwan String
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- userBookmark String
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- userGroup StringBookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- webMode String
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- windowsForticlient StringDownload Url 
- Download URL for Windows FortiClient.
- winsServer1 String
- IPv4 WINS server 1.
- winsServer2 String
- IPv4 WINS server 1.
- allowUser stringAccess 
- Allow user access to SSL-VPN applications.
- autoConnect string
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- bookmarkGroups PortalBookmark Group[] 
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- clientSrc stringRange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- clipboard string
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- customLang string
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- customizeForticlient stringDownload Url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- defaultProtocol string
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- defaultWindow numberHeight 
- Screen height (range from 0 - 65535, default = 768).
- defaultWindow numberWidth 
- Screen width (range from 0 - 65535, default = 1024).
- dhcp6RaLinkaddr string
- Relay agent IPv6 link address to use in DHCP6 requests.
- dhcpIp stringOverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- dhcpRa stringGiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- displayBookmark string
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- displayConnection stringTools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- displayHistory string
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- displayStatus string
- Enable to display the web portal status widget. Valid values: enable,disable.
- dnsServer1 string
- IPv4 DNS server 1.
- dnsServer2 string
- IPv4 DNS server 2.
- dnsSuffix string
- DNS suffix.
- dynamicSort stringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- exclusiveRouting string
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- focusBookmark string
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- forticlientDownload string
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- forticlientDownload stringMethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- getAll stringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- heading string
- Web portal heading message.
- hideSso stringCredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- hostCheck string
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- hostCheck numberInterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- hostCheck PortalPolicies Host Check Policy[] 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- ipMode string
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- ipPools PortalIp Pool[] 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- ipv6DnsServer1 string
- IPv6 DNS server 1.
- ipv6DnsServer2 string
- IPv6 DNS server 2.
- ipv6ExclusiveRouting string
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- ipv6Pools
PortalIpv6Pool[] 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- ipv6ServiceRestriction string
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- ipv6SplitTunneling string
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- ipv6SplitTunneling PortalRouting Addresses Ipv6Split Tunneling Routing Address[] 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- ipv6SplitTunneling stringRouting Negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- ipv6TunnelMode string
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- ipv6WinsServer1 string
- IPv6 WINS server 1.
- ipv6WinsServer2 string
- IPv6 WINS server 2.
- keepAlive string
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- landingPage PortalLanding Page 
- Landing page options. The structure of landing_pageblock is documented below.
- landingPage stringMode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- limitUser stringLogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- macAddr stringAction 
- Client MAC address action. Valid values: allow,deny.
- macAddr stringCheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- macAddr PortalCheck Rules Mac Addr Check Rule[] 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- macosForticlient stringDownload Url 
- Download URL for Mac FortiClient.
- name string
- Portal name.
- osCheck string
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- osCheck PortalLists Os Check List[] 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- preferIpv6Dns string
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- redirUrl string
- Client login redirect URL.
- rewriteIp stringUri Ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- savePassword string
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- serviceRestriction string
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- skipCheck stringFor Browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- skipCheck stringFor Unsupported Os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- smbMax stringVersion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbMin stringVersion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbNtlmv1Auth string
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- smbv1 string
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- splitDns PortalSplit Dn[] 
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- splitTunneling string
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- splitTunneling PortalRouting Addresses Split Tunneling Routing Address[] 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- splitTunneling stringRouting Negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- theme string
- Web portal color scheme.
- transformBackward stringSlashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- tunnelMode string
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- useSdwan string
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- userBookmark string
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- userGroup stringBookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- webMode string
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- windowsForticlient stringDownload Url 
- Download URL for Windows FortiClient.
- winsServer1 string
- IPv4 WINS server 1.
- winsServer2 string
- IPv4 WINS server 1.
- allow_user_ straccess 
- Allow user access to SSL-VPN applications.
- auto_connect str
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- bookmark_groups Sequence[PortalBookmark Group Args] 
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- client_src_ strrange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- clipboard str
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- custom_lang str
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- customize_forticlient_ strdownload_ url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- default_protocol str
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- default_window_ intheight 
- Screen height (range from 0 - 65535, default = 768).
- default_window_ intwidth 
- Screen width (range from 0 - 65535, default = 1024).
- dhcp6_ra_ strlinkaddr 
- Relay agent IPv6 link address to use in DHCP6 requests.
- dhcp_ip_ stroverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- dhcp_ra_ strgiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- display_bookmark str
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- display_connection_ strtools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- display_history str
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- display_status str
- Enable to display the web portal status widget. Valid values: enable,disable.
- dns_server1 str
- IPv4 DNS server 1.
- dns_server2 str
- IPv4 DNS server 2.
- dns_suffix str
- DNS suffix.
- dynamic_sort_ strsubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- exclusive_routing str
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- focus_bookmark str
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- forticlient_download str
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- forticlient_download_ strmethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- get_all_ strtables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- heading str
- Web portal heading message.
