Skip to main content
elyamania
Explorer
April 25, 2021
Solved

Change DNS configuration from Fortimanager

  • April 25, 2021
  • 1 reply
  • 5692 views

We have +700 Firewalls Fortigate managed with the Fortimanager and the FWs are configured with DNS and now we want to change the DNS IP adress in all the FWs Hwo to change the configuration of the DNS in devices (Firewalls) from the fortimanager?

    Best answer by sw2090

    The only way to do that - assuming you want the same DNS settngs on all FGT - would be to assign them to a provisioning template and enable the dns module in there and set it up there.

    1 reply

    sw2090
    SuperUser
    sw2090Answer
    SuperUser
    April 29, 2021

    The only way to do that - assuming you want the same DNS settngs on all FGT - would be to assign them to a provisioning template and enable the dns module in there and set it up there.

    Yurisk
    SuperUser
    SuperUser
    April 29, 2021

    I'd suggest to look into scripting this on FMG side - this is exactly the use case for scripting. You can run the same CLI script on all Fortigates or run TCL script on device database then push to all the Fortigates.

    Example to start reading: Administration Guide | FortiManager 6.2.0 | Fortinet Documentation Library

    Also some experience sharing here Useful script example on Fortimanager | Fortinet Technical Discussion Forums

     

     

    sw2090
    SuperUser
    SuperUser
    April 29, 2021

    why should you script that if there is a more easier way? This can simply be done using provisioning template in FMG Device Manager. This is exactly one of the cases provisioning templates are there for.