CLI for locating Firewall Policies or Address/Groups whose members match a searched address

Forum|Forum|2 years ago
May 20, 2024
6 replies
3425 views

Hello!

Fortigate GUI's 'Policy & Objects > Firewall Policy' (attachment) and 'Policy & Objects > Addresses' has a "Search" field to locate a firewall policy or Address Group containing within it (either explicitly, or implicitly, within address range or subnet) the specified address.

Two questions:

is there a corresponding CLI command for either variant?
is there a corresponding API call for either variant?

(I'm NOT seeking workarounds - merely answer(s) to above.)

Thanks!

FortiGate

ozkanaltas

Valued Contributor III

Hello @Fern-X

You can use grep command for that question. For example;

show firewall policy | grep -f Object_NAME

This command searches your query in the policy configuration.

For API, you can use the filtering feature.

blob_chrome-extension___fdpohaocaechififmbbbbbknoalclacl_e502d0e9-706a-488d-b1cf-540bfa73b609.png

PS.

Also, I found one more thing about API, but didn't try it before.

/api/v2/monitor/system/global-search

Fern-XAuthor

New Member

Hi ozkanaltas !

> show firewall policy | grep -f Object_NAME

no, this shows Tables matching specified regexp pattern, not an IP addresses within within a Address or Address Group instance. Look at my screenshot - yours won't find what I've shown.