- hide_sso_ strcredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- host_check str
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- host_check_ intinterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- host_check_ Sequence[Portalpolicies Host Check Policy Args] 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- ip_mode str
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- ip_pools Sequence[PortalIp Pool Args] 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- ipv6_dns_ strserver1 
- IPv6 DNS server 1.
- ipv6_dns_ strserver2 
- IPv6 DNS server 2.
- ipv6_exclusive_ strrouting 
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- ipv6_pools Sequence[PortalIpv6Pool Args] 
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- ipv6_service_ strrestriction 
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- ipv6_split_ strtunneling 
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- ipv6_split_ Sequence[Portaltunneling_ routing_ addresses Ipv6Split Tunneling Routing Address Args] 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- ipv6_split_ strtunneling_ routing_ negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- ipv6_tunnel_ strmode 
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- ipv6_wins_ strserver1 
- IPv6 WINS server 1.
- ipv6_wins_ strserver2 
- IPv6 WINS server 2.
- keep_alive str
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- landing_page PortalLanding Page Args 
- Landing page options. The structure of landing_pageblock is documented below.
- landing_page_ strmode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- limit_user_ strlogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- mac_addr_ straction 
- Client MAC address action. Valid values: allow,deny.
- mac_addr_ strcheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- mac_addr_ Sequence[Portalcheck_ rules Mac Addr Check Rule Args] 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- macos_forticlient_ strdownload_ url 
- Download URL for Mac FortiClient.
- name str
- Portal name.
- os_check str
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- os_check_ Sequence[Portallists Os Check List Args] 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- prefer_ipv6_ strdns 
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- redir_url str
- Client login redirect URL.
- rewrite_ip_ struri_ ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- save_password str
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- service_restriction str
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- skip_check_ strfor_ browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- skip_check_ strfor_ unsupported_ os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- smb_max_ strversion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smb_min_ strversion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smb_ntlmv1_ strauth 
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- smbv1 str
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- split_dns Sequence[PortalSplit Dn Args] 
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- split_tunneling str
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- split_tunneling_ Sequence[Portalrouting_ addresses Split Tunneling Routing Address Args] 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- split_tunneling_ strrouting_ negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- theme str
- Web portal color scheme.
- transform_backward_ strslashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- tunnel_mode str
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- use_sdwan str
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- user_bookmark str
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- user_group_ strbookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- web_mode str
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- windows_forticlient_ strdownload_ url 
- Download URL for Windows FortiClient.
- wins_server1 str
- IPv4 WINS server 1.
- wins_server2 str
- IPv4 WINS server 1.
- allowUser StringAccess 
- Allow user access to SSL-VPN applications.
- autoConnect String
- Enable/disable automatic connect by client when system is up. Valid values: enable,disable.
- bookmarkGroups List<Property Map>
- Portal bookmark group. The structure of bookmark_groupblock is documented below.
- clientSrc StringRange 
- Allow client to add source range for the tunnel traffic. Valid values: enable,disable.
- clipboard String
- Enable to support RDP/VPC clipboard functionality. Valid values: enable,disable.
- customLang String
- Change the web portal display language. Overrides config system global set language. You can use config system custom-language and execute system custom-language to add custom language files.
- customizeForticlient StringDownload Url 
- Enable support of customized download URL for FortiClient. Valid values: enable,disable.
- defaultProtocol String
- Application type that is set by default. Valid values: web,ftp,telnet,smb,vnc,rdp,ssh,sftp.
- defaultWindow NumberHeight 
- Screen height (range from 0 - 65535, default = 768).
- defaultWindow NumberWidth 
- Screen width (range from 0 - 65535, default = 1024).
- dhcp6RaLinkaddr String
- Relay agent IPv6 link address to use in DHCP6 requests.
- dhcpIp StringOverlap 
- Configure overlapping DHCP IP allocation assignment. Valid values: use-new,use-old.
- dhcpRa StringGiaddr 
- Relay agent gateway IP address to use in the giaddr field of DHCP requests.
- displayBookmark String
- Enable to display the web portal bookmark widget. Valid values: enable,disable.
- displayConnection StringTools 
- Enable to display the web portal connection tools widget. Valid values: enable,disable.
- displayHistory String
- Enable to display the web portal user login history widget. Valid values: enable,disable.
- displayStatus String
- Enable to display the web portal status widget. Valid values: enable,disable.
- dnsServer1 String
- IPv4 DNS server 1.
- dnsServer2 String
- IPv4 DNS server 2.
- dnsSuffix String
- DNS suffix.
- dynamicSort StringSubtable 
- Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -> [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -> [ a10, a2 ].
- exclusiveRouting String
- Enable/disable all traffic go through tunnel only. Valid values: enable,disable.
- focusBookmark String
- Enable to prioritize the placement of the bookmark section over the quick-connection section in the SSL-VPN application. Valid values: enable,disable.
