Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. ObjectFirewallProfileprotocoloptionsHttp
fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectFirewallProfileprotocoloptionsHttp

Explore with Pulumi AI

fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

Configure HTTP protocol options.

This resource is a sub resource for variable http of resource fortimanager.ObjectFirewallProfileprotocoloptions. Conflict and overwrite may occur if use both of them.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";

const trnameObjectFirewallProfileprotocoloptions = new fortimanager.ObjectFirewallProfileprotocoloptions("trnameObjectFirewallProfileprotocoloptions", {});
const trnameObjectFirewallProfileprotocoloptionsHttp = new fortimanager.ObjectFirewallProfileprotocoloptionsHttp("trnameObjectFirewallProfileprotocoloptionsHttp", {
    profileProtocolOptions: trnameObjectFirewallProfileprotocoloptions.name,
    addressIpRating: "enable",
    blockPageStatusCode: 499,
    comfortAmount: 200,
}, {
    dependsOn: [trnameObjectFirewallProfileprotocoloptions],
});
Copy
import pulumi
import pulumi_fortimanager as fortimanager

trname_object_firewall_profileprotocoloptions = fortimanager.ObjectFirewallProfileprotocoloptions("trnameObjectFirewallProfileprotocoloptions")
trname_object_firewall_profileprotocoloptions_http = fortimanager.ObjectFirewallProfileprotocoloptionsHttp("trnameObjectFirewallProfileprotocoloptionsHttp",
    profile_protocol_options=trname_object_firewall_profileprotocoloptions.name,
    address_ip_rating="enable",
    block_page_status_code=499,
    comfort_amount=200,
    opts = pulumi.ResourceOptions(depends_on=[trname_object_firewall_profileprotocoloptions]))
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		trnameObjectFirewallProfileprotocoloptions, err := fortimanager.NewObjectFirewallProfileprotocoloptions(ctx, "trnameObjectFirewallProfileprotocoloptions", nil)
		if err != nil {
			return err
		}
		_, err = fortimanager.NewObjectFirewallProfileprotocoloptionsHttp(ctx, "trnameObjectFirewallProfileprotocoloptionsHttp", &fortimanager.ObjectFirewallProfileprotocoloptionsHttpArgs{
			ProfileProtocolOptions: trnameObjectFirewallProfileprotocoloptions.Name,
			AddressIpRating:        pulumi.String("enable"),
			BlockPageStatusCode:    pulumi.Float64(499),
			ComfortAmount:          pulumi.Float64(200),
		}, pulumi.DependsOn([]pulumi.Resource{
			trnameObjectFirewallProfileprotocoloptions,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;

return await Deployment.RunAsync(() => 
{
    var trnameObjectFirewallProfileprotocoloptions = new Fortimanager.ObjectFirewallProfileprotocoloptions("trnameObjectFirewallProfileprotocoloptions");

    var trnameObjectFirewallProfileprotocoloptionsHttp = new Fortimanager.ObjectFirewallProfileprotocoloptionsHttp("trnameObjectFirewallProfileprotocoloptionsHttp", new()
    {
        ProfileProtocolOptions = trnameObjectFirewallProfileprotocoloptions.Name,
        AddressIpRating = "enable",
        BlockPageStatusCode = 499,
        ComfortAmount = 200,
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            trnameObjectFirewallProfileprotocoloptions,
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.ObjectFirewallProfileprotocoloptions;
import com.pulumi.fortimanager.ObjectFirewallProfileprotocoloptionsHttp;
import com.pulumi.fortimanager.ObjectFirewallProfileprotocoloptionsHttpArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trnameObjectFirewallProfileprotocoloptions = new ObjectFirewallProfileprotocoloptions("trnameObjectFirewallProfileprotocoloptions");

        var trnameObjectFirewallProfileprotocoloptionsHttp = new ObjectFirewallProfileprotocoloptionsHttp("trnameObjectFirewallProfileprotocoloptionsHttp", ObjectFirewallProfileprotocoloptionsHttpArgs.builder()
            .profileProtocolOptions(trnameObjectFirewallProfileprotocoloptions.name())
            .addressIpRating("enable")
            .blockPageStatusCode(499)
            .comfortAmount(200)
            .build(), CustomResourceOptions.builder()
                .dependsOn(trnameObjectFirewallProfileprotocoloptions)
                .build());

    }
}
Copy
resources:
  trnameObjectFirewallProfileprotocoloptionsHttp:
    type: fortimanager:ObjectFirewallProfileprotocoloptionsHttp
    properties:
      profileProtocolOptions: ${trnameObjectFirewallProfileprotocoloptions.name}
      addressIpRating: enable
      blockPageStatusCode: 499
      comfortAmount: 200
    options:
      dependsOn:
        - ${trnameObjectFirewallProfileprotocoloptions}
  trnameObjectFirewallProfileprotocoloptions:
    type: fortimanager:ObjectFirewallProfileprotocoloptions
Copy

Create ObjectFirewallProfileprotocoloptionsHttp Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ObjectFirewallProfileprotocoloptionsHttp(name: string, args: ObjectFirewallProfileprotocoloptionsHttpArgs, opts?: CustomResourceOptions);
@overload
def ObjectFirewallProfileprotocoloptionsHttp(resource_name: str,
                                             args: ObjectFirewallProfileprotocoloptionsHttpInitArgs,
                                             opts: Optional[ResourceOptions] = None)

