FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
bvagadia
Staff
Staff
Article Id 199281
Description This article describes that workspace mode allows administrators to make a batch of changes that are not implemented until the transaction is committed.
Scope FortiOS.
Solution

When an object is edited in workspace mode it is locked, preventing other administrators from editing that object. A warning message will be shown to let the administrator know that the object is currently being configured in another transaction.

All administrators can use workspace mode; the permissions in workspace mode are the same as defined in the account profile.

 

A workspace mode transaction times out after five minutes if there is no activity. When a transaction times out, all changes are discarded. A warning message will be shown to let the administrator know that a timeout is imminent, or has already happened:

 

config transaction id=1 will expire in 30 seconds

config transaction id=1 will expire in 20 seconds

config transaction id=1 will expire in 10 seconds

config transaction id=1 has expired

 

To use workspace mode:

 

  1. Start workspace mode:

 

execute config-transaction start

 

Once in workspace mode, the administrator can make configuration changes, all of which are made in a local CLI process that is not viewable by other processes.

 

  1. Commit configuration changes:

     

    execute config-transaction commit

     

    After performing the commit, the changes are available for all other processes and are also made in the kernel.

     

     

  2. Abort configuration changes:

     

    execute config-transaction abort

     

    If changes are aborted, no changes are made to the current configuration or the kernel.

     

Related document:

Workspace mode.