Skip to main content
singhl
Staff
singhl
Staff
October 24, 2024

Technical Tip: Bulk retrieve device configuration from managed devices

  • October 24, 2024
  • 0 replies
  • 1660 views
Description This article describes how to retrieve configuration from multiple FortiGate devices by running a script. Script will create a temporary address object on FortiGate directly and subsequently trigger a retrieve of config. In next policy package install, the temporary object will be deleted, as it will not be in use.
Scope FortiManager.
Solution
  1. Create a CLI script in FortiManager and set option to run script on 'Remote FortiGate Directly (via CLI)'.

  2. Example of the contents that can be used in the script:

 

config firewall address
    edit "Temp-Retrieve_address"
        set type fqdn
        set comment "Added to trigger Auto-update from FortiGate, this can be deleted"
        set fqdn "fmg_retrieve.fortimanager.net"
    next
end

  1. Run this script on multiple FortiGate devices. It is recommended not to run on more than 200 devices at once to avoid any performance issues.

  2. Once the script has been run successfully, a new revision will be created for the managed device.

retrieve_script.png

 

Note: This method requires FortiManager to have auto-update enabled:

 

config system admin setting

    set auto-update enable

end

 

Related articles:

Technical Tip: CLI Script behavior to run in FortiManager

Technical Tip: How to do bulk retrieve config in FortiManager using a script
    Terms & ConditionsAccessibility statement