@overload
def ObjectFirewallProfileprotocoloptionsHttp(resource_name: str,
                                             opts: Optional[ResourceOptions] = None,
                                             profile_protocol_options: Optional[str] = None,
                                             proxy_after_tcp_handshake: Optional[str] = None,
                                             retry_count: Optional[float] = None,
                                             comfort_amount: Optional[float] = None,
                                             comfort_interval: Optional[float] = None,
                                             domain_fronting: Optional[str] = None,
                                             fortinet_bar: Optional[str] = None,
                                             fortinet_bar_port: Optional[float] = None,
                                             h2c: Optional[str] = None,
                                             http09: Optional[str] = None,
                                             scan_bzip2: Optional[str] = None,
                                             inspect_all: Optional[str] = None,
                                             object_firewall_profileprotocoloptions_http_id: Optional[str] = None,
                                             options: Optional[Sequence[str]] = None,
                                             oversize_limit: Optional[float] = None,
                                             ports: Optional[Sequence[float]] = None,
                                             post_langs: Optional[Sequence[str]] = None,
                                             adom: Optional[str] = None,
                                             address_ip_rating: Optional[str] = None,
                                             block_page_status_code: Optional[float] = None,
                                             range_block: Optional[str] = None,
                                             http_policy: Optional[str] = None,
                                             scopetype: Optional[str] = None,
                                             ssl_offloaded: Optional[str] = None,
                                             status: Optional[str] = None,
                                             stream_based_uncompressed_limit: Optional[float] = None,
                                             streaming_content_bypass: Optional[str] = None,
                                             strip_x_forwarded_for: Optional[str] = None,
                                             switching_protocols: Optional[str] = None,
                                             tcp_window_maximum: Optional[float] = None,
                                             tcp_window_minimum: Optional[float] = None,
                                             tcp_window_size: Optional[float] = None,
                                             tcp_window_type: Optional[str] = None,
                                             tunnel_non_http: Optional[str] = None,
                                             uncompressed_nest_limit: Optional[float] = None,
                                             uncompressed_oversize_limit: Optional[float] = None,
                                             unknown_content_encoding: Optional[str] = None,
                                             unknown_http_version: Optional[str] = None,
                                             verify_dns_for_policy_matching: Optional[str] = None)
func NewObjectFirewallProfileprotocoloptionsHttp(ctx *Context, name string, args ObjectFirewallProfileprotocoloptionsHttpArgs, opts ...ResourceOption) (*ObjectFirewallProfileprotocoloptionsHttp, error)
public ObjectFirewallProfileprotocoloptionsHttp(string name, ObjectFirewallProfileprotocoloptionsHttpArgs args, CustomResourceOptions? opts = null)
public ObjectFirewallProfileprotocoloptionsHttp(String name, ObjectFirewallProfileprotocoloptionsHttpArgs args)
public ObjectFirewallProfileprotocoloptionsHttp(String name, ObjectFirewallProfileprotocoloptionsHttpArgs args, CustomResourceOptions options)