- forticlientDownload String
- Enable/disable download option for FortiClient. Valid values: enable,disable.
- forticlientDownload StringMethod 
- FortiClient download method. Valid values: direct,ssl-vpn.
- getAll StringTables 
- Get all sub-tables including unconfigured tables. Do not set this variable to true if you configure sub-table in another resource, otherwise, conflicts and overwrite will occur. Options: [ false, true ]. false: Default value, do not get unconfigured tables; true: get all tables including unconfigured tables.
- heading String
- Web portal heading message.
- hideSso StringCredential 
- Enable to prevent SSO credential being sent to client. Valid values: enable,disable.
- hostCheck String
- Type of host checking performed on endpoints. Valid values: none,av,fw,av-fw,custom.
- hostCheck NumberInterval 
- Periodic host check interval. Value of 0 means disabled and host checking only happens when the endpoint connects.
- hostCheck List<Property Map>Policies 
- One or more policies to require the endpoint to have specific security software. The structure of host_check_policyblock is documented below.
- ipMode String
- Method by which users of this SSL-VPN tunnel obtain IP addresses.
- ipPools List<Property Map>
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ip_poolsblock is documented below.
- ipv6DnsServer1 String
- IPv6 DNS server 1.
- ipv6DnsServer2 String
- IPv6 DNS server 2.
- ipv6ExclusiveRouting String
- Enable/disable all IPv6 traffic go through tunnel only. Valid values: enable,disable.
- ipv6Pools List<Property Map>
- IPv4 firewall source address objects reserved for SSL-VPN tunnel mode clients. The structure of ipv6_poolsblock is documented below.
- ipv6ServiceRestriction String
- Enable/disable IPv6 tunnel service restriction. Valid values: enable,disable.
- ipv6SplitTunneling String
- Enable/disable IPv6 split tunneling. Valid values: enable,disable.
- ipv6SplitTunneling List<Property Map>Routing Addresses 
- IPv6 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of ipv6_split_tunneling_routing_addressblock is documented below.
- ipv6SplitTunneling StringRouting Negate 
- Enable to negate IPv6 split tunneling routing address. Valid values: enable,disable.
- ipv6TunnelMode String
- Enable/disable IPv6 SSL-VPN tunnel mode. Valid values: enable,disable.
- ipv6WinsServer1 String
- IPv6 WINS server 1.
- ipv6WinsServer2 String
- IPv6 WINS server 2.
- keepAlive String
- Enable/disable automatic reconnect for FortiClient connections. Valid values: enable,disable.
- landingPage Property Map
- Landing page options. The structure of landing_pageblock is documented below.
- landingPage StringMode 
- Enable/disable SSL-VPN landing page mode. Valid values: enable,disable.
- limitUser StringLogins 
- Enable to limit each user to one SSL-VPN session at a time. Valid values: enable,disable.
- macAddr StringAction 
- Client MAC address action. Valid values: allow,deny.
- macAddr StringCheck 
- Enable/disable MAC address host checking. Valid values: enable,disable.
- macAddr List<Property Map>Check Rules 
- Client MAC address check rule. The structure of mac_addr_check_ruleblock is documented below.
- macosForticlient StringDownload Url 
- Download URL for Mac FortiClient.
- name String
- Portal name.
- osCheck String
- Enable to let the FortiGate decide action based on client OS. Valid values: enable,disable.
- osCheck List<Property Map>Lists 
- SSL VPN OS checks. The structure of os_check_listblock is documented below.
- preferIpv6Dns String
- prefer to query IPv6 dns first if enabled. Valid values: enable,disable.
- redirUrl String
- Client login redirect URL.
- rewriteIp StringUri Ui 
- Rewrite contents for URI contains IP and /ui/ (default = disable). Valid values: enable,disable.
- savePassword String
- Enable/disable FortiClient saving the user's password. Valid values: enable,disable.
- serviceRestriction String
- Enable/disable tunnel service restriction. Valid values: enable,disable.
- skipCheck StringFor Browser 
- Enable to skip host check for browser support. Valid values: enable,disable.
- skipCheck StringFor Unsupported Os 
- Enable to skip host check if client OS does not support it. Valid values: enable,disable.
- smbMax StringVersion 
- SMB maximum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbMin StringVersion 
- SMB minimum client protocol version. Valid values: smbv1,smbv2,smbv3.
- smbNtlmv1Auth String
- Enable support of NTLMv1 for Samba authentication. Valid values: enable,disable.
- smbv1 String
- Enable/disable support of SMBv1 for Samba. Valid values: enable,disable.
- splitDns List<Property Map>
- Split DNS for SSL VPN. The structure of split_dnsblock is documented below.
- splitTunneling String
- Enable/disable IPv4 split tunneling. Valid values: enable,disable.
- splitTunneling List<Property Map>Routing Addresses 
- IPv4 SSL-VPN tunnel mode firewall address objects that override firewall policy destination addresses to control split-tunneling access. The structure of split_tunneling_routing_addressblock is documented below.
