Export / import objects from one ADOM to another?

Hello Rainer,

you can try this one:

On FortiManager ssh session you can use:

'exec fmpolicy clone-adom-object ' command.

It is a little bit difficult, because each parameter you must enter from list which is showing you when type you a '?' on console.

I have just one ADOM for one Firmware version and I can just only clone object inside ADOM. It looks for me as follow:

exec fmpolicy clone-adom-object 3 140 "Objectname which I want copy" 3 "new name of copied object",

where:

exec fmpolicy clone-adom-object - base command

with parameters:

3 - source ADOM - id of my ADOM (obtained with '?')

140 - it is category ID (I don't know if it is a standard ID schema, but for me it's a "firewall addresses" (obtained with '?')

"Objectname which I want copy" - named object in ADOM

3 - destination ADOM - id of my ADOM (obtained with '?')

"new name of copied object" - new object name

Hello Rainer, 

I am looking for a solution how to use firewall objects from one ADOM in another one.

Is there a possibility to share objects?

Or is it possible to export the objects database and import it in the other ADOM?

 

execute fmpolicy clone-adom-object ?  ---->Clone ADOM object to another ADOM.

This commands is only useful when you are looking for duplicate  couple of objects because you need to copy each objects individually. (Also the Source and Destination ADOM have to be on the same version)

I would suggest connect another FGT to the Old ADOM , push the PP to it then move the FGT to the new ADOM. Retrieve the config and then import the PP to the New ADOM.  (Of course we need to pay special attention to FGT,FMG ,and ADOMs Versions )

Let me know if  you find this solution useful. 

CHeers 

if you need it in more than one adom in FMG you could also promote these to the global adom so you can assign them to any adom you have enabled for that in  the gobal one.

Just keep in mind to assign ALL objects because otherwise objects that have no reference in the selected adom will not be assigned.

We once did that with all our UTM Filter profiles and Security Profile Groups and also web rating overrides.

You also could download one revision of a fgt in the adom that has the objects from FMG device manager. This contains devic config + policy package so has all you objects. Then find the objects in there and copy them and the corresponding headers (e.g. "config firewall address" for adress objects) to a text file and then use that to create a script in fmg device manager in the adom you need the obects and run that script against the adom db to add the objects.