type: fortimanager:ObjectFirewallProfileprotocoloptionsHttp
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. ObjectFirewallProfileprotocoloptionsHttpArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. ObjectFirewallProfileprotocoloptionsHttpInitArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. ObjectFirewallProfileprotocoloptionsHttpArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. ObjectFirewallProfileprotocoloptionsHttpArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ObjectFirewallProfileprotocoloptionsHttpArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var objectFirewallProfileprotocoloptionsHttpResource = new Fortimanager.ObjectFirewallProfileprotocoloptionsHttp("objectFirewallProfileprotocoloptionsHttpResource", new()
{
    ProfileProtocolOptions = "string",
    ProxyAfterTcpHandshake = "string",
    RetryCount = 0,
    ComfortAmount = 0,
    ComfortInterval = 0,
    DomainFronting = "string",
    FortinetBar = "string",
    FortinetBarPort = 0,
    H2c = "string",
    Http09 = "string",
    ScanBzip2 = "string",
    InspectAll = "string",
    ObjectFirewallProfileprotocoloptionsHttpId = "string",
    Options = new[]
    {
        "string",
    },
    OversizeLimit = 0,
    Ports = new[]
    {
        0,
    },
    PostLangs = new[]
    {
        "string",
    },
    Adom = "string",
    AddressIpRating = "string",
    BlockPageStatusCode = 0,
    RangeBlock = "string",
    HttpPolicy = "string",
    Scopetype = "string",
    SslOffloaded = "string",
    Status = "string",
    StreamBasedUncompressedLimit = 0,
    StreamingContentBypass = "string",
    StripXForwardedFor = "string",
    SwitchingProtocols = "string",
    TcpWindowMaximum = 0,
    TcpWindowMinimum = 0,
    TcpWindowSize = 0,
    TcpWindowType = "string",
    TunnelNonHttp = "string",
    UncompressedNestLimit = 0,
    UncompressedOversizeLimit = 0,
    UnknownContentEncoding = "string",
    UnknownHttpVersion = "string",
    VerifyDnsForPolicyMatching = "string",
});
Copy
example, err := fortimanager.NewObjectFirewallProfileprotocoloptionsHttp(ctx, "objectFirewallProfileprotocoloptionsHttpResource", &fortimanager.ObjectFirewallProfileprotocoloptionsHttpArgs{
ProfileProtocolOptions: pulumi.String("string"),
ProxyAfterTcpHandshake: pulumi.String("string"),
RetryCount: pulumi.Float64(0),
ComfortAmount: pulumi.Float64(0),
ComfortInterval: pulumi.Float64(0),
DomainFronting: pulumi.String("string"),
FortinetBar: pulumi.String("string"),
FortinetBarPort: pulumi.Float64(0),
H2c: pulumi.String("string"),
Http09: pulumi.String("string"),
ScanBzip2: pulumi.String("string"),
InspectAll: pulumi.String("string"),
ObjectFirewallProfileprotocoloptionsHttpId: pulumi.String("string"),
Options: pulumi.StringArray{
pulumi.String("string"),
},
OversizeLimit: pulumi.Float64(0),
Ports: pulumi.Float64Array{
pulumi.Float64(0),
},
PostLangs: pulumi.StringArray{
pulumi.String("string"),
},
Adom: pulumi.String("string"),
AddressIpRating: pulumi.String("string"),
BlockPageStatusCode: pulumi.Float64(0),
RangeBlock: pulumi.String("string"),
HttpPolicy: pulumi.String("string"),
Scopetype: pulumi.String("string"),
SslOffloaded: pulumi.String("string"),
Status: pulumi.String("string"),
StreamBasedUncompressedLimit: pulumi.Float64(0),
StreamingContentBypass: pulumi.String("string"),
StripXForwardedFor: pulumi.String("string"),
SwitchingProtocols: pulumi.String("string"),
TcpWindowMaximum: pulumi.Float64(0),
TcpWindowMinimum: pulumi.Float64(0),
TcpWindowSize: pulumi.Float64(0),
TcpWindowType: pulumi.String("string"),
TunnelNonHttp: pulumi.String("string"),
UncompressedNestLimit: pulumi.Float64(0),
UncompressedOversizeLimit: pulumi.Float64(0),
UnknownContentEncoding: pulumi.String("string"),
UnknownHttpVersion: pulumi.String("string"),
VerifyDnsForPolicyMatching: pulumi.String("string"),
})
Copy
var objectFirewallProfileprotocoloptionsHttpResource = new ObjectFirewallProfileprotocoloptionsHttp("objectFirewallProfileprotocoloptionsHttpResource", ObjectFirewallProfileprotocoloptionsHttpArgs.builder()
    .profileProtocolOptions("string")
    .proxyAfterTcpHandshake("string")
    .retryCount(0)
    .comfortAmount(0)
    .comfortInterval(0)
    .domainFronting("string")
    .fortinetBar("string")
    .fortinetBarPort(0)
    .h2c("string")
    .http09("string")
    .scanBzip2("string")
    .inspectAll("string")
    .objectFirewallProfileprotocoloptionsHttpId("string")
    .options("string")
    .oversizeLimit(0)
    .ports(0)
    .postLangs("string")
    .adom("string")
    .addressIpRating("string")
    .blockPageStatusCode(0)
    .rangeBlock("string")
    .httpPolicy("string")
    .scopetype("string")
    .sslOffloaded("string")
    .status("string")
    .streamBasedUncompressedLimit(0)
    .streamingContentBypass("string")
    .stripXForwardedFor("string")
    .switchingProtocols("string")
    .tcpWindowMaximum(0)
    .tcpWindowMinimum(0)
    .tcpWindowSize(0)
    .tcpWindowType("string")
    .tunnelNonHttp("string")
    .uncompressedNestLimit(0)
    .uncompressedOversizeLimit(0)
    .unknownContentEncoding("string")
    .unknownHttpVersion("string")
    .verifyDnsForPolicyMatching("string")
    .build());
Copy
object_firewall_profileprotocoloptions_http_resource = fortimanager.ObjectFirewallProfileprotocoloptionsHttp("objectFirewallProfileprotocoloptionsHttpResource",
    profile_protocol_options="string",
    proxy_after_tcp_handshake="string",
    retry_count=0,
    comfort_amount=0,
    comfort_interval=0,
    domain_fronting="string",
    fortinet_bar="string",
    fortinet_bar_port=0,
    h2c="string",
    http09="string",
    scan_bzip2="string",
    inspect_all="string",
    object_firewall_profileprotocoloptions_http_id="string",
    options=["string"],
    oversize_limit=0,
    ports=[0],
    post_langs=["string"],
    adom="string",
    address_ip_rating="string",
    block_page_status_code=0,
    range_block="string",
    http_policy="string",
    scopetype="string",
    ssl_offloaded="string",
    status="string",
    stream_based_uncompressed_limit=0,
    streaming_content_bypass="string",
    strip_x_forwarded_for="string",
    switching_protocols="string",
    tcp_window_maximum=0,
    tcp_window_minimum=0,
    tcp_window_size=0,
    tcp_window_type="string",
    tunnel_non_http="string",
    uncompressed_nest_limit=0,
    uncompressed_oversize_limit=0,
    unknown_content_encoding="string",
    unknown_http_version="string",
    verify_dns_for_policy_matching="string")
Copy
const objectFirewallProfileprotocoloptionsHttpResource = new fortimanager.ObjectFirewallProfileprotocoloptionsHttp("objectFirewallProfileprotocoloptionsHttpResource", {
    profileProtocolOptions: "string",
    proxyAfterTcpHandshake: "string",
    retryCount: 0,
    comfortAmount: 0,
    comfortInterval: 0,
    domainFronting: "string",
    fortinetBar: "string",
    fortinetBarPort: 0,
    h2c: "string",
    http09: "string",
    scanBzip2: "string",
    inspectAll: "string",
    objectFirewallProfileprotocoloptionsHttpId: "string",
    options: ["string"],
    oversizeLimit: 0,
    ports: [0],
    postLangs: ["string"],
    adom: "string",
    addressIpRating: "string",
    blockPageStatusCode: 0,
    rangeBlock: "string",
    httpPolicy: "string",
    scopetype: "string",
    sslOffloaded: "string",
    status: "string",
    streamBasedUncompressedLimit: 0,
    streamingContentBypass: "string",
    stripXForwardedFor: "string",
    switchingProtocols: "string",
    tcpWindowMaximum: 0,
    tcpWindowMinimum: 0,
    tcpWindowSize: 0,
    tcpWindowType: "string",
    tunnelNonHttp: "string",
    uncompressedNestLimit: 0,
    uncompressedOversizeLimit: 0,
    unknownContentEncoding: "string",
    unknownHttpVersion: "string",
    verifyDnsForPolicyMatching: "string",
});
Copy
type: fortimanager:ObjectFirewallProfileprotocoloptionsHttp
properties:
    addressIpRating: string
    adom: string
    blockPageStatusCode: 0
    comfortAmount: 0
    comfortInterval: 0
    domainFronting: string
    fortinetBar: string
    fortinetBarPort: 0
    h2c: string
    http09: string
    httpPolicy: string
    inspectAll: string
    objectFirewallProfileprotocoloptionsHttpId: string
    options:
        - string
    oversizeLimit: 0
    ports:
        - 0
    postLangs:
        - string
    profileProtocolOptions: string
    proxyAfterTcpHandshake: string
    rangeBlock: string
    retryCount: 0
    scanBzip2: string
    scopetype: string
    sslOffloaded: string
    status: string
    streamBasedUncompressedLimit: 0
    streamingContentBypass: string
    stripXForwardedFor: string
    switchingProtocols: string
    tcpWindowMaximum: 0
    tcpWindowMinimum: 0
    tcpWindowSize: 0
    tcpWindowType: string
    tunnelNonHttp: string
    uncompressedNestLimit: 0
    uncompressedOversizeLimit: 0
    unknownContentEncoding: string
    unknownHttpVersion: string
    verifyDnsForPolicyMatching: string
Copy