- splitTunneling StringRouting Negate 
- Enable to negate split tunneling routing address. Valid values: enable,disable.
- theme String
- Web portal color scheme.
- transformBackward StringSlashes 
- Transform backward slashes to forward slashes in URLs. Valid values: enable,disable.
- tunnelMode String
- Enable/disable IPv4 SSL-VPN tunnel mode. Valid values: enable,disable.
- useSdwan String
- Use SD-WAN rules to get output interface. Valid values: enable,disable.
- userBookmark String
- Enable to allow web portal users to create their own bookmarks. Valid values: enable,disable.
- userGroup StringBookmark 
- Enable to allow web portal users to create bookmarks for all users in the same user group. Valid values: enable,disable.
- vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- webMode String
- Enable/disable SSL VPN web mode. Valid values: enable,disable.
- windowsForticlient StringDownload Url 
- Download URL for Windows FortiClient.
- winsServer1 String
- IPv4 WINS server 1.
- winsServer2 String
- IPv4 WINS server 1.
Supporting Types
PortalBookmarkGroup, PortalBookmarkGroupArgs      
- Bookmarks
List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Bookmark Group Bookmark> 
- Bookmark table. The structure of bookmarksblock is documented below.
- Name string
- Bookmark group name.
- Bookmarks
[]PortalBookmark Group Bookmark 
- Bookmark table. The structure of bookmarksblock is documented below.
- Name string
- Bookmark group name.
- bookmarks
List<PortalBookmark Group Bookmark> 
- Bookmark table. The structure of bookmarksblock is documented below.
- name String
- Bookmark group name.
- bookmarks
PortalBookmark Group Bookmark[] 
- Bookmark table. The structure of bookmarksblock is documented below.
- name string
- Bookmark group name.
- bookmarks
Sequence[PortalBookmark Group Bookmark] 
- Bookmark table. The structure of bookmarksblock is documented below.
- name str
- Bookmark group name.
- bookmarks List<Property Map>
- Bookmark table. The structure of bookmarksblock is documented below.
- name String
- Bookmark group name.
PortalBookmarkGroupBookmark, PortalBookmarkGroupBookmarkArgs        
- AdditionalParams string
- Additional parameters.
- Apptype string
- Application type.
- ColorDepth string
- Color depth per pixel. Valid values: 32,16,8.
- Description string
- Description.
- Domain string
- Login domain.
- Folder string
- Network shared file folder parameter.
- FormDatas List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Bookmark Group Bookmark Form Data> 
- Form data. The structure of form_datablock is documented below.
- Height int
- Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- Host string
- Host name/IP parameter.
- KeyboardLayout string
- Keyboard layout.
- ListeningPort int
- Listening port (0 - 65535).
- LoadBalancing stringInfo 
- The load balancing information or cookie which should be provided to the connection broker.
- LogonPassword string
- Logon password.
- LogonUser string
- Logon user.
- Name string
- Bookmark name.
- Port int
- Remote port.
- PreconnectionBlob string
- An arbitrary string which identifies the RDP source.
- PreconnectionId int
- The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
- RemotePort int
- Remote port (0 - 65535).
- RestrictedAdmin string
- Enable/disable restricted admin mode for RDP. Valid values: enable,disable.
- Security string
- Security mode for RDP connection (default = any). Valid values: rdp,nla,tls,any.
- SendPreconnection stringId 
- Enable/disable sending of preconnection ID. Valid values: enable,disable.
- ServerLayout string
- Server side keyboard layout.
- ShowStatus stringWindow 
- Enable/disable showing of status window. Valid values: enable,disable.
- Sso string
- Single Sign-On. Valid values: disable,static,auto.
- SsoCredential string
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- SsoCredential stringSent Once 
- Single sign-on credentials are only sent once to remote server. Valid values: enable,disable.
- SsoPassword string
- SSO password.
- SsoUsername string
- SSO user name.
- Url string
- URL parameter.
- VncKeyboard stringLayout 
- Keyboard layout. Valid values: default,da,nl,en-uk,en-uk-ext,fi,fr,fr-be,fr-ca-mul,de,de-ch,it,it-142,pt,pt-br-abnt2,no,gd,es,sv,us-intl.
- Width int
- Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- AdditionalParams string
- Additional parameters.
- Apptype string
- Application type.
- ColorDepth string
- Color depth per pixel. Valid values: 32,16,8.
- Description string
- Description.
- Domain string
- Login domain.
- Folder string
- Network shared file folder parameter.
- FormDatas []PortalBookmark Group Bookmark Form Data 
- Form data. The structure of form_datablock is documented below.
- Height int
- Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- Host string
- Host name/IP parameter.
- KeyboardLayout string
- Keyboard layout.
- ListeningPort int
- Listening port (0 - 65535).
- LoadBalancing stringInfo 
- The load balancing information or cookie which should be provided to the connection broker.
