Skip to main content
radebebek
radebebek
New Member
November 18, 2021
Solved

Can't remove unused object from FortiManager.

  • November 18, 2021
  • 2 replies
  • 7089 views

Hi all,

 

I have problem with several objects on FortiManager:

These objects I used for SSL-VPN and I decide that remove that option.

So I remove SSL-VPN settings, and also all settings in policy package but when I tray

remove users, user groups and LDAP Server, I receive information that objects is used somewhere. 

When I click to see where is object used, I get No record found and I cant remove that object.

How can I delete these objects at all?

 

Thanks

radebebek_0-1637233628559.png

radebebek_1-1637233646480.png

 

 

 

 

 

 

 

 

Best answer by radebebek

This Help:

Go to Policy&Object -> Object Configruation -> Tools -> Display option-> Check all
After that, 

Go to CLI only objects > search for user

Choose local CLI configuration >search for the user you want to remove

2 replies

Debbie_FTNT
Staff & Editor
Debbie_FTNT
Staff & Editor
November 18, 2021

Hi @radebebek,

is it possible that the user group is used in some admin configuration on some FortiGate to allow admins to log in with their LDAP credentials?
This would not show as reference, as admin settings are Device Manager config, not Policy&Objects config, but could still prevent deletion, as there are implicit dependencies in place.

In addition, if for some reason you can't find references for the LDAP server configuration in FortiManager, you could check the FortiGate(s) this LDAP server was pushed to and determine if there is any config outside the purview of FortiManager that still uses the configuration and might be preventing deletion.

If you are still unsure, you can raise a ticket with the FortiManager team to get further assistance :).

radebebek
radebebekAuthorAnswer
New Member
January 9, 2022

This Help:

Go to Policy&Object -> Object Configruation -> Tools -> Display option-> Check all
After that, 

Go to CLI only objects > search for user

Choose local CLI configuration >search for the user you want to remove

Terms & ConditionsAccessibility statement