utm_proxy_exception – Create, update or destroy reverse_proxy exception entry in Sophos UTM

New in version 2.8.

Synopsis

  • Create, update or destroy a reverse_proxy exception entry in SOPHOS UTM.

  • This module needs to have the REST Ability of the UTM to be activated.

Parameters

Parameter Choices/Defaults Comments
headers
dictionary
A dictionary of additional headers to be sent to POST and PUT requests.
Is needed for some modules
name
string / required
The name of the object. Will be used to identify the entry
op
string
    Choices:
  • AND ←
  • OR
The operand to be used with the entries of the path parameter
path
list
Default:
[]
The paths the exception in the reverse proxy is defined for
skip_custom_threats_filters
list
Default:
[]
A list of threats to be skipped
skip_threats_filter_categories
list
Default:
[]
Define which categories of threats are skipped
skipav
boolean
    Choices:
  • no ←
  • yes
Skip the Antivirus Scanning
skipbadclients
boolean
    Choices:
  • no ←
  • yes
Block clients with bad reputation
skipcookie
boolean
    Choices:
  • no ←
  • yes
Skip the Cookie Signing check
skipform
boolean
    Choices:
  • no ←
  • yes
Enable form hardening
skipform_missingtoken
boolean
    Choices:
  • no ←
  • yes
Enable form hardening with missing tokens
skiphtmlrewrite
boolean
    Choices:
  • no ←
  • yes
Protection against SQL
skiptft
boolean
    Choices:
  • no ←
  • yes
Enable true file type control
skipurl
boolean
    Choices:
  • no ←
  • yes
Enable static URL hardening
source
list
Default:
[]
Define which categories of threats are skipped
state
string
    Choices:
  • absent
  • present ←
The desired state of the object.
present will create or update an object
absent will delete an object if it was present
status
boolean
    Choices:
  • no
  • yes ←
Status of the exception rule set
utm_host
string / required
The REST Endpoint of the Sophos UTM.
utm_port
integer
Default:
4444
The port of the REST interface.
utm_protocol
string
    Choices:
  • http
  • https ←
The protocol of the REST Endpoint.
utm_token
string / required
validate_certs
boolean
    Choices:
  • no
  • yes ←
Whether the REST interface's ssl certificate should be verified or not.

Examples

- name: Create UTM proxy_exception
  utm_proxy_exception:
    utm_host: sophos.host.name
    utm_token: abcdefghijklmno1234
    name: TestExceptionEntry
    backend: REF_OBJECT_STRING
    state: present

- name: Remove UTM proxy_exception
  utm_proxy_exception:
    utm_host: sophos.host.name
    utm_token: abcdefghijklmno1234
    name: TestExceptionEntry
    state: absent

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key Returned Description
result
complex
 success
The utm object that was created
  _locked
boolean
Whether or not the object is currently locked
  _ref
string
The reference name of the object
  _type
string
The type of the object
  comment
-
The optional comment string
  name
string
The name of the object
  op
string
The operand to be used with the entries of the path parameter
  path
list
The paths the exception in the reverse proxy is defined for
  skip_custom_threats_filters
list
A list of threats to be skipped
  skip_threats_filter_categories
list
Define which categories of threats are skipped
  skipav
boolean
Skip the Antivirus Scanning
  skipbadclients
boolean
Block clients with bad reputation
  skipcookie
boolean
Skip the Cookie Signing check
  skipform
boolean
Enable form hardening
  skipform_missingtoken
boolean
Enable form hardening with missing tokens
  skiphtmlrewrite
boolean
Protection against SQL
  skiptft
boolean
Enable true file type control
  skipurl
boolean
Enable static URL hardening
  source
list
Define which categories of threats are skipped


Status

Authors

  • Sebastian Schenzel (@RickS-C137)

Hint

If you notice any issues in this documentation you can edit this document to improve it.