- LogonPassword string
- Logon password.
- LogonUser string
- Logon user.
- Name string
- Bookmark name.
- Port int
- Remote port.
- PreconnectionBlob string
- An arbitrary string which identifies the RDP source.
- PreconnectionId int
- The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
- RemotePort int
- Remote port (0 - 65535).
- RestrictedAdmin string
- Enable/disable restricted admin mode for RDP. Valid values: enable,disable.
- Security string
- Security mode for RDP connection (default = any). Valid values: rdp,nla,tls,any.
- SendPreconnection stringId 
- Enable/disable sending of preconnection ID. Valid values: enable,disable.
- ServerLayout string
- Server side keyboard layout.
- ShowStatus stringWindow 
- Enable/disable showing of status window. Valid values: enable,disable.
- Sso string
- Single Sign-On. Valid values: disable,static,auto.
- SsoCredential string
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- SsoCredential stringSent Once 
- Single sign-on credentials are only sent once to remote server. Valid values: enable,disable.
- SsoPassword string
- SSO password.
- SsoUsername string
- SSO user name.
- Url string
- URL parameter.
- VncKeyboard stringLayout 
- Keyboard layout. Valid values: default,da,nl,en-uk,en-uk-ext,fi,fr,fr-be,fr-ca-mul,de,de-ch,it,it-142,pt,pt-br-abnt2,no,gd,es,sv,us-intl.
- Width int
- Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- additionalParams String
- Additional parameters.
- apptype String
- Application type.
- colorDepth String
- Color depth per pixel. Valid values: 32,16,8.
- description String
- Description.
- domain String
- Login domain.
- folder String
- Network shared file folder parameter.
- formDatas List<PortalBookmark Group Bookmark Form Data> 
- Form data. The structure of form_datablock is documented below.
- height Integer
- Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- host String
- Host name/IP parameter.
- keyboardLayout String
- Keyboard layout.
- listeningPort Integer
- Listening port (0 - 65535).
- loadBalancing StringInfo 
- The load balancing information or cookie which should be provided to the connection broker.
- logonPassword String
- Logon password.
- logonUser String
- Logon user.
- name String
- Bookmark name.
- port Integer
- Remote port.
- preconnectionBlob String
- An arbitrary string which identifies the RDP source.
- preconnectionId Integer
- The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
- remotePort Integer
- Remote port (0 - 65535).
- restrictedAdmin String
- Enable/disable restricted admin mode for RDP. Valid values: enable,disable.
- security String
- Security mode for RDP connection (default = any). Valid values: rdp,nla,tls,any.
- sendPreconnection StringId 
- Enable/disable sending of preconnection ID. Valid values: enable,disable.
- serverLayout String
- Server side keyboard layout.
- showStatus StringWindow 
- Enable/disable showing of status window. Valid values: enable,disable.
- sso String
- Single Sign-On. Valid values: disable,static,auto.
- ssoCredential String
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- ssoCredential StringSent Once 
- Single sign-on credentials are only sent once to remote server. Valid values: enable,disable.
- ssoPassword String
- SSO password.
- ssoUsername String
- SSO user name.
- url String
- URL parameter.
- vncKeyboard StringLayout 
- Keyboard layout. Valid values: default,da,nl,en-uk,en-uk-ext,fi,fr,fr-be,fr-ca-mul,de,de-ch,it,it-142,pt,pt-br-abnt2,no,gd,es,sv,us-intl.
- width Integer
- Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- additionalParams string
- Additional parameters.
- apptype string
- Application type.
- colorDepth string
- Color depth per pixel. Valid values: 32,16,8.
- description string
- Description.
- domain string
- Login domain.
- folder string
- Network shared file folder parameter.
- formDatas PortalBookmark Group Bookmark Form Data[] 
- Form data. The structure of form_datablock is documented below.
- height number
- Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- host string
- Host name/IP parameter.
- keyboardLayout string
- Keyboard layout.
- listeningPort number
- Listening port (0 - 65535).
- loadBalancing stringInfo 
- The load balancing information or cookie which should be provided to the connection broker.
- logonPassword string
- Logon password.
- logonUser string
- Logon user.
- name string
- Bookmark name.
- port number
- Remote port.
- preconnectionBlob string
- An arbitrary string which identifies the RDP source.
- preconnectionId number
- The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
- remotePort number
- Remote port (0 - 65535).
- restrictedAdmin string
- Enable/disable restricted admin mode for RDP. Valid values: enable,disable.
- security string
- Security mode for RDP connection (default = any). Valid values: rdp,nla,tls,any.
- sendPreconnection stringId 
- Enable/disable sending of preconnection ID. Valid values: enable,disable.
- serverLayout string
- Server side keyboard layout.
- showStatus stringWindow 
- Enable/disable showing of status window. Valid values: enable,disable.
- sso string
- Single Sign-On. Valid values: disable,static,auto.
