Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Fortimanager Provider
  4. API Docs
  5. ObjectZtnaDestination
Viewing docs for fortimanager 1.18.0
published on Friday, Jul 31, 2026 by fortinetdev
Schema (JSON)
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectZtnaDestination

Viewing docs for fortimanager 1.18.0
published on Friday, Jul 31, 2026 by fortinetdev
Schema (JSON)
fortinetdev/terraform-provider-fortimanager

    Configure ZTNA destination.

    Create ObjectZtnaDestination Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ObjectZtnaDestination(name: string, args?: ObjectZtnaDestinationArgs, opts?: CustomResourceOptions);
    @overload
def ObjectZtnaDestination(resource_name: str,
                          args: Optional[ObjectZtnaDestinationArgs] = None,
                          opts: Optional[ResourceOptions] = None)

@overload
def ObjectZtnaDestination(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          addresses: Optional[Sequence[str]] = None,
                          adom: Optional[str] = None,
                          conn_type: Optional[str] = None,
                          domain: Optional[str] = None,
                          external_auth: Optional[str] = None,
                          mappedport: Optional[str] = None,
                          name: Optional[str] = None,
                          object_ztna_destination_id: Optional[str] = None,
                          protocol: Optional[str] = None,
                          saas_applications: Optional[Sequence[str]] = None,
                          scopetype: Optional[str] = None,
                          ssh_client_certs: Optional[Sequence[str]] = None,
                          ssh_host_key_validation: Optional[str] = None,
                          ssh_host_keys: Optional[Sequence[str]] = None,
                          tunnel_encryption: Optional[str] = None,
                          type: Optional[str] = None,
                          update_if_exist: Optional[bool] = None,
                          uuid: Optional[str] = None)
    func NewObjectZtnaDestination(ctx *Context, name string, args *ObjectZtnaDestinationArgs, opts ...ResourceOption) (*ObjectZtnaDestination, error)
    public ObjectZtnaDestination(string name, ObjectZtnaDestinationArgs? args = null, CustomResourceOptions? opts = null)
    public ObjectZtnaDestination(String name, ObjectZtnaDestinationArgs args)
public ObjectZtnaDestination(String name, ObjectZtnaDestinationArgs args, CustomResourceOptions options)

    type: fortimanager:ObjectZtnaDestination
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "fortimanager_object_ztna_destination" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ObjectZtnaDestinationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ObjectZtnaDestinationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ObjectZtnaDestinationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ObjectZtnaDestinationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ObjectZtnaDestinationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var objectZtnaDestinationResource = new Fortimanager.ObjectZtnaDestination("objectZtnaDestinationResource", new()
{
    Addresses = new[]
    {
        "string",
    },
    Adom = "string",
    ConnType = "string",
    Domain = "string",
    ExternalAuth = "string",
    Mappedport = "string",
    Name = "string",
    ObjectZtnaDestinationId = "string",
    Protocol = "string",
    SaasApplications = new[]
    {
        "string",
    },
    Scopetype = "string",
    SshClientCerts = new[]
    {
        "string",
    },
    SshHostKeyValidation = "string",
    SshHostKeys = new[]
    {
        "string",
    },
    TunnelEncryption = "string",
    Type = "string",
    UpdateIfExist = false,
    Uuid = "string",
});

    example, err := fortimanager.NewObjectZtnaDestination(ctx, "objectZtnaDestinationResource", &fortimanager.ObjectZtnaDestinationArgs{
	Addresses: pulumi.StringArray{
		pulumi.String("string"),
	},
	Adom:                    pulumi.String("string"),
	ConnType:                pulumi.String("string"),
	Domain:                  pulumi.String("string"),
	ExternalAuth:            pulumi.String("string"),
	Mappedport:              pulumi.String("string"),
	Name:                    pulumi.String("string"),
	ObjectZtnaDestinationId: pulumi.String("string"),
	Protocol:                pulumi.String("string"),
	SaasApplications: pulumi.StringArray{
		pulumi.String("string"),
	},
	Scopetype: pulumi.String("string"),
	SshClientCerts: pulumi.StringArray{
		pulumi.String("string"),
	},
	SshHostKeyValidation: pulumi.String("string"),
	SshHostKeys: pulumi.StringArray{
		pulumi.String("string"),
	},
	TunnelEncryption: pulumi.String("string"),
	Type:             pulumi.String("string"),
	UpdateIfExist:    pulumi.Bool(false),
	Uuid:             pulumi.String("string"),
})

