Skip to main content
MohamedYousri
New Member
May 7, 2021
Question

FortiGate 60F || How can i import/create useres in Bulk ?!

  • May 7, 2021
  • 1 reply
  • 8328 views

Hello All,  We got FortiGate 60F V6.2.4 , and need to import all useres (O365 is our source list for users) to the VPN.  I managed to create useres manually at Users & Device/User Definition and worked normally but i have to add more than 200 other users.  Can't find the settings to import from csv file at once.  Any help please ?  Regards,  Mohamed 

    1 reply

    emnoc
    New Member
    May 7, 2021

    if you have o365 you have MS-AD services. Just define a user-group that matches the MS group and avoid adding users. Adding users manually creates overhead for add/changes/deletions. if you tie a user group to a users group in fortios you have less overhead and vpn is controlled centrally at MS AD ( i.e remove the user from the group, lock the account,etc......)

     

    If you do not want to do MS-AD ldap , radius ( NPS ) would be the next best great thing.

     

    Ken Felix

     

    MohamedYousri
    New Member
    May 7, 2021

    emnoc wrote:

    if you have o365 you have MS-AD services. Just define a user-group that matches the MS group and avoid adding users. Adding users manually creates overhead for add/changes/deletions. if you tie a user group to a users group in fortios you have less overhead and vpn is controlled centrally at MS AD ( i.e remove the user from the group, lock the account,etc......)

     

    If you do not want to do MS-AD ldap , radius ( NPS ) would be the next best great thing.

     

    Ken Felix

     

    Thanks for your feedback, but we don't want integration with MS AD.  Is there any way to just import useres via csv file ?? 

    sw2090
    SuperUser
    SuperUser
    May 10, 2021

    Well if you have o365 I'd also suggest using AD integration for that's the easiest and most elegant solution for this.

    Importing usere to the FGT would require you to write some converter script or app to generate the corresponding FortiOS Cli-Script output to import into thr FGT. Also if a User changes passwort or is deleted you have to perform this in your AD and on your FGT...