Skip to main content
filiaks1
filiaks1
Explorer III
December 17, 2025
Solved

Does FortiADC support Declarative API for VirtualServers?

  • December 17, 2025
  • 5 replies
  • 449 views

Hello Everyone,

 

I see that  /api/declarative is desribed in fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/7a380719-1f54-11ed-9eba-fa163e15d75b/fortiadc-v7.1.0-handbook.pdf

 

The example is for posting system configuration (Simmilar to F5 DO declarative onboarding) but what about Virtual Servers to be created declaratively ? Something like F5 AS3 way to deploy Virtual Servers.

 

Also is there such options for the WAF?

Best answer by filiaks1

After playing a while with FortiADC and being granted access to the Developer Portal FortiADC Declarative API is a gem ! It can be used to automate system config and VDOM creation and then Declarative API can be used to populate the data for each individual VDOM as if there is a need for multitenancy. In each VDOM declaration there will be the needed config for the virtual servers.

 

For system settings it is like ZTP feature the only thing is FortiADC should DHCP on the management/first interface enabled by default in the future versions and this becomes ZTP provisioning tool. 

 

You can even do manual changes and the fortiadc is aware of them and you can just GET the new config as to save it in FortiADC declaration as to keep the changes.

 

Fortinet really needs to publicly advertise this feature more and I hope for the WAF there to be something like this in the future where you can push the full policy in a single API declaration. 

5 replies

Jean-Philippe_P
Staff & Editor
Jean-Philippe_P
Staff & Editor
December 20, 2025

Hello filiaks1, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Staff & Editor
Jean-Philippe_P
Staff & Editor
December 22, 2025

Hello,

 

We are still looking for an answer to your question.

 

We will come back to you ASAP.

Jean-Philippe - Fortinet Community Team
filiaks1
filiaks1Author
Explorer III
January 4, 2026

Hey @Jean-Philippe_P  no need to come back at me ASAP but as "/api/declarative " is described in the fortiadc docks there should be some more info about it :)

 

Does it support VirtualServer definitions so that automations like terraform or ansible to send just 1 API call and not 10 to configure a virtual server or if when a new virtualserver is added the system to not need to the full config again to be send and validated but just the part having the new virtualserver (to keep a state) etc.

    Jean-Philippe_P
    Staff & Editor
    Jean-Philippe_P
    Staff & Editor
    January 5, 2026

    Okay filiaks1,

     

    I have forwarded your request to our docs Team so they can update the doc with this new information if possible :)

     

    I will let you know!

    Jean-Philippe - Fortinet Community Team
      filiaks1
      filiaks1Author
      Explorer III
      January 5, 2026

      Thanks @Jean-Philippe_P 

        filiaks1
        filiaks1AuthorAnswer
        Explorer III
        June 9, 2026

        After playing a while with FortiADC and being granted access to the Developer Portal FortiADC Declarative API is a gem ! It can be used to automate system config and VDOM creation and then Declarative API can be used to populate the data for each individual VDOM as if there is a need for multitenancy. In each VDOM declaration there will be the needed config for the virtual servers.

         

        For system settings it is like ZTP feature the only thing is FortiADC should DHCP on the management/first interface enabled by default in the future versions and this becomes ZTP provisioning tool. 

         

        You can even do manual changes and the fortiadc is aware of them and you can just GET the new config as to save it in FortiADC declaration as to keep the changes.

         

        Fortinet really needs to publicly advertise this feature more and I hope for the WAF there to be something like this in the future where you can push the full policy in a single API declaration. 

        filiaks1
        filiaks1Author
        Explorer III
        June 11, 2026

        Example cool GET request as with operations parameter you can get the date only for vdom/virtualServer/realServer/realServerPool and you can use vdom parameter to limit the data only for particular Vdom.

         

        Also async set to true or false will return reply or id that then an automation can use “/api/declarative?id=28962”.

         

         

        Terms & ConditionsAccessibility statement