Skip to main content
aagrafi1
Explorer
January 30, 2023
Solved

Migrating a Policy Package

  • January 30, 2023
  • 1 reply
  • 3349 views

Hello,

 

I want to migrate a Policy Package from one FMG to another. I have seen that it is possible to export a Policy Package to a CSV file, but I do not see any option in the FMG to import a package (from a CSV file or whatever).

 

So, if I want to migrate a policy package from one FMG to another, is there any tool that does this automation? Or, what is the recommended way of doing that?

 

Thanks

Best answer by Richie_C

Hi

 

You can use the execute fmpolicy print-adom-package-assignment <adom> <policy package/template name>

 

https://docs.fortinet.com/document/fortimanager/7.2.1/cli-reference/43841/fmpolicy#fmpolicy_print-adom-package

 

The command would print out the policy package in FortiOS CLI format. When you have the CLI config, you could use a CLI script to run on your new policy package. This would create the policy package on your other FortiManager device.

 

For this to work you would also need to import all of the objects/services/interfaces etc. However, there are also commands to extract these objects. Further details can be found in the link i provided.

 

I hope that helps.

Thanks

Richard

1 reply

Richie_C
Staff
Richie_CAnswer
Staff
January 30, 2023

Hi

 

You can use the execute fmpolicy print-adom-package-assignment <adom> <policy package/template name>

 

https://docs.fortinet.com/document/fortimanager/7.2.1/cli-reference/43841/fmpolicy#fmpolicy_print-adom-package

 

The command would print out the policy package in FortiOS CLI format. When you have the CLI config, you could use a CLI script to run on your new policy package. This would create the policy package on your other FortiManager device.

 

For this to work you would also need to import all of the objects/services/interfaces etc. However, there are also commands to extract these objects. Further details can be found in the link i provided.

 

I hope that helps.

Thanks

Richard

aagrafi1
aagrafi1Author
Explorer
January 31, 2023

Thanks Richard. I think this is a good start for the migration.