Technical Tip :How to capture configuration push f...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 366512

Description

This article describes how to see the configuration changes on FortiGate CLI when it is pushed from FortiManager.

Scope

FortiGate.

Solution

In the below example, a firewall policy configuration is pushed from FortiManager.

To record the configuration change, run the below commands on FortiGate CLI:

diagnose debug reset
diagnose debug cli 7
diagnose debug enable

Below is the output:

To disable the debug, use the following commands:

diag debug disable

diag debug reset

Note:

This will NOT capture the TCL script push from FortiManager because the TCL script uses SSH instead of the regular FGFM tunnel to connect to the FortiGate (which is the case of config/policy/CLI Script push).

458

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip :How to capture configuration push from FortiManager on FortiGate CLI

You are leaving our website