ObjectFirewallProfileprotocoloptionsHttp Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ObjectFirewallProfileprotocoloptionsHttp resource accepts the following input properties:

ProfileProtocolOptions This property is required. string
Profile Protocol Options.
AddressIpRating string
Enable/disable IP based URL rating. Valid values: disable, enable.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
BlockPageStatusCode double
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
ComfortAmount double
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
ComfortInterval double
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
DomainFronting string
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
FortinetBar string
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
FortinetBarPort double
Port for use by Fortinet Bar (1 - 65535, default = 8011).
H2c string
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
Http09 string
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
HttpPolicy string
Enable/disable HTTP policy check. Valid values: disable, enable.
InspectAll string
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
ObjectFirewallProfileprotocoloptionsHttpId string
an identifier for the resource.
Options List<string>
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
OversizeLimit double
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
Ports List<double>
Ports to scan for content (1 - 65535, default = 80).
PostLangs List<string>
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
ProxyAfterTcpHandshake string
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
RangeBlock string
Enable/disable blocking of partial downloads. Valid values: disable, enable.
RetryCount double
Number of attempts to retry HTTP connection (0 - 100, default = 0).
ScanBzip2 string
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SslOffloaded string
SSL decryption and encryption performed by an external device. Valid values: no, yes.
Status string
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
StreamBasedUncompressedLimit double
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
StreamingContentBypass string
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
StripXForwardedFor string
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
SwitchingProtocols string
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
TcpWindowMaximum double
Maximum dynamic TCP window size (default = 8MB).
TcpWindowMinimum double
Minimum dynamic TCP window size (default = 128KB).
TcpWindowSize double
Set TCP static window size (default = 256KB).
TcpWindowType string
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
TunnelNonHttp string
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
UncompressedNestLimit double
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
UncompressedOversizeLimit double
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
UnknownContentEncoding string
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
UnknownHttpVersion string
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
VerifyDnsForPolicyMatching string
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
ProfileProtocolOptions This property is required. string
Profile Protocol Options.
AddressIpRating string
Enable/disable IP based URL rating. Valid values: disable, enable.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
BlockPageStatusCode float64
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
ComfortAmount float64
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
ComfortInterval float64
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
DomainFronting string
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
FortinetBar string
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
FortinetBarPort float64
Port for use by Fortinet Bar (1 - 65535, default = 8011).
H2c string
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
Http09 string
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
HttpPolicy string
Enable/disable HTTP policy check. Valid values: disable, enable.
InspectAll string
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
ObjectFirewallProfileprotocoloptionsHttpId string
an identifier for the resource.
Options []string
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
OversizeLimit float64
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
Ports []float64
Ports to scan for content (1 - 65535, default = 80).
PostLangs []string
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
ProxyAfterTcpHandshake string
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
RangeBlock string
Enable/disable blocking of partial downloads. Valid values: disable, enable.
RetryCount float64
Number of attempts to retry HTTP connection (0 - 100, default = 0).
ScanBzip2 string
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SslOffloaded string
SSL decryption and encryption performed by an external device. Valid values: no, yes.
Status string
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
StreamBasedUncompressedLimit float64
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
StreamingContentBypass string
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
StripXForwardedFor string
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
SwitchingProtocols string
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
TcpWindowMaximum float64
Maximum dynamic TCP window size (default = 8MB).
TcpWindowMinimum float64
Minimum dynamic TCP window size (default = 128KB).
TcpWindowSize float64
Set TCP static window size (default = 256KB).
TcpWindowType string
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
TunnelNonHttp string
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
UncompressedNestLimit float64
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
UncompressedOversizeLimit float64
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
UnknownContentEncoding string
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
UnknownHttpVersion string
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
VerifyDnsForPolicyMatching string
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
profileProtocolOptions This property is required. String
Profile Protocol Options.
addressIpRating String
Enable/disable IP based URL rating. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
blockPageStatusCode Double
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
comfortAmount Double
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
comfortInterval Double
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
domainFronting String
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
fortinetBar String
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
fortinetBarPort Double
Port for use by Fortinet Bar (1 - 65535, default = 8011).
h2c String
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
http09 String
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
httpPolicy String
Enable/disable HTTP policy check. Valid values: disable, enable.
inspectAll String
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
objectFirewallProfileprotocoloptionsHttpId String
an identifier for the resource.
options List<String>
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
oversizeLimit Double
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
ports List<Double>
Ports to scan for content (1 - 65535, default = 80).
postLangs List<String>
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
proxyAfterTcpHandshake String
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
rangeBlock String
Enable/disable blocking of partial downloads. Valid values: disable, enable.
retryCount Double
Number of attempts to retry HTTP connection (0 - 100, default = 0).
scanBzip2 String
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sslOffloaded String
SSL decryption and encryption performed by an external device. Valid values: no, yes.
status String
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
streamBasedUncompressedLimit Double
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
streamingContentBypass String
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
stripXForwardedFor String
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
switchingProtocols String
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
tcpWindowMaximum Double
Maximum dynamic TCP window size (default = 8MB).
tcpWindowMinimum Double
Minimum dynamic TCP window size (default = 128KB).
tcpWindowSize Double
Set TCP static window size (default = 256KB).
tcpWindowType String
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
tunnelNonHttp String
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
uncompressedNestLimit Double
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
uncompressedOversizeLimit Double
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
unknownContentEncoding String
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
unknownHttpVersion String
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
verifyDnsForPolicyMatching String
