Skip to main content
abdulmoiz2006
New Member
June 22, 2021
Solved

is there a option to backup FortiGates using FortiManager?

  • June 22, 2021
  • 1 reply
  • 15033 views

i have around 100 FGT's configured under Fortimanager and I thought it would be better to have a backup config for all the FGT's wondering if there is an option to do that at once using FMG?

Best answer by sw2090

FortiManager does that implicitely. It has several revisions of the config of every FGT that is currently managed by it. 

So if you do a regular backup of your FMG (replica of the complete vm if it is one like we do) and regularly create a backup file from within fmg you should have it all in there.

 

We only use the default policy package so the only thing that differs per FGT is the device config. The rest is just interface/address mappings in the defaut policy package.

 

If a fortigate would die I could export the last known config relase out of FMG and restore it onto the replacement unit. Then that unit could work from the spot. If replaced by the same you just need to replace the serial in FMG with the new one. If it is different model you would have to add the replacement one as new unit and redo all the mappings. 

1 reply

sw2090
SuperUser
sw2090Answer
SuperUser
July 8, 2021

FortiManager does that implicitely. It has several revisions of the config of every FGT that is currently managed by it. 

So if you do a regular backup of your FMG (replica of the complete vm if it is one like we do) and regularly create a backup file from within fmg you should have it all in there.

 

We only use the default policy package so the only thing that differs per FGT is the device config. The rest is just interface/address mappings in the defaut policy package.

 

If a fortigate would die I could export the last known config relase out of FMG and restore it onto the replacement unit. Then that unit could work from the spot. If replaced by the same you just need to replace the serial in FMG with the new one. If it is different model you would have to add the replacement one as new unit and redo all the mappings.