vinceneil666-01

Explorer II

Question

ZTP, cli pre run, templates and all that stuff.

Forum|Forum|2 years ago
March 4, 2024
2 replies
3221 views

I have a on-prem Fortimanager and Analyzer - currently working on setting up a poc for a larger enviroment with just Fortigates (no ap or switches).

What I am trying to find, is some kind of description or even av process drawing of the whole ZTP process. That is, I know the base of it, starting with a blue print, attaching my cli-pre run, system template..etc etc.

But it would be nice to get some info on what exactley happens when. For example, in my blueprint I attach a policy set to a device group - so I will of course assume that "place device in group" is run before the policy push. But exactley when is the policy push ? after the cli-templates ? .. and within a cli group, what is the running order ? ..and so on..

Does anyone have any details on the whole process ?

Staff

Hi @vinceneil666-01,

As, this is a huge topic I would suggest to review some articles about it:

https://community.fortinet.com/t5/FortiManager/Technical-Tip-ZTP-basic-configuration-and-troubleshooting-for-a/ta-p/211735

https://community.fortinet.com/t5/FortiManager/Technical-Tip-ZTP-basic-configuration-and-troubleshooting-for-a/ta-p/211765

https://docs.fortinet.com/document/fortimanager/7.4.0/new-features/223479/auto-link-setting-is-exposed-to-control-configuration-installation-during-ztp-7-4-1

https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/155479/zero-touch-and-low-touch-provisioning

https://docs.fortinet.com/document/fortimanager/7.2.0/new-features/827495/perform-installation-to-apply-jinja-template-configurations-to-branches

https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/90326/example-of-adding-an-offline-device-by-pre-shared-key

https://docs.fortinet.com/document/fortimanager/7.4.0/new-features/547123/internet-service-database-update-occurs-only-if-specific-policy-objects-require-a-fortiguard-update-7-4-1

Best,

Staff

Hi @vinceneil666-01 ,

You may take a look on the docs for the sequence process generally:

https://docs.fortinet.com/document/fortimanager/7.2.4/administration-guide/680244/sequence-of-operations-for-installation-to-managed-devices

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.

Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.

Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!