stormshield.sns.sns_alarm role – Alarm configuration

Note

This role is part of the stormshield.sns collection (version 1.0.1).

It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it use: ansible-galaxy collection install stormshield.sns.

To use it in a playbook, specify: stormshield.sns.sns_alarm.

Entry point main – Alarm configuration

Synopsis

  • This role configure IPS alarms of Stormshield Network Security appliances.

Parameters

Parameter

Comments

protocols

list / elements=dictionary

List of protocols to configure.

alarms

list / elements=dictionary

Alarms for this protocol

ackqid

string

ACK queue name

action

string

Alarm reaction

Choices:

  • "pass"

  • "block"

blacklist

string

Add the IP address to the blacklist

Choices:

  • "on"

  • "off"

blduration

integer

blacklist duration in minutes

comment

string

comment

context

string / required

‘protocol’ or ASQ context name

dump

integer

dump the network packet in the log

Choices:

  • 0

  • 1

email

string

Send alarm by e-mail

Choices:

  • "on"

  • "off"

emailcount

integer

E-mail count

emailduration

integer

E-mail delay in seconds

id

integer / required

Alarm id

index

integer / required

Profile index

level

string

alarm level

Choices:

  • "minor"

  • "major"

  • "ignore"

qid

string

Queue name

protocol

string / required

Protocol name