- ssoCredential string
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- ssoCredential stringSent Once 
- Single sign-on credentials are only sent once to remote server. Valid values: enable,disable.
- ssoPassword string
- SSO password.
- ssoUsername string
- SSO user name.
- url string
- URL parameter.
- vncKeyboard stringLayout 
- Keyboard layout. Valid values: default,da,nl,en-uk,en-uk-ext,fi,fr,fr-be,fr-ca-mul,de,de-ch,it,it-142,pt,pt-br-abnt2,no,gd,es,sv,us-intl.
- width number
- Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- additional_params str
- Additional parameters.
- apptype str
- Application type.
- color_depth str
- Color depth per pixel. Valid values: 32,16,8.
- description str
- Description.
- domain str
- Login domain.
- folder str
- Network shared file folder parameter.
- form_datas Sequence[PortalBookmark Group Bookmark Form Data] 
- Form data. The structure of form_datablock is documented below.
- height int
- Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- host str
- Host name/IP parameter.
- keyboard_layout str
- Keyboard layout.
- listening_port int
- Listening port (0 - 65535).
- load_balancing_ strinfo 
- The load balancing information or cookie which should be provided to the connection broker.
- logon_password str
- Logon password.
- logon_user str
- Logon user.
- name str
- Bookmark name.
- port int
- Remote port.
- preconnection_blob str
- An arbitrary string which identifies the RDP source.
- preconnection_id int
- The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
- remote_port int
- Remote port (0 - 65535).
- restricted_admin str
- Enable/disable restricted admin mode for RDP. Valid values: enable,disable.
- security str
- Security mode for RDP connection (default = any). Valid values: rdp,nla,tls,any.
- send_preconnection_ strid 
- Enable/disable sending of preconnection ID. Valid values: enable,disable.
- server_layout str
- Server side keyboard layout.
- show_status_ strwindow 
- Enable/disable showing of status window. Valid values: enable,disable.
- sso str
- Single Sign-On. Valid values: disable,static,auto.
- sso_credential str
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- sso_credential_ strsent_ once 
- Single sign-on credentials are only sent once to remote server. Valid values: enable,disable.
- sso_password str
- SSO password.
- sso_username str
- SSO user name.
- url str
- URL parameter.
- vnc_keyboard_ strlayout 
- Keyboard layout. Valid values: default,da,nl,en-uk,en-uk-ext,fi,fr,fr-be,fr-ca-mul,de,de-ch,it,it-142,pt,pt-br-abnt2,no,gd,es,sv,us-intl.
- width int
- Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- additionalParams String
- Additional parameters.
- apptype String
- Application type.
- colorDepth String
- Color depth per pixel. Valid values: 32,16,8.
- description String
- Description.
- domain String
- Login domain.
- folder String
- Network shared file folder parameter.
- formDatas List<Property Map>
- Form data. The structure of form_datablock is documented below.
- height Number
- Screen height. On FortiOS versions 7.0.4-7.0.5: range from 480 - 65535, default = 768. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
- host String
- Host name/IP parameter.
- keyboardLayout String
- Keyboard layout.
- listeningPort Number
- Listening port (0 - 65535).
- loadBalancing StringInfo 
- The load balancing information or cookie which should be provided to the connection broker.
- logonPassword String
- Logon password.
- logonUser String
- Logon user.
- name String
- Bookmark name.
- port Number
- Remote port.
- preconnectionBlob String
- An arbitrary string which identifies the RDP source.
- preconnectionId Number
- The numeric ID of the RDP source. On FortiOS versions 6.2.0-6.4.2, 7.0.0: 0-2147483648. On FortiOS versions 6.4.10-6.4.15, >= 7.0.1: 0-4294967295.
- remotePort Number
- Remote port (0 - 65535).
- restrictedAdmin String
- Enable/disable restricted admin mode for RDP. Valid values: enable,disable.
- security String
- Security mode for RDP connection (default = any). Valid values: rdp,nla,tls,any.
- sendPreconnection StringId 
- Enable/disable sending of preconnection ID. Valid values: enable,disable.
- serverLayout String
- Server side keyboard layout.
- showStatus StringWindow 
- Enable/disable showing of status window. Valid values: enable,disable.
- sso String
- Single Sign-On. Valid values: disable,static,auto.
- ssoCredential String
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- ssoCredential StringSent Once 
- Single sign-on credentials are only sent once to remote server. Valid values: enable,disable.
- ssoPassword String
- SSO password.
- ssoUsername String
- SSO user name.
- url String
- URL parameter.
- vncKeyboard StringLayout 
- Keyboard layout. Valid values: default,da,nl,en-uk,en-uk-ext,fi,fr,fr-be,fr-ca-mul,de,de-ch,it,it-142,pt,pt-br-abnt2,no,gd,es,sv,us-intl.
- width Number
- Screen width. On FortiOS versions 7.0.4-7.0.5: range from 640 - 65535, default = 1024. On FortiOS versions >= 7.0.6: range from 0 - 65535, default = 0.
