Dear users,
Just a question. Yesterday I have set up the Fortimanager and imported some Fortigates into it.
All went well except the policy packages. All of them have status modified.
I know I can push the policy back to the FortiGate to get it in sync but I'm afraid that it will broke something
Is there a quick way to fix that? How would you fix the modified packages to get them in sync
Hey ZafirFX,
the policy package is likely showing modified because you imported multiple FortiGates.
The logic is roughly as follows:
- import first FGT, create a slew of objects and a policy package
- import second FGT, including its objects
-> some of those objects already exist from import of the first FortiGate, and will be modified (changed to dynamic/have some definitions updated/etc)
-> if ANY of the modified objects is used in the first policy package, that package is displayed as modified
You can start the Installation Wizard, and then instead of installing, click on the Installation Preview (depending on firmware it's a table/log icon or an actual Preview button).
Check that for what changes FMG wants to push to the FortiGate(s).
-> if this is the first installation, a large number of objects will be deleted; this is expected as any unused objects will be removed, as Toshi mentioned before
-> pay attention to the interfaces, policies and routing, that they don't get touched
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
