fadcos_waf_parameter_validation_rule – Configuring a Parameter Validation rule¶

New in version 1.3.0.

Synopsis
Requirements
FortiADC Version Compatibility
Parameters
Examples
Return Values
Status
Authors

Synopsis ¶

Configuring a Parameter Validation rule

Requirements ¶

The below requirements are needed on the host that executes this module.

ansible>=2.8

FortiADC Version Compatibility ¶

	`v7.1.4`	`v7.2.2`	`v7.4.0`
fadcos_waf_parameter_validation_rule	yes	yes	yes

Parameters ¶

action - Type of action to perform on the object. type: str required: true
name - Specify the name for the Parameter Validation Rule.type: str required: true
severity - When FortiADC records violations of this rule in the attack log, each log message contains a Severity Level (severity_level) field. type: str required: false
security_action - Select the action profile that you want to apply.type: str required: false
host_status - Enable to require that the Host: field of the HTTP request match a protected host name's entry in order to match the URL access rule. Also configure Host.type: str required: true
host - The Host option is available if Host Status is enabled.type: str required: true
host - The HTTP request URL must be start with /. eg./login. This item must be set when configuring the rule. FortiADC will match the other item (rule) when matching the request URL; if the match fails, FortiADC will not attempt to match others.type: str required: true
vdom - VDOM name if enabled.type: str required: true(if VDOM is enabled)

Examples ¶

- name:
  hosts: all
  vars:
  connection: httpapi
  gather_facts: false
  tasks:
    - name: Add parameter_validation_rule
      fadcos_waf_parameter_validation_rule:
        action: add
        name: test_pr1
        severity: low
        url: /abb/ccd

    - name: edit parameter_validation_rule
      fadcos_waf_parameter_validation_rule:
        action: edit
        name: test_pr1
        severity: high
        url: /hggg/ccd

    - name: get parameter_validation_rule
      fadcos_waf_parameter_validation_rule:
        action: get
        name: test_pr1

    - name: delete parameter_validation_rule
      fadcos_waf_parameter_validation_rule:
        action: delete
        name: test_pr1

Return Values ¶

Common return values are documented: https://docs.ansible.com/ansible/latest/reference_appendices/common_return_values.html#common-return-values, the following are the fields unique to this module:

200 - OK: Request returns successful.
400 - Bad Request: Request cannot be processed by the API.
401 - Not Authorized: Request without successful login session.
403 - Forbidden: Request is missing CSRF token or administrator is missing access profile permissions.
404 - Resource Not Found: Unable to find the specified resource.
405 - Method Not Allowed: Specified HTTP method is not allowed for this resource.
413 - Request Entity Too Large: Request cannot be processed due to large entity.
424 - Failed Dependency: Fail dependency can be duplicate resource, missing required parameter, missing required attribute, or invalid attribute value.
429 - Access temporarily blocked: Maximum failed authentications reached. The offended source is temporarily blocked for certain amount of time.
500 - Internal Server Error: Internal error when processing the request.

For errorcode please check FortiADC API errorcode at : https://fndn.fortinet.net/index.php?/fortiapi/981-fortiadc/

Status ¶

This module is not guaranteed to have a backwards compatible interface.

Authors ¶

Joseph Chen

Hint

If you notice any issues in this documentation, you can create a pull request to improve it at: https://github.com/fortinet-ansible-dev/ansible-galaxy-fortiadc-sphinxdoc/pulls