You need to enable JavaScript to run this app.
优惠活动
大模型
产品
解决方案
定价
更多

Terraform部署FortiManager策略添加Webfilter后安装包报错求助

FortiManager部署含Webfilter的防火墙策略时配置包安装报错

我正在测试Terraform在FortiManager与FortiGate中部署配置的边界能力,目标是给防火墙策略配置Webfilter,再把相关策略和FortiManager配置包部署到指定FortiGate设备上。之前部署流程一切正常,但添加Webfilter配置文件后,Terraform执行无异常,FortiManager里安装配置包的任务却持续报错。

试过两种排查操作:

  • 通过GUI手动推送Terraform创建的Webfilter配置文件,无报错
  • 改用Ansible实现相同配置,遇到完全一致的问题

防火墙策略代码模块

resource "fortimanager_packages_firewall_policy" "tunnelInternet" {
  for_each = var.InternetPolicies
  scopetype = "adom"
  adom      = local.get_adom_from_pkg_internet[each.key]
  pkg       = each.value.pkg
  name      = each.value.name
  policyid  = each.value.policy_id
  srcintf   = each.value.srcintf
  dstintf   = each.value.dstintf
  srcaddr   = each.value.srcaddr
  dstaddr   = each.value.dstaddr
  service   = each.value.service
  action    = each.value.action
  status    = each.value.status
  nat = each.value.nat
  webfilter_profile = "wb-categories-${local.pkg_to_scope_member[each.value.pkg]}"
  fixedport = "disable"
  permit_stun_host = "disable"
  auto_asic_offload    = "disable" # ou "disable"
  schedule  = "always"
  logtraffic = "all"
  comments  = "Test policy via Terraform"
  ssl_ssh_profile = "certificate-inspection"
  
  lifecycle {
    create_before_destroy = true
  }
  depends_on = [fortimanager_dvmdb_adom.test,  fortimanager_object_webfilter_profile.webfilter, time_sleep.wait_30_seconds]
}

配置包安装代码模块

resource "fortimanager_securityconsole_install_package" "install_package" {
  for_each = var.packages
  fmgadom           = var.fortigates_provider[each.value.scope_member_name].adom
  flags             = ["none"]
  pkg               = each.value.package_name
  force_recreate    = uuid()
   depends_on = [
    fortimanager_packages_firewall_policy.tunnelInternet,
    fortimanager_packages_firewall_policy.tunnelsPolicies,
    time_sleep.wait_30_seconds
  ]
}

GUI报错截图显示配置包安装任务执行失败,无法完成部署。

恳请各位帮忙排查解决这个问题。

内容的提问来源于stack exchange,提问作者raku

相关产品推荐
方舟 Agent Plan

超全模态模型 × Harness 升级,最新支持 Deepseek-V4.1-Flash、GLM-5.3 系列、Doubao-Seedream-5.0-pro、Kimi-K3 (部分), 限时 9.9 元起

最近更新时间:2026.06.12 21:18:17