Technical Tip: How to Manually run a Security Rating report in v7.6+

In v7.6.0, if a manual Security Rating report is required outside the set run schedule, the following command can be used:

diagnose report-runner-v2 security-rating trigger

Example CLI output:

FGT # diagnose report-runner-v2 security-rating trigger
Successfully triggered full Security Rating check suite. Please give time for all the checks to finish running.

To clear all previous Security Rating v2 results, the following command can be used:

diagnose report-runner-v2 security-rating clean

Example CLI Output:

FGT # diagnose report-runner-v2 security-rating clean

Deleted Security Rating v2 results.

Note: In previous versions, the following command was used:

diagnose report-runner trigger security-rating-reports

diagnose report-runner trigger  
security-rating-reports    Execute the Security Rating reports (Security Posture, Fabric Coverage, Optimization).

To clear/delete the report:

diagnose report-runner clean 
Deleted temporary result storage
Deleted disk result storage
Deleted all Report Runner results

At this time, the command is still available in the CLI. However, it is being deprecated and will not work. The following error is expected:

diagnose report-runner trigger security-rating-reports
Command fail. Return code -1

Note 1:

Starting from FortiOS v7.6.2, physical FortiGates with 2GB of RAM no longer support Security Rating. For more information, refer to the release notes: 2 GB RAM FortiGate models no longer support Security Rating and Security Fabric topology

Note 2:

Beginning with v7.6.5, the security rating tooltips have been enhanced to include a footer action that allows users to view all insights associated with a configuration object. They also offer per-insight controls, letting users hide specific insights directly from the tooltip.

For more details, refer to Enhanced security rating tooltip controls.