Skip to main content
A
Anonymous_User
Contributor
January 27, 2008
Question

How to remove an address?

  • January 27, 2008
  • 5 replies
  • 25473 views
If I go into the Fortigate under: Firewall -> Address How do I REMOVE an address that I put in there? I only see Create New and Edit options.

    5 replies

    abelio
    SuperUser
    abelio
    SuperUser
    January 27, 2008
    If that object (address) is used in any other place of the configuration (for example in one firewall policy), you cannot delete until you free it
    MasterBratac
    MasterBratac
    New Member
    January 28, 2008
    A little question ... does anybody know if its possible to diplay a list of configuration entrys, that uses an specific object ?
    abelio
    SuperUser
    abelio
    SuperUser
    January 28, 2008
    not yet; meanwhile you could save your conf in a text file and search through it for object matches
    A
    Anonymous_UserAuthor
    Contributor
    January 27, 2008
    Ah, I see now. I had a spot where it was at. It would be nice if it could tell you where you had it in (fortunately I only have like 5 policies right now) but I can see in a real busy setup it would be difficult. Thanks very much!!!!!
    Darune
    Darune
    New Member
    January 30, 2008
    There is one way, but it' s a diagnostic command, so it' s not supported and may be a little tricky. Basically you go: diagnose sys checkused <path to item in CLI>.<attribute name> <value of attribute> So for example if I wanted to check where an interface named " test_intf" was used I would type in: diag sys checkused system.interface.name test_intf The path to the item in the CLI can be gotten from the cli: eg. Config system interface = system.interface Config firewall vip = firewall.vip Config system dhcp server = system.dhcp.server The attribute name is the " key" for the configuration table, so " name" in most cases, " id" in others. The output can be a little cryptic, and may show some hidden entries that are created automatically (like the VIP' s for DNS forwarding). So this command can' t solve all your problems, but it might help a bit.
    abelio
    SuperUser
    abelio
    SuperUser
    January 30, 2008
    nice command thanks!
    A
    Anonymous_UserAuthor
    Contributor
    May 15, 2008
    Any idea why I' m not getting output from this command? BMH-FIREWALL # diagnose sys checkused firewall.policy edit.13 BMH-FIREWALL # diagnose sys checkused firewall.policy edit 13 command parse error before ' 13' Command fail. Return code -61 BMH-FIREWALL # diagnose sys checkused firewall.policy edit.72 BMH-FIREWALL #
    rwpatterson
    rwpatterson
    New Member
    May 15, 2008
    Possibly because a policy is not used in anything else... A group is used in a policy, so you may see something there, but the policy is the end game. You can always remove one, no dependencies.
    A
    Anonymous_UserAuthor
    Contributor
    May 15, 2008
    Not getting anything there either: BMH-FIREWALL # diagnose sys checkused firewall.addrgrp rdp.allow BMH-FIREWALL # diagnose sys checkused firewall.addrgrp rdp.allow BMH-FIREWALL # diagnose sys checkused firewall.addrgrp rdp.allowed BMH-FIREWALL # I just put in a ticket. Let you know next week sometime. :D
    Terms & ConditionsAccessibility statement