    resource "fortimanager_object_ztna_destination" "objectZtnaDestinationResource" {
  lifecycle {
    create_before_destroy = true
  }
  addresses                  = ["string"]
  adom                       = "string"
  conn_type                  = "string"
  domain                     = "string"
  external_auth              = "string"
  mappedport                 = "string"
  name                       = "string"
  object_ztna_destination_id = "string"
  protocol                   = "string"
  saas_applications          = ["string"]
  scopetype                  = "string"
  ssh_client_certs           = ["string"]
  ssh_host_key_validation    = "string"
  ssh_host_keys              = ["string"]
  tunnel_encryption          = "string"
  type                       = "string"
  update_if_exist            = false
  uuid                       = "string"
}

    var objectZtnaDestinationResource = new ObjectZtnaDestination("objectZtnaDestinationResource", ObjectZtnaDestinationArgs.builder()
    .addresses("string")
    .adom("string")
    .connType("string")
    .domain("string")
    .externalAuth("string")
    .mappedport("string")
    .name("string")
    .objectZtnaDestinationId("string")
    .protocol("string")
    .saasApplications("string")
    .scopetype("string")
    .sshClientCerts("string")
    .sshHostKeyValidation("string")
    .sshHostKeys("string")
    .tunnelEncryption("string")
    .type("string")
    .updateIfExist(false)
    .uuid("string")
    .build());

    object_ztna_destination_resource = fortimanager.ObjectZtnaDestination("objectZtnaDestinationResource",
    addresses=["string"],
    adom="string",
    conn_type="string",
    domain="string",
    external_auth="string",
    mappedport="string",
    name="string",
    object_ztna_destination_id="string",
    protocol="string",
    saas_applications=["string"],
    scopetype="string",
    ssh_client_certs=["string"],
    ssh_host_key_validation="string",
    ssh_host_keys=["string"],
    tunnel_encryption="string",
    type="string",
    update_if_exist=False,
    uuid="string")

    const objectZtnaDestinationResource = new fortimanager.ObjectZtnaDestination("objectZtnaDestinationResource", {
    addresses: ["string"],
    adom: "string",
    connType: "string",
    domain: "string",
    externalAuth: "string",
    mappedport: "string",
    name: "string",
    objectZtnaDestinationId: "string",
    protocol: "string",
    saasApplications: ["string"],
    scopetype: "string",
    sshClientCerts: ["string"],
    sshHostKeyValidation: "string",
    sshHostKeys: ["string"],
    tunnelEncryption: "string",
    type: "string",
    updateIfExist: false,
    uuid: "string",
});

    type: fortimanager:ObjectZtnaDestination
properties:
    addresses:
        - string
    adom: string
    connType: string
    domain: string
    externalAuth: string
    mappedport: string
    name: string
    objectZtnaDestinationId: string
    protocol: string
    saasApplications:
        - string
    scopetype: string
    sshClientCerts:
        - string
    sshHostKeyValidation: string
    sshHostKeys:
        - string
    tunnelEncryption: string
    type: string
    updateIfExist: false
    uuid: string

    ObjectZtnaDestination Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ObjectZtnaDestination resource accepts the following input properties:

    Addresses List<string>
    Address or address group of the ZTNA destination.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    ConnType string
    Connection type. Valid values: traffic-forwarding, ssh.
    Domain string
    Wildcard domain name of the ZTNA destination.
    ExternalAuth string
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    Mappedport string
    Port for communicating with the real server.
    Name string
    Destination name.
    ObjectZtnaDestinationId string
    an identifier for the resource with format {{name}}.
    Protocol string
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    SaasApplications List<string>
    SaaS application controlled by this ZTNA destination.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SshClientCerts List<string>
    Configure access-proxy SSH client certificate profile.
    SshHostKeyValidation string
    Enable/disable SSH host key validation. Valid values: disable, enable.
    SshHostKeys List<string>
    Configure host keys (one or more may be configured).
    TunnelEncryption string
    Tunnel encryption. Valid values: disable, enable.
    Type string
    ZTNA destination type. Valid values: on-premise, saas.
    UpdateIfExist bool
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    Addresses []string
    Address or address group of the ZTNA destination.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    ConnType string
    Connection type. Valid values: traffic-forwarding, ssh.
    Domain string
    Wildcard domain name of the ZTNA destination.
    ExternalAuth string
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    Mappedport string
    Port for communicating with the real server.
    Name string
    Destination name.
    ObjectZtnaDestinationId string
    an identifier for the resource with format {{name}}.
    Protocol string
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    SaasApplications []string
    SaaS application controlled by this ZTNA destination.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SshClientCerts []string
    Configure access-proxy SSH client certificate profile.
    SshHostKeyValidation string
    Enable/disable SSH host key validation. Valid values: disable, enable.
    SshHostKeys []string
    Configure host keys (one or more may be configured).
    TunnelEncryption string
    Tunnel encryption. Valid values: disable, enable.
    Type string
    ZTNA destination type. Valid values: on-premise, saas.
    UpdateIfExist bool
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    addresses list(string)
    Address or address group of the ZTNA destination.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    conn_type string
    Connection type. Valid values: traffic-forwarding, ssh.
    domain string
    Wildcard domain name of the ZTNA destination.
    external_auth string
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    mappedport string
    Port for communicating with the real server.
    name string
    Destination name.
    object_ztna_destination_id string
    an identifier for the resource with format {{name}}.
    protocol string
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    saas_applications list(string)
    SaaS application controlled by this ZTNA destination.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ssh_client_certs list(string)
    Configure access-proxy SSH client certificate profile.
    ssh_host_key_validation string
    Enable/disable SSH host key validation. Valid values: disable, enable.
    ssh_host_keys list(string)
    Configure host keys (one or more may be configured).
    tunnel_encryption string
    Tunnel encryption. Valid values: disable, enable.
    type string
    ZTNA destination type. Valid values: on-premise, saas.
    update_if_exist bool
    uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    addresses List<String>
    Address or address group of the ZTNA destination.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    connType String
    Connection type. Valid values: traffic-forwarding, ssh.
    domain String
    Wildcard domain name of the ZTNA destination.
    externalAuth String
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    mappedport String
    Port for communicating with the real server.
    name String
    Destination name.
    objectZtnaDestinationId String
    an identifier for the resource with format {{name}}.
    protocol String
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    saasApplications List<String>
    SaaS application controlled by this ZTNA destination.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sshClientCerts List<String>
    Configure access-proxy SSH client certificate profile.
    sshHostKeyValidation String
    Enable/disable SSH host key validation. Valid values: disable, enable.
    sshHostKeys List<String>
    Configure host keys (one or more may be configured).
    tunnelEncryption String
    Tunnel encryption. Valid values: disable, enable.
    type String
    ZTNA destination type. Valid values: on-premise, saas.
    updateIfExist Boolean
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    addresses string[]
    Address or address group of the ZTNA destination.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    connType string
    Connection type. Valid values: traffic-forwarding, ssh.
    domain string
    Wildcard domain name of the ZTNA destination.
    externalAuth string
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    mappedport string
    Port for communicating with the real server.
    name string
    Destination name.
    objectZtnaDestinationId string
    an identifier for the resource with format {{name}}.
    protocol string
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    saasApplications string[]
    SaaS application controlled by this ZTNA destination.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sshClientCerts string[]
    Configure access-proxy SSH client certificate profile.
    sshHostKeyValidation string
    Enable/disable SSH host key validation. Valid values: disable, enable.
    sshHostKeys string[]
    Configure host keys (one or more may be configured).
    tunnelEncryption string
    Tunnel encryption. Valid values: disable, enable.
    type string
    ZTNA destination type. Valid values: on-premise, saas.
    updateIfExist boolean
    uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    addresses Sequence[str]
    Address or address group of the ZTNA destination.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    conn_type str
    Connection type. Valid values: traffic-forwarding, ssh.
    domain str
    Wildcard domain name of the ZTNA destination.
    external_auth str
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    mappedport str
    Port for communicating with the real server.
    name str
    Destination name.
    object_ztna_destination_id str
    an identifier for the resource with format {{name}}.
    protocol str
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    saas_applications Sequence[str]
    SaaS application controlled by this ZTNA destination.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ssh_client_certs Sequence[str]
    Configure access-proxy SSH client certificate profile.
    ssh_host_key_validation str
    Enable/disable SSH host key validation. Valid values: disable, enable.
    ssh_host_keys Sequence[str]
    Configure host keys (one or more may be configured).
    tunnel_encryption str
    Tunnel encryption. Valid values: disable, enable.
    type str
    ZTNA destination type. Valid values: on-premise, saas.
    update_if_exist bool
    uuid str
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    addresses List<String>
    Address or address group of the ZTNA destination.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    connType String
    Connection type. Valid values: traffic-forwarding, ssh.
    domain String
    Wildcard domain name of the ZTNA destination.
    externalAuth String
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    mappedport String
    Port for communicating with the real server.
    name String
    Destination name.
    objectZtnaDestinationId String
    an identifier for the resource with format {{name}}.
    protocol String
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    saasApplications List<String>
    SaaS application controlled by this ZTNA destination.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sshClientCerts List<String>
    Configure access-proxy SSH client certificate profile.
    sshHostKeyValidation String
    Enable/disable SSH host key validation. Valid values: disable, enable.
    sshHostKeys List<String>
    Configure host keys (one or more may be configured).
    tunnelEncryption String
    Tunnel encryption. Valid values: disable, enable.
    type String
    ZTNA destination type. Valid values: on-premise, saas.
    updateIfExist Boolean
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ObjectZtnaDestination resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ObjectZtnaDestination Resource

    Get an existing ObjectZtnaDestination resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ObjectZtnaDestinationState, opts?: CustomResourceOptions): ObjectZtnaDestination
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        addresses: Optional[Sequence[str]] = None,
        adom: Optional[str] = None,
        conn_type: Optional[str] = None,
        domain: Optional[str] = None,
        external_auth: Optional[str] = None,
        mappedport: Optional[str] = None,
        name: Optional[str] = None,
        object_ztna_destination_id: Optional[str] = None,
        protocol: Optional[str] = None,
        saas_applications: Optional[Sequence[str]] = None,
        scopetype: Optional[str] = None,
        ssh_client_certs: Optional[Sequence[str]] = None,
        ssh_host_key_validation: Optional[str] = None,
        ssh_host_keys: Optional[Sequence[str]] = None,
        tunnel_encryption: Optional[str] = None,
        type: Optional[str] = None,
        update_if_exist: Optional[bool] = None,
        uuid: Optional[str] = None) -> ObjectZtnaDestination
    func GetObjectZtnaDestination(ctx *Context, name string, id IDInput, state *ObjectZtnaDestinationState, opts ...ResourceOption) (*ObjectZtnaDestination, error)
    public static ObjectZtnaDestination Get(string name, Input<string> id, ObjectZtnaDestinationState? state, CustomResourceOptions? opts = null)
    public static ObjectZtnaDestination get(String name, Output<String> id, ObjectZtnaDestinationState state, CustomResourceOptions options)
    resources:  _:    type: fortimanager:ObjectZtnaDestination    get:      id: ${id}
    import {
  to = fortimanager_object_ztna_destination.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Addresses List<string>
    Address or address group of the ZTNA destination.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    ConnType string
    Connection type. Valid values: traffic-forwarding, ssh.
    Domain string
    Wildcard domain name of the ZTNA destination.
    ExternalAuth string
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    Mappedport string
    Port for communicating with the real server.
    Name string
    Destination name.
    ObjectZtnaDestinationId string
    an identifier for the resource with format {{name}}.
    Protocol string
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    SaasApplications List<string>
    SaaS application controlled by this ZTNA destination.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SshClientCerts List<string>
    Configure access-proxy SSH client certificate profile.
    SshHostKeyValidation string
    Enable/disable SSH host key validation. Valid values: disable, enable.
    SshHostKeys List<string>
    Configure host keys (one or more may be configured).
    TunnelEncryption string
    Tunnel encryption. Valid values: disable, enable.
    Type string
    ZTNA destination type. Valid values: on-premise, saas.
    UpdateIfExist bool
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    Addresses []string
    Address or address group of the ZTNA destination.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    ConnType string
    Connection type. Valid values: traffic-forwarding, ssh.
    Domain string
    Wildcard domain name of the ZTNA destination.
    ExternalAuth string
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    Mappedport string
    Port for communicating with the real server.
    Name string
    Destination name.
    ObjectZtnaDestinationId string
    an identifier for the resource with format {{name}}.
    Protocol string
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    SaasApplications []string
    SaaS application controlled by this ZTNA destination.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SshClientCerts []string
    Configure access-proxy SSH client certificate profile.
    SshHostKeyValidation string
    Enable/disable SSH host key validation. Valid values: disable, enable.
    SshHostKeys []string
    Configure host keys (one or more may be configured).
    TunnelEncryption string
    Tunnel encryption. Valid values: disable, enable.
    Type string
    ZTNA destination type. Valid values: on-premise, saas.
    UpdateIfExist bool
    Uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    addresses list(string)
    Address or address group of the ZTNA destination.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    conn_type string
    Connection type. Valid values: traffic-forwarding, ssh.
    domain string
    Wildcard domain name of the ZTNA destination.
    external_auth string
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    mappedport string
    Port for communicating with the real server.
    name string
    Destination name.
    object_ztna_destination_id string
    an identifier for the resource with format {{name}}.
    protocol string
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    saas_applications list(string)
    SaaS application controlled by this ZTNA destination.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ssh_client_certs list(string)
    Configure access-proxy SSH client certificate profile.
    ssh_host_key_validation string
    Enable/disable SSH host key validation. Valid values: disable, enable.
    ssh_host_keys list(string)
    Configure host keys (one or more may be configured).
    tunnel_encryption string
    Tunnel encryption. Valid values: disable, enable.
    type string
    ZTNA destination type. Valid values: on-premise, saas.
    update_if_exist bool
    uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    addresses List<String>
    Address or address group of the ZTNA destination.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    connType String
    Connection type. Valid values: traffic-forwarding, ssh.
    domain String
    Wildcard domain name of the ZTNA destination.
    externalAuth String
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    mappedport String
    Port for communicating with the real server.
    name String
    Destination name.
    objectZtnaDestinationId String
    an identifier for the resource with format {{name}}.
    protocol String
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    saasApplications List<String>
    SaaS application controlled by this ZTNA destination.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sshClientCerts List<String>
    Configure access-proxy SSH client certificate profile.
    sshHostKeyValidation String
    Enable/disable SSH host key validation. Valid values: disable, enable.
    sshHostKeys List<String>
    Configure host keys (one or more may be configured).
    tunnelEncryption String
    Tunnel encryption. Valid values: disable, enable.
    type String
    ZTNA destination type. Valid values: on-premise, saas.
    updateIfExist Boolean
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    addresses string[]
    Address or address group of the ZTNA destination.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    connType string
    Connection type. Valid values: traffic-forwarding, ssh.
    domain string
    Wildcard domain name of the ZTNA destination.
    externalAuth string
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    mappedport string
    Port for communicating with the real server.
    name string
    Destination name.
    objectZtnaDestinationId string
    an identifier for the resource with format {{name}}.
    protocol string
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    saasApplications string[]
    SaaS application controlled by this ZTNA destination.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sshClientCerts string[]
    Configure access-proxy SSH client certificate profile.
    sshHostKeyValidation string
    Enable/disable SSH host key validation. Valid values: disable, enable.
    sshHostKeys string[]
    Configure host keys (one or more may be configured).
    tunnelEncryption string
    Tunnel encryption. Valid values: disable, enable.
    type string
    ZTNA destination type. Valid values: on-premise, saas.
    updateIfExist boolean
    uuid string
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    addresses Sequence[str]
    Address or address group of the ZTNA destination.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    conn_type str
    Connection type. Valid values: traffic-forwarding, ssh.
    domain str
    Wildcard domain name of the ZTNA destination.
    external_auth str
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    mappedport str
    Port for communicating with the real server.
    name str
    Destination name.
    object_ztna_destination_id str
    an identifier for the resource with format {{name}}.
    protocol str
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    saas_applications Sequence[str]
    SaaS application controlled by this ZTNA destination.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    ssh_client_certs Sequence[str]
    Configure access-proxy SSH client certificate profile.
    ssh_host_key_validation str
    Enable/disable SSH host key validation. Valid values: disable, enable.
    ssh_host_keys Sequence[str]
    Configure host keys (one or more may be configured).
    tunnel_encryption str
    Tunnel encryption. Valid values: disable, enable.
    type str
    ZTNA destination type. Valid values: on-premise, saas.
    update_if_exist bool
    uuid str
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
    addresses List<String>
    Address or address group of the ZTNA destination.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    connType String
    Connection type. Valid values: traffic-forwarding, ssh.
    domain String
    Wildcard domain name of the ZTNA destination.
    externalAuth String
    Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
    mappedport String
    Port for communicating with the real server.
    name String
    Destination name.
    objectZtnaDestinationId String
    an identifier for the resource with format {{name}}.
    protocol String
    Protocol type based on IANA numbers. Valid values: TCP, UDP, ALL.
    saasApplications List<String>
    SaaS application controlled by this ZTNA destination.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sshClientCerts List<String>
    Configure access-proxy SSH client certificate profile.
    sshHostKeyValidation String
    Enable/disable SSH host key validation. Valid values: disable, enable.
    sshHostKeys List<String>
    Configure host keys (one or more may be configured).
    tunnelEncryption String
    Tunnel encryption. Valid values: disable, enable.
    type String
    ZTNA destination type. Valid values: on-premise, saas.
    updateIfExist Boolean
    uuid String
    Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

    Import

    ObjectZtna Destination can be imported using any of these accepted formats:

    $ export “FORTIMANAGER_IMPORT_TABLE”=“true”

    $ pulumi import fortimanager:index/objectZtnaDestination:ObjectZtnaDestination labelname {{name}}

    $ unset “FORTIMANAGER_IMPORT_TABLE”

    -> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortimanager fortinetdev/terraform-provider-fortimanager
    License
    Notes
    This Pulumi package is based on the fortimanager Terraform Provider.
    Viewing docs for fortimanager 1.18.0
    published on Friday, Jul 31, 2026 by fortinetdev
    Schema (JSON)
    fortinetdev/terraform-provider-fortimanager

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial