Skip to main content
ychia
Staff
Staff
October 10, 2024

Technical Tip: Using CLI command to check the firewall policy creation date and time

  • October 10, 2024
  • 0 replies
  • 4094 views
Description This article describes how to check the date and time of the firewall policy creation using the CLI command.
Scope FortiGate.
Solution

SSH into the FortiGate and run the following command:

 

execute log filter device 0
execute log filter category 1  

execute log filter field msg "Add firewall.policy 4"
execute log display

 

Note:

It is possible to choose from multiple categories 0: traffic 1: event 2: utm-virus:

 

auditlog.png

 

Note:

The above will only display the system event of the IPv4 firewall policy creation.

 

Sample of the logs output:

 

Executelogdisplay.JPG

 

The output indicates that the firewall policy 'abc1010' was created on Oct 10, 2024, 13:07:20 FortiGate local timezone.

 

Related articles:
Displaying logs via FortiGate's CLI