search

fortinet-ansible-dev / ansible-galaxy-fortios-collection

GNU General Public License v3.0
84 stars 47 forks source link

How do I change Web Filter pre-configured filters rating "G, PG-13, R"? #282

Closed llalwah closed 3 months ago

llalwah commented 7 months ago

On my Fortigate 60F under security profiles > web filter, I manually set the default profile's pre-configured filters from "Custom" to "PG-13". image

I would like to make this change using ansible have gone through the modules and cannot find anything that suggests how to make the change. Apologies in advance if it is there and I have missed it.

MaxxLiu22 commented 7 months ago

Hi @llalwah,

Thank you for raising this question, may know which FOS version are you using, that is helpful for me to check if Ansible is compatible with that operation.

Thanks, Maxx

llalwah commented 7 months ago

hi @MaxxLiu22 thanks for getting back to me.

It is a Fortigate 60F currently on firmware v6.4.10 build2000 (GA), I am able to update it if necessary.

ansible [core 2.16.0]
  config file = None
  configured module search path = ['/home/llalwah/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /home/llalwah/projects/ansible-role-fortigate/.venv/lib/python3.11/site-packages/ansible
  ansible collection location = /home/llalwah/.ansible/collections:/usr/share/ansible/collections
  executable location = /home/llalwah/projects/ansible-role-fortigate/.venv/bin/ansible
  python version = 3.11.5 (main, Sep  2 2023, 14:16:33) [GCC 13.2.1 20230801] (/home/llalwah/projects/ansible-role-fortigate/.venv/bin/python3)
  jinja version = 3.1.2
  libyaml = True

(.venv) [llalwah@loganarchbox tests]$ ansible-galaxy collection list | grep forti
fortinet.fortios              2.3.4  
# /home/llalwah/projects/ansible-role-fortigate/.venv/lib/python3.11/site-packages/ansible_collections
fortinet.fortimanager         2.3.0  
fortinet.fortios              2.3.4
MaxxLiu22 commented 7 months ago

Hi @llalwah ,

Thank you for your information, Ansible hasn't supported this feature so far, since Ansible is a wrapper of API, but there is no such a specific argument to that "pre-configured filters" button, when I monitor the traffic, I find GUI may has a local map to define how PG-13 achieves category actions and POST these actions config to device, I have let the development team know that, will let you know if they add this feature in the future. Sorry for the inconvenience. 2

Thanks, Maxx

JieX19 commented 3 months ago

Hi @llalwah

I will close this ticket as this feature is currently unsupported in the RestAPI, rendering Ansible unable to take any action at this time.

Thanks, Jie