Skip to main content
us_art
New Member
December 2, 2021
Solved

Random overwrite of interface settings

  • December 2, 2021
  • 3 replies
  • 2907 views

Hi everyone!

I have FG300 and FMG version 6.2.7

Such a problem has recently emerged:

I change the interface settings on the device, in particular, add networks to the exceptions on the captive portal. Apply this. 

     config user security-exempt-list
     edit "DMZ-exempt-list"
     config rule
     edit 1
     set srcaddr "DMZ Subnet" "gatchina" "IPsec subnet" "main" "medical equipment" "mgmt" "phone" "printers" "Remote access" "servers" "other devices network"
     next
     end

Everything passes correctly. Next, I change any policy (only policy, not device settings) I apply changes and eventually get that the interface settings are returned to their original position!

config user security-exempt-list
2: edit "DMZ-exempt-list"
3: config rule
4: edit 1
5: set srcaddr "DMZ Subnet" "gatchina" "IPsec subnet" "main" "medical equipment" "mgmt" "phone" "printers" "Remote access" "servers"
6: next
7: end
8: next
9:end
10:config firewall policy
11: edit 13
12: unset status
13: next
14:end

Has anyone encountered anything like this?

Best answer by us_art

The problem was solved by importing policies from the FG, with their replacement on the FMG.

3 replies

us_art
us_artAuthorAnswer
New Member
December 7, 2021

The problem was solved by importing policies from the FG, with their replacement on the FMG.

sw2090
SuperUser
SuperUser
December 7, 2021

yeah if you change settings ona managed FGT you have to retrieve the config in FMG afterwards. If you don't FMG will override those changes when you roll out device config or poicy package next time.

us_art
us_artAuthor
New Member
December 7, 2021

I haven't been setting up the FG on its own for a long time, only from FMG, that's why I was surprised that FMG stubbornly inserted the old interface settings. Perhaps I missed the moment when FG, do not sync the settings for some reason.. 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!