Description | This article describes how to make FortiManager Policy Package Status Synchronize if the user is unable to perform Import Configuration. |
Scope | FortiManager. |
Solution |
Consider the following scenario: FortiManager Policy Package Status not equal Synchronize, then can perform the below options:
Option 1: At FortiManager performs Import Configuration.
Options 2: When FortiManager reconfigures back the same information and performs Policy Package Installation. * Perform Install Preview to verify the configuration first before performing Policy Package Installation. * Perform backup config at FortiGate locally.
Option 1: FortiManager is not able to perform Import Configuration due to some reason. Example: ADOM version mismatch with the FortiGate version.
When the FortiManager ADOM version is different from the FortiGate version, then FortiManager will not be able to perform Import Configuration and will prompt an error message.
Options 2: Reconfigure back the new changes from FortiGate into FortiManager. Below are the examples:
At FortiManager, FortiGate 'Changes no.1' is auto-updated into FortiManager. However, FortiManager does not have the Normalized Interface for the newly added interfaces, therefore it is necessary to create it.
At FortiManager, go to Policy & Objects -> Object Configurations -> Normalized Interface -> Create New (for vlan007 and vlan009 Normalized Interfaces).
After that, at FortiManager continue to configure for Changes no.2 and Changes no.3.
At FortiManager, go to Policy & Objects -> Object Configurations -> Firewall Objects -> Addresses -> Create New (for vlan007_members and vlan009_members Addresses).
At FortiManager, go to Policy & Objects -> Select the correct Policy Package -> Create New (for vlan007_to_vlan009 Firewall Policy).
At FortiManager, after being created for all Changes no.1 to Changes no.3, then perform Retrieve Configuration. This is to make sure that at FortiManager (Device Manager), the Config Status becomes Synchronized.
After that, FortiManager performs Policy Package Installation. * Perform Install Preview to verify the configuration first before performing Policy Package Installation. * Perform backup config at FortiGate locally.
During the Install Preview, ignore the set uuid, as uuid is auto-generated from FortiManager which is different from FortiGate. Proceed with policy package installation.
After the Policy Package Installation is completed, then the Policy Package will become Synchronized.
|
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.