Staff

Technical Tip: Export vulnerability status of devices managed by FortiManager

Description

This article describes how to export a list of vulnerabilities for devices managed in FortiManager.

Scope

FortiManager v7.6 and above.

Solution

The FortiManager GUI shows the list of vulnerable devices, as shown in the image below.

However, there is no option to export this chart from the GUI. There are two ways to export the list of vulnerabilities:

In text format using the following CLI command, where 'root' is the name of the ADOM:

diagnose dvm psirt device root

Using postman to send an API request and exporting the response in a table format:

API Request to fetch data from FortiManager (here, 'root' is the name of the ADOM):

{
  "method": "get",
  "params": [
    {
      "url":"pm/config/adom/root/_psirt/data/",
      "group-type":0
    }
  ],
  "session": "{{session}}"
}

Add a 'Post-response' script under the 'Scripts' tab of postman. Find the API request with the script here - FMG_API_PSIRT.
Run the request and check response under the 'Visualization' tab.
Select the 'Get Report HTML to Save' button and then 'Select All Text'. This should copy the text automatically.
If auto-copy did not work, copy the highlighted text manually.
Paste it into a new text file and save it as an '.html' file. For example, psirt_report.html.

Sign up