PortalBookmarkGroupBookmarkFormData, PortalBookmarkGroupBookmarkFormDataArgs            
PortalHostCheckPolicy, PortalHostCheckPolicyArgs        
- Name string
- Host check software list name.
- Name string
- Host check software list name.
- name String
- Host check software list name.
- name string
- Host check software list name.
- name str
- Host check software list name.
- name String
- Host check software list name.
PortalIpPool, PortalIpPoolArgs      
- Name string
- Address name.
- Name string
- Address name.
- name String
- Address name.
- name string
- Address name.
- name str
- Address name.
- name String
- Address name.
PortalIpv6Pool, PortalIpv6PoolArgs    
- Name string
- Portal name.
- Name string
- Portal name.
- name String
- Portal name.
- name string
- Portal name.
- name str
- Portal name.
- name String
- Portal name.
PortalIpv6SplitTunnelingRoutingAddress, PortalIpv6SplitTunnelingRoutingAddressArgs          
- Name string
- Portal name.
- Name string
- Portal name.
- name String
- Portal name.
- name string
- Portal name.
- name str
- Portal name.
- name String
- Portal name.
PortalLandingPage, PortalLandingPageArgs      
- FormDatas List<Pulumiverse.Fortios. Vpn. Ssl. Web. Inputs. Portal Landing Page Form Data> 
- Form data. The structure of form_datablock is documented below.
- LogoutUrl string
- Landing page log out URL.
- Sso string
- Single sign-on. Valid values: disable,static,auto.
- SsoCredential string
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- SsoPassword string
- SSO password.
- SsoUsername string
- SSO user name.
- Url string
- Landing page URL.
- FormDatas []PortalLanding Page Form Data 
- Form data. The structure of form_datablock is documented below.
- LogoutUrl string
- Landing page log out URL.
- Sso string
- Single sign-on. Valid values: disable,static,auto.
- SsoCredential string
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- SsoPassword string
- SSO password.
- SsoUsername string
- SSO user name.
- Url string
- Landing page URL.
- formDatas List<PortalLanding Page Form Data> 
- Form data. The structure of form_datablock is documented below.
- logoutUrl String
- Landing page log out URL.
- sso String
- Single sign-on. Valid values: disable,static,auto.
- ssoCredential String
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- ssoPassword String
- SSO password.
- ssoUsername String
- SSO user name.
- url String
- Landing page URL.
- formDatas PortalLanding Page Form Data[] 
- Form data. The structure of form_datablock is documented below.
- logoutUrl string
- Landing page log out URL.
- sso string
- Single sign-on. Valid values: disable,static,auto.
- ssoCredential string
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- ssoPassword string
- SSO password.
- ssoUsername string
- SSO user name.
- url string
- Landing page URL.
- form_datas Sequence[PortalLanding Page Form Data] 
- Form data. The structure of form_datablock is documented below.
- logout_url str
- Landing page log out URL.
- sso str
- Single sign-on. Valid values: disable,static,auto.
- sso_credential str
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- sso_password str
- SSO password.
- sso_username str
- SSO user name.
- url str
- Landing page URL.
- formDatas List<Property Map>
- Form data. The structure of form_datablock is documented below.
- logoutUrl String
- Landing page log out URL.
- sso String
- Single sign-on. Valid values: disable,static,auto.
- ssoCredential String
- Single sign-on credentials. Valid values: sslvpn-login,alternative.
- ssoPassword String
- SSO password.
- ssoUsername String
- SSO user name.
- url String
- Landing page URL.
PortalLandingPageFormData, PortalLandingPageFormDataArgs          
PortalMacAddrCheckRule, PortalMacAddrCheckRuleArgs          
- MacAddr List<Pulumiverse.Lists Fortios. Vpn. Ssl. Web. Inputs. Portal Mac Addr Check Rule Mac Addr List> 
- Client MAC address list. The structure of mac_addr_listblock is documented below.
- MacAddr intMask 
- Client MAC address mask.
- Name string
- Client MAC address check rule name.
- MacAddr []PortalLists Mac Addr Check Rule Mac Addr List 
- Client MAC address list. The structure of mac_addr_listblock is documented below.
- MacAddr intMask 
- Client MAC address mask.
- Name string
- Client MAC address check rule name.
- macAddr List<PortalLists Mac Addr Check Rule Mac Addr List> 
- Client MAC address list. The structure of mac_addr_listblock is documented below.
- macAddr IntegerMask 
- Client MAC address mask.
- name String
- Client MAC address check rule name.
- macAddr PortalLists Mac Addr Check Rule Mac Addr List[] 
- Client MAC address list. The structure of mac_addr_listblock is documented below.
- macAddr numberMask 
- Client MAC address mask.
- name string
- Client MAC address check rule name.
- mac_addr_ Sequence[Portallists Mac Addr Check Rule Mac Addr List] 
- Client MAC address list. The structure of mac_addr_listblock is documented below.
- mac_addr_ intmask 
- Client MAC address mask.
- name str
- Client MAC address check rule name.
- macAddr List<Property Map>Lists 
- Client MAC address list. The structure of mac_addr_listblock is documented below.
- macAddr NumberMask 
- Client MAC address mask.
- name String
- Client MAC address check rule name.
PortalMacAddrCheckRuleMacAddrList, PortalMacAddrCheckRuleMacAddrListArgs                
- Addr string
- Client MAC address.
- Addr string
- Client MAC address.
- addr String
- Client MAC address.
- addr string
- Client MAC address.
- addr str
- Client MAC address.
- addr String
- Client MAC address.
PortalOsCheckList, PortalOsCheckListArgs        
- Action string
- OS check options. Valid values: deny,allow,check-up-to-date.
- LatestPatch stringLevel 
- Latest OS patch level.
- Name string
- Name.
- Tolerance int
- OS patch level tolerance.
- Action string
- OS check options. Valid values: deny,allow,check-up-to-date.
- LatestPatch stringLevel 
- Latest OS patch level.
- Name string
- Name.
- Tolerance int
- OS patch level tolerance.
- action String
- OS check options. Valid values: deny,allow,check-up-to-date.
- latestPatch StringLevel 
- Latest OS patch level.
- name String
- Name.
- tolerance Integer
- OS patch level tolerance.
- action string
- OS check options. Valid values: deny,allow,check-up-to-date.
- latestPatch stringLevel 
- Latest OS patch level.
- name string
- Name.
- tolerance number
- OS patch level tolerance.
- action str
- OS check options. Valid values: deny,allow,check-up-to-date.
- latest_patch_ strlevel 
- Latest OS patch level.
- name str
- Name.
- tolerance int
- OS patch level tolerance.
- action String
- OS check options. Valid values: deny,allow,check-up-to-date.
- latestPatch StringLevel 
- Latest OS patch level.
- name String
- Name.
- tolerance Number
- OS patch level tolerance.
PortalSplitDn, PortalSplitDnArgs      
- DnsServer1 string
- DNS server 1.
- DnsServer2 string
- DNS server 2.
- Domains string
- Split DNS domains used for SSL-VPN clients separated by comma.
- Id int
- ID.
- Ipv6DnsServer1 string
- IPv6 DNS server 1.
- Ipv6DnsServer2 string
- IPv6 DNS server 2.
- DnsServer1 string
- DNS server 1.
- DnsServer2 string
- DNS server 2.
- Domains string
- Split DNS domains used for SSL-VPN clients separated by comma.
- Id int
- ID.
- Ipv6DnsServer1 string
- IPv6 DNS server 1.
- Ipv6DnsServer2 string
- IPv6 DNS server 2.
- dnsServer1 String
- DNS server 1.
- dnsServer2 String
- DNS server 2.
- domains String
- Split DNS domains used for SSL-VPN clients separated by comma.
- id Integer
- ID.
- ipv6DnsServer1 String
- IPv6 DNS server 1.
- ipv6DnsServer2 String
- IPv6 DNS server 2.
- dnsServer1 string
- DNS server 1.
- dnsServer2 string
- DNS server 2.
- domains string
- Split DNS domains used for SSL-VPN clients separated by comma.
- id number
- ID.
- ipv6DnsServer1 string
- IPv6 DNS server 1.
- ipv6DnsServer2 string
- IPv6 DNS server 2.
- dns_server1 str
- DNS server 1.
- dns_server2 str
- DNS server 2.
- domains str
- Split DNS domains used for SSL-VPN clients separated by comma.
- id int
- ID.
- ipv6_dns_ strserver1 
- IPv6 DNS server 1.
- ipv6_dns_ strserver2 
- IPv6 DNS server 2.
- dnsServer1 String
- DNS server 1.
- dnsServer2 String
- DNS server 2.
- domains String
- Split DNS domains used for SSL-VPN clients separated by comma.
- id Number
- ID.
- ipv6DnsServer1 String
- IPv6 DNS server 1.
- ipv6DnsServer2 String
- IPv6 DNS server 2.
PortalSplitTunnelingRoutingAddress, PortalSplitTunnelingRoutingAddressArgs          
- Name string
- Address name.
- Name string
- Address name.
- name String
- Address name.
- name string
- Address name.
- name str
- Address name.
- name String
- Address name.
Import
VpnSslWeb Portal can be imported using any of these accepted formats:
$ pulumi import fortios:vpn/ssl/web/portal:Portal labelname {{name}}
If you do not want to import arguments of block:
$ export “FORTIOS_IMPORT_TABLE”=“false”
$ pulumi import fortios:vpn/ssl/web/portal:Portal labelname {{name}}
$ unset “FORTIOS_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortios pulumiverse/pulumi-fortios
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the fortiosTerraform Provider.