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
profileProtocolOptions This property is required. string
Profile Protocol Options.
addressIpRating string
Enable/disable IP based URL rating. Valid values: disable, enable.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
blockPageStatusCode number
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
comfortAmount number
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
comfortInterval number
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
domainFronting string
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
fortinetBar string
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
fortinetBarPort number
Port for use by Fortinet Bar (1 - 65535, default = 8011).
h2c string
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
http09 string
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
httpPolicy string
Enable/disable HTTP policy check. Valid values: disable, enable.
inspectAll string
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
objectFirewallProfileprotocoloptionsHttpId string
an identifier for the resource.
options string[]
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
oversizeLimit number
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
ports number[]
Ports to scan for content (1 - 65535, default = 80).
postLangs string[]
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
proxyAfterTcpHandshake string
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
rangeBlock string
Enable/disable blocking of partial downloads. Valid values: disable, enable.
retryCount number
Number of attempts to retry HTTP connection (0 - 100, default = 0).
scanBzip2 string
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sslOffloaded string
SSL decryption and encryption performed by an external device. Valid values: no, yes.
status string
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
streamBasedUncompressedLimit number
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
streamingContentBypass string
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
stripXForwardedFor string
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
switchingProtocols string
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
tcpWindowMaximum number
Maximum dynamic TCP window size (default = 8MB).
tcpWindowMinimum number
Minimum dynamic TCP window size (default = 128KB).
tcpWindowSize number
Set TCP static window size (default = 256KB).
tcpWindowType string
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
tunnelNonHttp string
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
uncompressedNestLimit number
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
uncompressedOversizeLimit number
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
unknownContentEncoding string
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
unknownHttpVersion string
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
verifyDnsForPolicyMatching string
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
profile_protocol_options This property is required. str
Profile Protocol Options.
address_ip_rating str
Enable/disable IP based URL rating. Valid values: disable, enable.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
block_page_status_code float
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
comfort_amount float
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
comfort_interval float
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
domain_fronting str
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
fortinet_bar str
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
fortinet_bar_port float
Port for use by Fortinet Bar (1 - 65535, default = 8011).
h2c str
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
http09 str
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
http_policy str
Enable/disable HTTP policy check. Valid values: disable, enable.
inspect_all str
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
object_firewall_profileprotocoloptions_http_id str
an identifier for the resource.
options Sequence[str]
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
oversize_limit float
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
ports Sequence[float]
Ports to scan for content (1 - 65535, default = 80).
post_langs Sequence[str]
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
proxy_after_tcp_handshake str
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
range_block str
Enable/disable blocking of partial downloads. Valid values: disable, enable.
retry_count float
Number of attempts to retry HTTP connection (0 - 100, default = 0).
scan_bzip2 str
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
scopetype str
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
ssl_offloaded str
SSL decryption and encryption performed by an external device. Valid values: no, yes.
status str
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
stream_based_uncompressed_limit float
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
streaming_content_bypass str
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
strip_x_forwarded_for str
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
switching_protocols str
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
tcp_window_maximum float
Maximum dynamic TCP window size (default = 8MB).
tcp_window_minimum float
Minimum dynamic TCP window size (default = 128KB).
tcp_window_size float
Set TCP static window size (default = 256KB).
tcp_window_type str
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
tunnel_non_http str
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
uncompressed_nest_limit float
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
uncompressed_oversize_limit float
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
unknown_content_encoding str
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
unknown_http_version str
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
verify_dns_for_policy_matching str
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
profileProtocolOptions This property is required. String
Profile Protocol Options.
addressIpRating String
Enable/disable IP based URL rating. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
blockPageStatusCode Number
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
comfortAmount Number
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
comfortInterval Number
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
domainFronting String
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
fortinetBar String
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
fortinetBarPort Number
Port for use by Fortinet Bar (1 - 65535, default = 8011).
h2c String
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
http09 String
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
httpPolicy String
Enable/disable HTTP policy check. Valid values: disable, enable.
inspectAll String
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
objectFirewallProfileprotocoloptionsHttpId String
an identifier for the resource.
options List<String>
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
oversizeLimit Number
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
ports List<Number>
Ports to scan for content (1 - 65535, default = 80).
postLangs List<String>
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
proxyAfterTcpHandshake String
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
rangeBlock String
Enable/disable blocking of partial downloads. Valid values: disable, enable.
retryCount Number
Number of attempts to retry HTTP connection (0 - 100, default = 0).
scanBzip2 String
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sslOffloaded String
SSL decryption and encryption performed by an external device. Valid values: no, yes.
status String
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
streamBasedUncompressedLimit Number
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
streamingContentBypass String
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
stripXForwardedFor String
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
switchingProtocols String
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
tcpWindowMaximum Number
Maximum dynamic TCP window size (default = 8MB).
tcpWindowMinimum Number
Minimum dynamic TCP window size (default = 128KB).
tcpWindowSize Number
Set TCP static window size (default = 256KB).
tcpWindowType String
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
tunnelNonHttp String
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
uncompressedNestLimit Number
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
uncompressedOversizeLimit Number
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
unknownContentEncoding String
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
unknownHttpVersion String
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
verifyDnsForPolicyMatching String
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.

