// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***

using System;
using System.Collections.Generic;
using System.Collections.Immutable;
using System.Threading.Tasks;
using Pulumi.Serialization;
using Pulumi;

namespace Pulumiverse.Fortios
{
    /// <summary>
    /// Configure FortiClient endpoint control profiles. Applies to FortiOS Version `&lt;= 6.2.0`.
    /// 
    /// ## Example Usage
    /// 
    /// ```csharp
    /// using System.Collections.Generic;
    /// using System.Linq;
    /// using Pulumi;
    /// using Fortios = Pulumiverse.Fortios;
    /// 
    /// return await Deployment.RunAsync(() =&gt; 
    /// {
    ///     var trname = new Fortios.EndpointcontrolProfile("trname", new()
    ///     {
    ///         DeviceGroups = new[]
    ///         {
    ///             new Fortios.Inputs.EndpointcontrolProfileDeviceGroupArgs
    ///             {
    ///                 Name = "Mobile Devices",
    ///             },
    ///         },
    ///         ForticlientAndroidSettings = new Fortios.Inputs.EndpointcontrolProfileForticlientAndroidSettingsArgs
    ///         {
    ///             DisableWfWhenProtected = "enable",
    ///             ForticlientAdvancedVpn = "disable",
    ///             ForticlientVpnProvisioning = "disable",
    ///             ForticlientWf = "disable",
    ///         },
    ///         ForticlientIosSettings = new Fortios.Inputs.EndpointcontrolProfileForticlientIosSettingsArgs
    ///         {
    ///             ClientVpnProvisioning = "disable",
    ///             DisableWfWhenProtected = "enable",
    ///             DistributeConfigurationProfile = "disable",
    ///             ForticlientWf = "disable",
    ///         },
    ///         ForticlientWinmacSettings = new Fortios.Inputs.EndpointcontrolProfileForticlientWinmacSettingsArgs
    ///         {
    ///             AvRealtimeProtection = "disable",
    ///             AvSignatureUpToDate = "disable",
    ///             ForticlientApplicationFirewall = "disable",
    ///             ForticlientAv = "disable",
    ///             ForticlientEmsCompliance = "disable",
    ///             ForticlientEmsComplianceAction = "warning",
    ///             ForticlientLinuxVer = "5.4.1",
    ///             ForticlientLogUpload = "enable",
    ///             ForticlientLogUploadLevel = "traffic vulnerability event",
    ///             ForticlientMacVer = "5.4.1",
    ///             ForticlientMinimumSoftwareVersion = "disable",
    ///             ForticlientRegistrationComplianceAction = "warning",
    ///             ForticlientSecurityPosture = "disable",
    ///             ForticlientSecurityPostureComplianceAction = "warning",
    ///             ForticlientSystemCompliance = "enable",
    ///             ForticlientSystemComplianceAction = "warning",
    ///             ForticlientVulnScan = "enable",
    ///             ForticlientVulnScanComplianceAction = "warning",
    ///             ForticlientVulnScanEnforce = "high",
    ///             ForticlientVulnScanEnforceGrace = 1,
    ///             ForticlientVulnScanExempt = "disable",
    ///             ForticlientWf = "disable",
    ///             ForticlientWinVer = "5.4.1",
    ///             OsAvSoftwareInstalled = "disable",
    ///             SandboxAnalysis = "disable",
    ///         },
    ///         OnNetAddrs = new[]
    ///         {
    ///             new Fortios.Inputs.EndpointcontrolProfileOnNetAddrArgs
    ///             {
    ///                 Name = "all",
    ///             },
    ///         },
    ///         ProfileName = "1",
    ///         Users = new[]
    ///         {
    ///             new Fortios.Inputs.EndpointcontrolProfileUserArgs
    ///             {
    ///                 Name = "guest",
    ///             },
    ///         },
    ///     });
    /// 
    /// });
    /// ```
    /// 
    /// ## Import
    /// 
    /// EndpointControl Profile can be imported using any of these accepted formats
    /// 
    /// ```sh
    ///  $ pulumi import fortios:index/endpointcontrolProfile:EndpointcontrolProfile labelname {{profile_name}}
    /// ```
    /// 
    ///  If you do not want to import arguments of block$ export "FORTIOS_IMPORT_TABLE"="false"
    /// 
    /// ```sh
    ///  $ pulumi import fortios:index/endpointcontrolProfile:EndpointcontrolProfile labelname {{profile_name}}
    /// ```
    /// 
    ///  $ unset "FORTIOS_IMPORT_TABLE"
    /// </summary>
    [FortiosResourceType("fortios:index/endpointcontrolProfile:EndpointcontrolProfile")]
    public partial class EndpointcontrolProfile : global::Pulumi.CustomResource
    {
        /// <summary>
        /// Description.
        /// </summary>
        [Output("description")]
        public Output<string?> Description { get; private set; } = null!;

