Skip to main content
A
Anonymous_User
Contributor III
March 7, 2011
Question

Command to fetch Firewall COnfiguration.

  • March 7, 2011
  • 8 replies
  • 10916 views
Hi All, I' m trying to get the complete firewall configuration for Fortigate Firewall. Can anyone tell me what the command i should use for that. Right now i' m using " show full-configuration" command. It is showing the configuration along with banners,disclaimers and all. But i dont want to see all those unnecessary stuff. In short, I would like to see the actual configuration with out banners,disclaimers etc.. Please help. Thanks in advance. With Best Regards, Mahi

    8 replies

    Jan_Scholten
    Jan_Scholten
    New Member
    March 7, 2011
    just " show" ?
    rwpatterson
    rwpatterson
    New Member
    March 7, 2011
    Perhaps make a backup of the unit without a password. Open with a text editor.
    A
    Anonymous_UserAuthor
    Contributor III
    March 14, 2011
    Thanks for your quick response. Here is the result of " show" ? # show alertemail alert e-mail configuration antivirus antivirus configuration firewall firewall gui gui imp2p imp2p ips ips log log router router spamfilter spamfilter system system user user vpn vpn webfilter webfilter full-configuration show full configuration please help. Thanks in advance. Best Regards, Mahi
    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    March 14, 2011
    Mahi, Bob meant you should enter " show" without any trailing arguments. If you enter " show" , RETURN, then you get the configuration changes compared to factory default. If you enter " show full" , RETURN, then you get the full config with all settings (more or less). Maybe you can cut and paste from the screen. I don' t know what you mean with " banners, disclaimers and all" which you get along with the output of this command - there are no banners...just run the command from a ssh login shell. The config file itself, if downloaded unencrypted, contains the output of the " show" command. --- if you enter " show ?" then you evoke the help for the " show" command - the arguments you can use to specify what range of the config you want to see. --- HTH. If not, please specify what you are looking for.
    A
    Anonymous_UserAuthor
    Contributor III
    March 31, 2011
    Hi, Thanks to one and all for your responses. Sorry for my late response. The show command is working well and it solved my purpose. I tried this with Fortigate 3600A model and it worked . But forigate have many other models like Fortigate-60C,80-C etc. I just want to know whether this " show" command will work irrespective of model and OS version. In short, will this command work for all models and os versions... Please let me know. Thanks in advance. With Best Regards, Mahi
    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    March 31, 2011
    Yes, it will. Hasn' t changed since v2.50 AFAIK...
    A
    Anonymous_UserAuthor
    Contributor III
    March 31, 2011
    Ok Ede...thanks for your prompt response.. With Regards, Mahi
    Jack_Gerbs
    Jack_Gerbs
    New Member
    May 17, 2011
    You can use the get command to see all avaialble options in the config.
    MikePruett
    MikePruett
    New Member
    September 4, 2014
    You can do get ? and it will show you the things you are able to pull. I have always just backed up the config so I can use notepad+ to scroll through and have some uniformity to it. Not really what you are asking for though.
    Terms & ConditionsAccessibility statement