Outputs

All input properties are implicitly available as output properties. Additionally, the ObjectFirewallProfileprotocoloptionsHttp resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing ObjectFirewallProfileprotocoloptionsHttp Resource

Get an existing ObjectFirewallProfileprotocoloptionsHttp resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ObjectFirewallProfileprotocoloptionsHttpState, opts?: CustomResourceOptions): ObjectFirewallProfileprotocoloptionsHttp
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        address_ip_rating: Optional[str] = None,
        adom: Optional[str] = None,
        block_page_status_code: Optional[float] = None,
        comfort_amount: Optional[float] = None,
        comfort_interval: Optional[float] = None,
        domain_fronting: Optional[str] = None,
        fortinet_bar: Optional[str] = None,
        fortinet_bar_port: Optional[float] = None,
        h2c: Optional[str] = None,
        http09: Optional[str] = None,
        http_policy: Optional[str] = None,
        inspect_all: Optional[str] = None,
        object_firewall_profileprotocoloptions_http_id: Optional[str] = None,
        options: Optional[Sequence[str]] = None,
        oversize_limit: Optional[float] = None,
        ports: Optional[Sequence[float]] = None,
        post_langs: Optional[Sequence[str]] = None,
        profile_protocol_options: Optional[str] = None,
        proxy_after_tcp_handshake: Optional[str] = None,
        range_block: Optional[str] = None,
        retry_count: Optional[float] = None,
        scan_bzip2: Optional[str] = None,
        scopetype: Optional[str] = None,
        ssl_offloaded: Optional[str] = None,
        status: Optional[str] = None,
        stream_based_uncompressed_limit: Optional[float] = None,
        streaming_content_bypass: Optional[str] = None,
        strip_x_forwarded_for: Optional[str] = None,
        switching_protocols: Optional[str] = None,
        tcp_window_maximum: Optional[float] = None,
        tcp_window_minimum: Optional[float] = None,
        tcp_window_size: Optional[float] = None,
        tcp_window_type: Optional[str] = None,
        tunnel_non_http: Optional[str] = None,
        uncompressed_nest_limit: Optional[float] = None,
        uncompressed_oversize_limit: Optional[float] = None,
        unknown_content_encoding: Optional[str] = None,
        unknown_http_version: Optional[str] = None,
        verify_dns_for_policy_matching: Optional[str] = None) -> ObjectFirewallProfileprotocoloptionsHttp
func GetObjectFirewallProfileprotocoloptionsHttp(ctx *Context, name string, id IDInput, state *ObjectFirewallProfileprotocoloptionsHttpState, opts ...ResourceOption) (*ObjectFirewallProfileprotocoloptionsHttp, error)
public static ObjectFirewallProfileprotocoloptionsHttp Get(string name, Input<string> id, ObjectFirewallProfileprotocoloptionsHttpState? state, CustomResourceOptions? opts = null)
public static ObjectFirewallProfileprotocoloptionsHttp get(String name, Output<String> id, ObjectFirewallProfileprotocoloptionsHttpState state, CustomResourceOptions options)
resources:  _:    type: fortimanager:ObjectFirewallProfileprotocoloptionsHttp    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AddressIpRating string
Enable/disable IP based URL rating. Valid values: disable, enable.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
BlockPageStatusCode double
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
ComfortAmount double
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
ComfortInterval double
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
DomainFronting string
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
FortinetBar string
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
FortinetBarPort double
Port for use by Fortinet Bar (1 - 65535, default = 8011).
H2c string
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
Http09 string
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
HttpPolicy string
Enable/disable HTTP policy check. Valid values: disable, enable.
InspectAll string
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
ObjectFirewallProfileprotocoloptionsHttpId string
an identifier for the resource.
Options List<string>
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
OversizeLimit double
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
Ports List<double>
Ports to scan for content (1 - 65535, default = 80).
PostLangs List<string>
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
ProfileProtocolOptions string
Profile Protocol Options.
ProxyAfterTcpHandshake string
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
RangeBlock string
Enable/disable blocking of partial downloads. Valid values: disable, enable.
RetryCount double
Number of attempts to retry HTTP connection (0 - 100, default = 0).
ScanBzip2 string
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SslOffloaded string
SSL decryption and encryption performed by an external device. Valid values: no, yes.
Status string
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
StreamBasedUncompressedLimit double
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
StreamingContentBypass string
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
StripXForwardedFor string
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
SwitchingProtocols string
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
TcpWindowMaximum double
Maximum dynamic TCP window size (default = 8MB).
TcpWindowMinimum double
Minimum dynamic TCP window size (default = 128KB).
TcpWindowSize double
Set TCP static window size (default = 256KB).
TcpWindowType string
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
TunnelNonHttp string
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
UncompressedNestLimit double
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
UncompressedOversizeLimit double
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
UnknownContentEncoding string
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
UnknownHttpVersion string
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
VerifyDnsForPolicyMatching string
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
AddressIpRating string
Enable/disable IP based URL rating. Valid values: disable, enable.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
BlockPageStatusCode float64
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
ComfortAmount float64
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
ComfortInterval float64
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
DomainFronting string
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
FortinetBar string
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
FortinetBarPort float64
Port for use by Fortinet Bar (1 - 65535, default = 8011).
H2c string
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
Http09 string
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
HttpPolicy string
Enable/disable HTTP policy check. Valid values: disable, enable.
InspectAll string
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
ObjectFirewallProfileprotocoloptionsHttpId string
an identifier for the resource.
Options []string
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
OversizeLimit float64
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
Ports []float64
Ports to scan for content (1 - 65535, default = 80).
PostLangs []string
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
ProfileProtocolOptions string
Profile Protocol Options.
ProxyAfterTcpHandshake string
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
RangeBlock string
Enable/disable blocking of partial downloads. Valid values: disable, enable.
RetryCount float64
Number of attempts to retry HTTP connection (0 - 100, default = 0).