        /// <summary>
        /// Device groups. The structure of `device_groups` block is documented below.
        /// </summary>
        [Output("deviceGroups")]
        public Output<ImmutableArray<Outputs.EndpointcontrolProfileDeviceGroup>> DeviceGroups { get; private set; } = null!;

        /// <summary>
        /// Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -&gt; [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -&gt; [ a10, a2 ].
        /// </summary>
        [Output("dynamicSortSubtable")]
        public Output<string?> DynamicSortSubtable { get; private set; } = null!;

        /// <summary>
        /// FortiClient settings for Android platform. The structure of `forticlient_android_settings` block is documented below.
        /// </summary>
        [Output("forticlientAndroidSettings")]
        public Output<Outputs.EndpointcontrolProfileForticlientAndroidSettings> ForticlientAndroidSettings { get; private set; } = null!;

        /// <summary>
        /// FortiClient settings for iOS platform. The structure of `forticlient_ios_settings` block is documented below.
        /// </summary>
        [Output("forticlientIosSettings")]
        public Output<Outputs.EndpointcontrolProfileForticlientIosSettings> ForticlientIosSettings { get; private set; } = null!;

        /// <summary>
        /// FortiClient settings for Windows/Mac platform. The structure of `forticlient_winmac_settings` block is documented below.
        /// </summary>
        [Output("forticlientWinmacSettings")]
        public Output<Outputs.EndpointcontrolProfileForticlientWinmacSettings> ForticlientWinmacSettings { get; private set; } = null!;

        /// <summary>
        /// Addresses for on-net detection. The structure of `on_net_addr` block is documented below.
        /// </summary>
        [Output("onNetAddrs")]
        public Output<ImmutableArray<Outputs.EndpointcontrolProfileOnNetAddr>> OnNetAddrs { get; private set; } = null!;

        /// <summary>
        /// Profile name.
        /// </summary>
        [Output("profileName")]
        public Output<string> ProfileName { get; private set; } = null!;

        /// <summary>
        /// Select an endpoint control replacement message override group from available options.
        /// </summary>
        [Output("replacemsgOverrideGroup")]
        public Output<string> ReplacemsgOverrideGroup { get; private set; } = null!;

        /// <summary>
        /// Source addresses. The structure of `src_addr` block is documented below.
        /// </summary>
        [Output("srcAddrs")]
        public Output<ImmutableArray<Outputs.EndpointcontrolProfileSrcAddr>> SrcAddrs { get; private set; } = null!;

        /// <summary>
        /// User groups. The structure of `user_groups` block is documented below.
        /// </summary>
        [Output("userGroups")]
        public Output<ImmutableArray<Outputs.EndpointcontrolProfileUserGroup>> UserGroups { get; private set; } = null!;

        /// <summary>
        /// Users. The structure of `users` block is documented below.
        /// </summary>
        [Output("users")]
        public Output<ImmutableArray<Outputs.EndpointcontrolProfileUser>> Users { get; private set; } = null!;

        /// <summary>
        /// Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
        /// </summary>
        [Output("vdomparam")]
        public Output<string?> Vdomparam { get; private set; } = null!;


        /// <summary>
        /// Create a EndpointcontrolProfile resource with the given unique name, arguments, and options.
        /// </summary>
        ///
        /// <param name="name">The unique name of the resource</param>
        /// <param name="args">The arguments used to populate this resource's properties</param>
        /// <param name="options">A bag of options that control this resource's behavior</param>
        public EndpointcontrolProfile(string name, EndpointcontrolProfileArgs? args = null, CustomResourceOptions? options = null)
            : base("fortios:index/endpointcontrolProfile:EndpointcontrolProfile", name, args ?? new EndpointcontrolProfileArgs(), MakeResourceOptions(options, ""))
        {
        }

        private EndpointcontrolProfile(string name, Input<string> id, EndpointcontrolProfileState? state = null, CustomResourceOptions? options = null)
            : base("fortios:index/endpointcontrolProfile:EndpointcontrolProfile", name, state, MakeResourceOptions(options, id))
        {
        }

        private static CustomResourceOptions MakeResourceOptions(CustomResourceOptions? options, Input<string>? id)
        {
            var defaultOptions = new CustomResourceOptions
            {
                Version = Utilities.Version,
                PluginDownloadURL = "github://api.github.com/pulumiverse/pulumi-fortios",
            };
            var merged = CustomResourceOptions.Merge(defaultOptions, options);
            // Override the ID if one was specified for consistency with other language SDKs.
            merged.Id = id ?? merged.Id;
            return merged;
        }
        /// <summary>
        /// Get an existing EndpointcontrolProfile resource's state with the given name, ID, and optional extra
        /// properties used to qualify the lookup.
        /// </summary>
        ///
        /// <param name="name">The unique name of the resulting resource.</param>
        /// <param name="id">The unique provider ID of the resource to lookup.</param>
        /// <param name="state">Any extra arguments used during the lookup.</param>
        /// <param name="options">A bag of options that control this resource's behavior</param>
        public static EndpointcontrolProfile Get(string name, Input<string> id, EndpointcontrolProfileState? state = null, CustomResourceOptions? options = null)
        {
            return new EndpointcontrolProfile(name, id, state, options);
        }
    }

    public sealed class EndpointcontrolProfileArgs : global::Pulumi.ResourceArgs
    {
        /// <summary>
        /// Description.
        /// </summary>
        [Input("description")]
        public Input<string>? Description { get; set; }

        [Input("deviceGroups")]
        private InputList<Inputs.EndpointcontrolProfileDeviceGroupArgs>? _deviceGroups;

        /// <summary>
        /// Device groups. The structure of `device_groups` block is documented below.
        /// </summary>
        public InputList<Inputs.EndpointcontrolProfileDeviceGroupArgs> DeviceGroups
        {
            get => _deviceGroups ?? (_deviceGroups = new InputList<Inputs.EndpointcontrolProfileDeviceGroupArgs>());
            set => _deviceGroups = value;
        }

        /// <summary>
        /// Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -&gt; [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -&gt; [ a10, a2 ].
        /// </summary>
        [Input("dynamicSortSubtable")]
        public Input<string>? DynamicSortSubtable { get; set; }

        /// <summary>
        /// FortiClient settings for Android platform. The structure of `forticlient_android_settings` block is documented below.
        /// </summary>
        [Input("forticlientAndroidSettings")]
        public Input<Inputs.EndpointcontrolProfileForticlientAndroidSettingsArgs>? ForticlientAndroidSettings { get; set; }

        /// <summary>
        /// FortiClient settings for iOS platform. The structure of `forticlient_ios_settings` block is documented below.
        /// </summary>
        [Input("forticlientIosSettings")]
        public Input<Inputs.EndpointcontrolProfileForticlientIosSettingsArgs>? ForticlientIosSettings { get; set; }

        /// <summary>
        /// FortiClient settings for Windows/Mac platform. The structure of `forticlient_winmac_settings` block is documented below.
        /// </summary>
        [Input("forticlientWinmacSettings")]
        public Input<Inputs.EndpointcontrolProfileForticlientWinmacSettingsArgs>? ForticlientWinmacSettings { get; set; }

        [Input("onNetAddrs")]
        private InputList<Inputs.EndpointcontrolProfileOnNetAddrArgs>? _onNetAddrs;

        /// <summary>
        /// Addresses for on-net detection. The structure of `on_net_addr` block is documented below.
        /// </summary>
        public InputList<Inputs.EndpointcontrolProfileOnNetAddrArgs> OnNetAddrs
        {
            get => _onNetAddrs ?? (_onNetAddrs = new InputList<Inputs.EndpointcontrolProfileOnNetAddrArgs>());
            set => _onNetAddrs = value;
        }

        /// <summary>
        /// Profile name.
        /// </summary>
        [Input("profileName")]
        public Input<string>? ProfileName { get; set; }

        /// <summary>
        /// Select an endpoint control replacement message override group from available options.
        /// </summary>
        [Input("replacemsgOverrideGroup")]
        public Input<string>? ReplacemsgOverrideGroup { get; set; }

        [Input("srcAddrs")]
        private InputList<Inputs.EndpointcontrolProfileSrcAddrArgs>? _srcAddrs;

        /// <summary>
        /// Source addresses. The structure of `src_addr` block is documented below.
        /// </summary>
        public InputList<Inputs.EndpointcontrolProfileSrcAddrArgs> SrcAddrs
        {
            get => _srcAddrs ?? (_srcAddrs = new InputList<Inputs.EndpointcontrolProfileSrcAddrArgs>());
            set => _srcAddrs = value;
        }

        [Input("userGroups")]
        private InputList<Inputs.EndpointcontrolProfileUserGroupArgs>? _userGroups;

        /// <summary>
        /// User groups. The structure of `user_groups` block is documented below.
        /// </summary>
        public InputList<Inputs.EndpointcontrolProfileUserGroupArgs> UserGroups
        {
            get => _userGroups ?? (_userGroups = new InputList<Inputs.EndpointcontrolProfileUserGroupArgs>());
            set => _userGroups = value;
        }

        [Input("users")]
        private InputList<Inputs.EndpointcontrolProfileUserArgs>? _users;

        /// <summary>
        /// Users. The structure of `users` block is documented below.
        /// </summary>
        public InputList<Inputs.EndpointcontrolProfileUserArgs> Users
        {
            get => _users ?? (_users = new InputList<Inputs.EndpointcontrolProfileUserArgs>());
            set => _users = value;
        }

        /// <summary>
        /// Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
        /// </summary>
        [Input("vdomparam")]
        public Input<string>? Vdomparam { get; set; }

        public EndpointcontrolProfileArgs()
        {
        }
        public static new EndpointcontrolProfileArgs Empty => new EndpointcontrolProfileArgs();
    }

    public sealed class EndpointcontrolProfileState : global::Pulumi.ResourceArgs
    {
        /// <summary>
        /// Description.
        /// </summary>
        [Input("description")]
        public Input<string>? Description { get; set; }

        [Input("deviceGroups")]
        private InputList<Inputs.EndpointcontrolProfileDeviceGroupGetArgs>? _deviceGroups;

        /// <summary>
        /// Device groups. The structure of `device_groups` block is documented below.
        /// </summary>
        public InputList<Inputs.EndpointcontrolProfileDeviceGroupGetArgs> DeviceGroups
        {
            get => _deviceGroups ?? (_deviceGroups = new InputList<Inputs.EndpointcontrolProfileDeviceGroupGetArgs>());
            set => _deviceGroups = value;
        }

        /// <summary>
        /// Sort sub-tables, please do not set this parameter when configuring static sub-tables. Options: [ false, true, natural, alphabetical ]. false: Default value, do not sort tables; true/natural: sort tables in natural order. For example: [ a10, a2 ] -&gt; [ a2, a10 ]; alphabetical: sort tables in alphabetical order. For example: [ a10, a2 ] -&gt; [ a10, a2 ].
        /// </summary>
        [Input("dynamicSortSubtable")]
        public Input<string>? DynamicSortSubtable { get; set; }

        /// <summary>
        /// FortiClient settings for Android platform. The structure of `forticlient_android_settings` block is documented below.
        /// </summary>
        [Input("forticlientAndroidSettings")]
        public Input<Inputs.EndpointcontrolProfileForticlientAndroidSettingsGetArgs>? ForticlientAndroidSettings { get; set; }

        /// <summary>
        /// FortiClient settings for iOS platform. The structure of `forticlient_ios_settings` block is documented below.
        /// </summary>
        [Input("forticlientIosSettings")]
        public Input<Inputs.EndpointcontrolProfileForticlientIosSettingsGetArgs>? ForticlientIosSettings { get; set; }

        /// <summary>
        /// FortiClient settings for Windows/Mac platform. The structure of `forticlient_winmac_settings` block is documented below.
        /// </summary>
        [Input("forticlientWinmacSettings")]
        public Input<Inputs.EndpointcontrolProfileForticlientWinmacSettingsGetArgs>? ForticlientWinmacSettings { get; set; }

        [Input("onNetAddrs")]
        private InputList<Inputs.EndpointcontrolProfileOnNetAddrGetArgs>? _onNetAddrs;

        /// <summary>
        /// Addresses for on-net detection. The structure of `on_net_addr` block is documented below.
        /// </summary>
        public InputList<Inputs.EndpointcontrolProfileOnNetAddrGetArgs> OnNetAddrs
        {
            get => _onNetAddrs ?? (_onNetAddrs = new InputList<Inputs.EndpointcontrolProfileOnNetAddrGetArgs>());
            set => _onNetAddrs = value;
        }

        /// <summary>
        /// Profile name.
        /// </summary>
        [Input("profileName")]
        public Input<string>? ProfileName { get; set; }

        /// <summary>
        /// Select an endpoint control replacement message override group from available options.
        /// </summary>
        [Input("replacemsgOverrideGroup")]
        public Input<string>? ReplacemsgOverrideGroup { get; set; }

        [Input("srcAddrs")]
        private InputList<Inputs.EndpointcontrolProfileSrcAddrGetArgs>? _srcAddrs;

        /// <summary>
        /// Source addresses. The structure of `src_addr` block is documented below.
        /// </summary>
        public InputList<Inputs.EndpointcontrolProfileSrcAddrGetArgs> SrcAddrs
        {
            get => _srcAddrs ?? (_srcAddrs = new InputList<Inputs.EndpointcontrolProfileSrcAddrGetArgs>());
            set => _srcAddrs = value;
        }

        [Input("userGroups")]
        private InputList<Inputs.EndpointcontrolProfileUserGroupGetArgs>? _userGroups;

        /// <summary>
        /// User groups. The structure of `user_groups` block is documented below.
        /// </summary>
        public InputList<Inputs.EndpointcontrolProfileUserGroupGetArgs> UserGroups
        {
            get => _userGroups ?? (_userGroups = new InputList<Inputs.EndpointcontrolProfileUserGroupGetArgs>());
            set => _userGroups = value;
        }

        [Input("users")]
        private InputList<Inputs.EndpointcontrolProfileUserGetArgs>? _users;

        /// <summary>
        /// Users. The structure of `users` block is documented below.
        /// </summary>
        public InputList<Inputs.EndpointcontrolProfileUserGetArgs> Users
        {
            get => _users ?? (_users = new InputList<Inputs.EndpointcontrolProfileUserGetArgs>());
            set => _users = value;
        }

        /// <summary>
        /// Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
        /// </summary>
        [Input("vdomparam")]
        public Input<string>? Vdomparam { get; set; }

        public EndpointcontrolProfileState()
        {
        }
        public static new EndpointcontrolProfileState Empty => new EndpointcontrolProfileState();
    }
}
