FTD Platform Settings

fmc:
  domains:
    - name: Global
      objects:
        icmpv4s:
          - name: MyICMPv4Name1
            icmp_type: 8
          - name: MyICMPv4Name2
            icmp_type: 3
            code: 2
        hosts:
          - name: MyHostName1
            ip: 10.10.10.10
          - name: MyHostName2
            ip: 20.20.20.20
        networks:
          - name: MyNetworkName1
            prefix: 10.10.10.0/24
        security_zones:
          - name: MySecurityZoneName1
          - name: MySecurityZoneName2

fmc:
  domains:
    - name: Global
      devices:
        ftd_platform_settings:
          - name: MyPlatformSettingsName1
            description: "This is my platform settings description"
            banner:
              text: |
                This is line 1 of the banner
                This is line 2 of the banner
            http_access:
              server_enabled: true
              server_port: 443
              configurations:
                - source_network_object: MyNetworkName1
                  interface_literals: ["MyInt_1", "MyInt_2"]
                  interface_objects: ["MySecurityZoneName1", "MySecurityZoneName2"]
                - source_network_object: MyHostName1
                  interface_literals: ["MyInt_1", "MyInt_2"]
                  interface_objects: ["MySecurityZoneName1", "MySecurityZoneName2"]
            icmp_access:
              rate_limit: 1
              burst_size: 1
              configurations:
                - action: Permit
                  icmp_service_object: MyICMPv4Name1
                  source_network_object: MyNetworkName1
                  interface_literals: ["MyInt_1", "MyInt_2"]
                  interface_objects: ["MySecurityZoneName1", "MySecurityZoneName2"]
                - action: Deny
                  icmp_service_object: MyICMPv4Name2
                  source_network_object: MyHostName1
                  interface_literals: ["MyInt_1", "MyInt_2"]
                  interface_objects: ["MySecurityZoneName1", "MySecurityZoneName2"]
            ssh_accesses:
              - source_network_object: MyNetworkName1
                interface_literals: ["MyInt_1", "MyInt_2"]
                interface_objects: ["MySecurityZoneName1", "MySecurityZoneName2"]
              - source_network_object: MyHostName1
                interface_literals: ["MyInt_1", "MyInt_2"]
                interface_objects: ["MySecurityZoneName1", "MySecurityZoneName2"]
            snmp:
              server_enabled: true
              server_port: 1456
              read_community: public
              system_administrator: admin
              location: "Data Center 1"
              management_hosts:
                - network_object: MyHostName1
                  snmp_version: "SNMPv2c"
                  read_community: public
                  poll: true
                  interface_literals: ["MyInt_1", "MyInt_2"]
                  interface_objects: ["MySecurityZoneName1", "MySecurityZoneName2"]
                - network_object: MyHostName2
                  snmp_version: "SNMPv3"
                  username: snmpv3user2
                  poll: true
                  interface_literals: ["MyInt_1", "MyInt_2"]
                  interface_objects: ["MySecurityZoneName1", "MySecurityZoneName2"]
              snmpv3_users:
                - security_level: "NoAuth"
                  username: snmpv3user1
                - security_level: "Priv"
                  username: snmpv3user2
                  password_type: "Clear"
                  authentication_algorithm: "SHA256"
                  authentication_password: "authPass123"
                  encryption_algorithm: "AES256"
                  encryption_password: "encrPass123"
              traps:
                syslog: true
            syslog:
              logging_setup:
                logging_enabled: true
                logging_on_failover_standby_unit_enabled: true
                fmc_logging_mode: "ALL"
                fmc_logging_level: "CRIT"
                flash_enabled: true
              logging_destinations:
                - destination: "INTERNAL_BUFFER"
                  global_event_class_filter_criteria: "DISABLE"
                  event_class_filters:
                    - class: "BRIDGE"
                      severity: "WARNING"
                    - class: "VPN"
                      severity: "ERR"
                - destination: "SYSLOG_SERVERS"
                  global_event_class_filter_criteria: "SEVERITY"
                  global_event_class_filter_value: "WARNING"
                  event_class_filters:
                    - class: "BRIDGE"
                      severity: "WARNING"
                    - class: "VPN"
                      severity: "ERR"
              email_setup:
                source_email_address: my_email@example.com
                destinations:
                  - email_addresses:
                      - dest1@example.com
                      - dest2@example.com
                    logging_level: "INFO"
                  - email_addresses:
                      - dest3@example.com
                    logging_level: "ERR"
              event_lists:
                - name: MyEventListName1
                  event_classes:
                    - class: "VPN"
                      severity: "ERR"
                    - class: "OSPF"
                      severity: "WARNING"
                  message_ids:
                    - "302015"
                    - "302016"
                    - "302017"
                    - "302018"
                - name: MyEventListName2
                  event_classes:
                    - class: "BOTNET_TRAFFIC_FILTERING"
                      severity: "INFO"
                    - class: "SCANSAFE"
                      severity: "WARNING"
              rate_limits:
                - type: "LOG_LEVEL"
                  value: "ERR"
                  number_of_messages: 100
                  interval: 5
                - type: "LOG_LEVEL"
                  value: "WARNING"
                  number_of_messages: 200
                  interval: 10
                - type: "SYSLOG_ID"
                  value: "302015"
                  number_of_messages: 50
                - type: "SYSLOG_ID"
                  value: "302016"
                  number_of_messages: 75
              settings:
                facility: "LOCAL4"
                timestamp_format: "RFC_5424"
                device_id_source: "INTERFACE"
                device_id_interface: "MySecurityZoneName1"
                all_syslog_messages_enabled: false
                syslog_ids:
                  - syslog_id: "302015"
                  - syslog_id: "302016"
                  - syslog_id: "302017"
                    enabled: false
                    logging_level: "ERR"
              servers:
                allow_user_traffic_when_tcp_syslog_server_is_down: true
                message_queue_size: 8192
                servers:
                  - network_object: MyHostName1
                    protocol: "TCP"
                    port: 1514
                    emblem_format: true
                    secure_syslog: true
                    use_management_interface: false
                    interface_literals: ["MyInt_1", "MyInt_2"]
                    interface_objects: ["MySecurityZoneName1", "MySecurityZoneName2"]
                  - network_object: MyHostName2
                    protocol: "UDP"
                    port: 1514
                    emblem_format: true
                    secure_syslog: true
                    use_management_interface: false
                    interface_literals: ["MyInt_1", "MyInt_2"]
                    interface_objects: ["MySecurityZoneName1", "MySecurityZoneName2"]
            time_synchronization:
              mode: SYNC_VIA_NTP_SERVER
              ntp_servers:
                - 0.pool.ntp.org
                - 1.pool.ntp.org