ScanBzip2 string
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SslOffloaded string
SSL decryption and encryption performed by an external device. Valid values: no, yes.
Status string
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
StreamBasedUncompressedLimit float64
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
StreamingContentBypass string
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
StripXForwardedFor string
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
SwitchingProtocols string
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
TcpWindowMaximum float64
Maximum dynamic TCP window size (default = 8MB).
TcpWindowMinimum float64
Minimum dynamic TCP window size (default = 128KB).
TcpWindowSize float64
Set TCP static window size (default = 256KB).
TcpWindowType string
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
TunnelNonHttp string
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
UncompressedNestLimit float64
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
UncompressedOversizeLimit float64
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
UnknownContentEncoding string
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
UnknownHttpVersion string
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
VerifyDnsForPolicyMatching string
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
addressIpRating String
Enable/disable IP based URL rating. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
blockPageStatusCode Double
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
comfortAmount Double
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
comfortInterval Double
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
domainFronting String
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
fortinetBar String
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
fortinetBarPort Double
Port for use by Fortinet Bar (1 - 65535, default = 8011).
h2c String
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
http09 String
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
httpPolicy String
Enable/disable HTTP policy check. Valid values: disable, enable.
inspectAll String
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
objectFirewallProfileprotocoloptionsHttpId String
an identifier for the resource.
options List<String>
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
oversizeLimit Double
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
ports List<Double>
Ports to scan for content (1 - 65535, default = 80).
postLangs List<String>
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
profileProtocolOptions String
Profile Protocol Options.
proxyAfterTcpHandshake String
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
rangeBlock String
Enable/disable blocking of partial downloads. Valid values: disable, enable.
retryCount Double
Number of attempts to retry HTTP connection (0 - 100, default = 0).
scanBzip2 String
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sslOffloaded String
SSL decryption and encryption performed by an external device. Valid values: no, yes.
status String
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
streamBasedUncompressedLimit Double
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
streamingContentBypass String
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
stripXForwardedFor String
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
switchingProtocols String
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
tcpWindowMaximum Double
Maximum dynamic TCP window size (default = 8MB).
tcpWindowMinimum Double
Minimum dynamic TCP window size (default = 128KB).
tcpWindowSize Double
Set TCP static window size (default = 256KB).
tcpWindowType String
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
tunnelNonHttp String
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
uncompressedNestLimit Double
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
uncompressedOversizeLimit Double
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
unknownContentEncoding String
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
unknownHttpVersion String
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
verifyDnsForPolicyMatching String
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
addressIpRating string
Enable/disable IP based URL rating. Valid values: disable, enable.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
blockPageStatusCode number
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
comfortAmount number
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
comfortInterval number
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
domainFronting string
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
fortinetBar string
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
fortinetBarPort number
Port for use by Fortinet Bar (1 - 65535, default = 8011).
h2c string
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
http09 string
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
httpPolicy string
Enable/disable HTTP policy check. Valid values: disable, enable.
inspectAll string
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
objectFirewallProfileprotocoloptionsHttpId string
an identifier for the resource.
options string[]
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
oversizeLimit number
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
ports number[]
Ports to scan for content (1 - 65535, default = 80).
postLangs string[]
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
profileProtocolOptions string
Profile Protocol Options.
proxyAfterTcpHandshake string
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
rangeBlock string
Enable/disable blocking of partial downloads. Valid values: disable, enable.
retryCount number
Number of attempts to retry HTTP connection (0 - 100, default = 0).
scanBzip2 string
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sslOffloaded string
SSL decryption and encryption performed by an external device. Valid values: no, yes.
status string
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
streamBasedUncompressedLimit number
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
streamingContentBypass string
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
stripXForwardedFor string
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
switchingProtocols string
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
tcpWindowMaximum number
Maximum dynamic TCP window size (default = 8MB).
tcpWindowMinimum number
Minimum dynamic TCP window size (default = 128KB).
tcpWindowSize number
Set TCP static window size (default = 256KB).
tcpWindowType string
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
tunnelNonHttp string
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
uncompressedNestLimit number
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
uncompressedOversizeLimit number
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
unknownContentEncoding string
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
unknownHttpVersion string
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
verifyDnsForPolicyMatching string
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
address_ip_rating str
Enable/disable IP based URL rating. Valid values: disable, enable.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
block_page_status_code float
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
comfort_amount float
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
comfort_interval float
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
domain_fronting str
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
fortinet_bar str
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
fortinet_bar_port float
Port for use by Fortinet Bar (1 - 65535, default = 8011).
h2c str
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
http09 str
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
http_policy str
Enable/disable HTTP policy check. Valid values: disable, enable.
inspect_all str
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
object_firewall_profileprotocoloptions_http_id str
an identifier for the resource.
options Sequence[str]
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
oversize_limit float
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
ports Sequence[float]
Ports to scan for content (1 - 65535, default = 80).
post_langs Sequence[str]
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
profile_protocol_options str
Profile Protocol Options.
proxy_after_tcp_handshake str
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
range_block str
Enable/disable blocking of partial downloads. Valid values: disable, enable.
retry_count float
Number of attempts to retry HTTP connection (0 - 100, default = 0).
scan_bzip2 str
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
scopetype str
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
ssl_offloaded str
SSL decryption and encryption performed by an external device. Valid values: no, yes.
status str
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
stream_based_uncompressed_limit float
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
streaming_content_bypass str
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
strip_x_forwarded_for str
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
switching_protocols str
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
tcp_window_maximum float
Maximum dynamic TCP window size (default = 8MB).
tcp_window_minimum float
Minimum dynamic TCP window size (default = 128KB).
tcp_window_size float
Set TCP static window size (default = 256KB).
tcp_window_type str
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
tunnel_non_http str
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
uncompressed_nest_limit float
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
uncompressed_oversize_limit float
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
unknown_content_encoding str
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
unknown_http_version str
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
verify_dns_for_policy_matching str
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.
addressIpRating String
Enable/disable IP based URL rating. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
blockPageStatusCode Number
Code number returned for blocked HTTP pages (non-FortiGuard only) (100 - 599, default = 403).
comfortAmount Number
Amount of data to send in a transmission for client comforting (1 - 65535 bytes, default = 1).
comfortInterval Number
Period of time between start, or last transmission, and the next client comfort transmission of data (1 - 900 sec, default = 10).
domainFronting String
Configure HTTP domain fronting (default = block). Valid values: block, monitor, allow.
fortinetBar String
Enable/disable Fortinet bar on HTML content. Valid values: disable, enable.
fortinetBarPort Number
Port for use by Fortinet Bar (1 - 65535, default = 8011).
h2c String
Enable/disable h2c HTTP connection upgrade. Valid values: disable, enable.
http09 String
Configure action to take upon receipt of HTTP 0.9 request. Valid values: block, allow.
httpPolicy String
Enable/disable HTTP policy check. Valid values: disable, enable.
inspectAll String
Enable/disable the inspection of all ports for the protocol. Valid values: disable, enable.
objectFirewallProfileprotocoloptionsHttpId String
an identifier for the resource.
options List<String>
One or more options that can be applied to the session. Valid values: oversize, chunkedbypass, clientcomfort, no-content-summary, servercomfort.
oversizeLimit Number
Maximum in-memory file size that can be scanned (1 - 383 MB, default = 10).
ports List<Number>
Ports to scan for content (1 - 65535, default = 80).
postLangs List<String>
ID codes for character sets to be used to convert to UTF-8 for banned words and DLP on HTTP posts (maximum of 5 character sets). Valid values: jisx0201, jisx0208, jisx0212, gb2312, ksc5601-ex, euc-jp, sjis, iso2022-jp, iso2022-jp-1, iso2022-jp-2, euc-cn, ces-gbk, hz, ces-big5, euc-kr, iso2022-jp-3, iso8859-1, tis620, cp874, cp1252, cp1251.
profileProtocolOptions String
Profile Protocol Options.
proxyAfterTcpHandshake String
Proxy traffic after the TCP 3-way handshake has been established (not before). Valid values: disable, enable.
rangeBlock String
Enable/disable blocking of partial downloads. Valid values: disable, enable.
retryCount Number
Number of attempts to retry HTTP connection (0 - 100, default = 0).
scanBzip2 String
Enable/disable scanning of BZip2 compressed files. Valid values: disable, enable.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sslOffloaded String
SSL decryption and encryption performed by an external device. Valid values: no, yes.
status String
Enable/disable the active status of scanning for this protocol. Valid values: disable, enable.
streamBasedUncompressedLimit Number
Maximum stream-based uncompressed data size that will be scanned (MB, 0 = unlimited (default). Stream-based uncompression used only under certain conditions.).
streamingContentBypass String
Enable/disable bypassing of streaming content from buffering. Valid values: disable, enable.
stripXForwardedFor String
Enable/disable stripping of HTTP X-Forwarded-For header. Valid values: disable, enable.
switchingProtocols String
Bypass from scanning, or block a connection that attempts to switch protocol. Valid values: bypass, block.
tcpWindowMaximum Number
Maximum dynamic TCP window size (default = 8MB).
tcpWindowMinimum Number
Minimum dynamic TCP window size (default = 128KB).
tcpWindowSize Number
Set TCP static window size (default = 256KB).
tcpWindowType String
Specify type of TCP window to use for this protocol. Valid values: system, static, dynamic.
tunnelNonHttp String
Configure how to process non-HTTP traffic when a profile configured for HTTP traffic accepts a non-HTTP session. Can occur if an application sends non-HTTP traffic using an HTTP destination port. Valid values: disable, enable.
uncompressedNestLimit Number
Maximum nested levels of compression that can be uncompressed and scanned (2 - 100, default = 12).
uncompressedOversizeLimit Number
Maximum in-memory uncompressed file size that can be scanned (0 - 383 MB, 0 = unlimited, default = 10).
unknownContentEncoding String
Configure the action the FortiGate unit will take on unknown content-encoding. Valid values: block, inspect, bypass.
unknownHttpVersion String
How to handle HTTP sessions that do not comply with HTTP 0.9, 1.0, or 1.1. Valid values: best-effort, reject, tunnel.
verifyDnsForPolicyMatching String
Enable/disable verification of DNS for policy matching. Valid values: disable, enable.

Import

ObjectFirewall ProfileProtocolOptionsHttp can be imported using any of these accepted formats:

Set import_options = [“profile_protocol_options=YOUR_VALUE”] in the provider section.

$ export “FORTIMANAGER_IMPORT_TABLE”=“true”

$ pulumi import fortimanager:index/objectFirewallProfileprotocoloptionsHttp:ObjectFirewallProfileprotocoloptionsHttp labelname ObjectFirewallProfileProtocolOptionsHttp
Copy

$ unset “FORTIMANAGER_IMPORT_TABLE”

-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortimanager fortinetdev/terraform-provider-fortimanager
License
Notes
This Pulumi package is based on the fortimanager Terraform Provider.
fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager