Skip to main content
Hermine
Explorer
May 20, 2022
Solved

Audit

  • May 20, 2022
  • 2 replies
  • 2175 views

Hello, I would like to have a command that can retrieve the following information: password policy, http, https, telnet, ssh, snmp v3, default account, updated, OS version, ntp, anti spoofing, syslog, statefull

 

Best answer by seshuganesh

Hi Team,

 

You can follow this:

password policy:

config system password-policy

show full

 

http, https, telnet, ssh, snmp v3,:

I assume you would like to know whether these services are allowed for that interface or not, for this you can execute these commands:

config sys interface

edit <specific port>

show full

 

Once you execute these commands you will be able to see what are services allowed under "set allow access" field

 

default account:

I suspect you would like to know all the admin accounts in fortigate firewall, you can use this commands for the same:

config sys admin

show full

 

You can also see the associated access profiles for administrators

 

updated:

I believe you want to know the versions of modules in fortigate firewall:

 get system auto-update versions

 

anti spoofing:

For anti spoofing and stateful, you can check this command:

config system settings
     set asymroute enable
end

 

syslog:

For sys log related information you can check this:

https://community.fortinet.com/t5/FortiGate/Technical-Note-Configuring-multiple-SYSLOG-servers/ta-p/194117

 

 

OS version:

Execute this command to see the version of fortigate firewall:

get sys status

 

ntp:

config sys ntp

show full

 

 

 

2 replies

seshuganesh
Staff
Staff
May 20, 2022

Hi Team,

 

You can follow this:

password policy:

config system password-policy

show full

 

http, https, telnet, ssh, snmp v3,:

I assume you would like to know whether these services are allowed for that interface or not, for this you can execute these commands:

config sys interface

edit <specific port>

show full

 

Once you execute these commands you will be able to see what are services allowed under "set allow access" field

 

default account:

I suspect you would like to know all the admin accounts in fortigate firewall, you can use this commands for the same:

config sys admin

show full

 

You can also see the associated access profiles for administrators

 

updated:

I believe you want to know the versions of modules in fortigate firewall:

 get system auto-update versions

 

anti spoofing:

For anti spoofing and stateful, you can check this command:

config system settings
     set asymroute enable
end

 

syslog:

For sys log related information you can check this:

https://community.fortinet.com/t5/FortiGate/Technical-Note-Configuring-multiple-SYSLOG-servers/ta-p/194117

 

 

OS version:

Execute this command to see the version of fortigate firewall:

get sys status

 

ntp:

config sys ntp

show full

 

 

 

Hermine
HermineAuthor
Explorer
May 20, 2022

thank you so much

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.