|
The Ansible module fortioswebfilterprofile currently does not support unsetting parameters within the ftgd-wf (FortiGuard Web Filter) configuration section.
To workaround this limitation, fortinet.fortios.fortiosjsongeneric module can be used instead of fortioswebfilterprofile.
The fortiosjsongeneric module allows full JSON-based configuration control, including the ability to unset specific fields corresponding to setting a JSON field to null.
To configure web filter profiles on FortiGate using Ansible, it could be handy to follow these steps:
- Install the fortinet.fortios collection for the installed Ansible controller.
- Create a new Ansible playbook with content like the following:
----
- hosts: fortigate01
connection: httpapi
collections:
- fortinet.fortios
vars:
ansible_python_interpreter: /usr/bin/python3
ansible_httpapi_use_ssl: yes
ansible_httpapi_validate_certs: no
ansible_httpapi_port: 443
vdom: "{{ vdom }}" # Ensure this is set to the correct VDOM
tasks:
- name: WebFilterCreation
fortinet.fortios.fortios_json_generic:
vdom: "root"
json_generic:
method: "POST"
path: "/api/v2/cmdb/webfilter/profile"
jsonbody: |
{
"name": "AnAstonishingName",
"feature-set": "proxy",
"ftgd-wf": {
"options": null, // corresponfing to CLI unset options
"filters": [
{
// Filter JSON Body,
}
]
}
}
register: info
- Run the Ansible playbook to configure the web filter profile on the FortiGate.
To create the filter body, it is suggested to follow the official documentation from FNDN.
Related document:
https://fndn.fortinet.net/index.php?/fortiapi/1-fortios/5445/1/webfilter/
|
