FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
jasonhong
Staff
Staff
Article Id 243072

Description

 

This article describes how to manually upload a FortiGate configuration to a FortiManager to synchronize the configuration status in the FortiManager Device Manager.

 

Scope

 

FortiManager.

 

Solution

 

  1. When the config status for a managed device such as FortiGate is out of sync (Conflict/Modified/Out-of-Sync/Unknown), the user will be able to manually upload a copy of the device config to FortiManager to synchronize the config status in FortiManager Device Manager.

 

Below is a screenshot showing a FortiGate config status in the 'Modified' state (out of sync).

 

conflict.png

 

  1. The user can enter the CLI command below in the local FortiGate to verify the connectivity status to FortiManager. A sample FortiGate CLI output snippet is also attached below, showing the status is 'up' and registered to the FortiManager.

     

    diagnose fdsm central-mgmt-status

    Connection status: Up

    Registration status: Registered

     

     

  2. Once the connection status is confirmed to be up and registered to the FortiManager, the user can enter the below CLI command to manually upload the device config to FortiManager to synchronize the device config status in FortiManager Device Manager.

     

    Below is a sample FortiGate CLI output snippet showing the device config retrieval by FortiManager is successful.

     

    diag fdsm cfg-upload <comment>

     

    diag fdsm cfg-upload upload_config_to_fmg

    Retrieving full config.

    Result=Success

     

     

  3. Once the device config upload is successful, navigate back to the FortiManager Device Manager and manually refresh the managed FortiGate to reflect the updated device config status. The status will be updated to the 'Synchronized' state.

 

Note:

In the event the device config status is not updated, try to refresh the web browser page.

 

refreshdev.png

 

sync.png

 

Related articles:

Troubleshooting Tip: FortiGate is Out-of-sync on 'Device Manager'

Technical Tip: Error code: 2 Protocol error while uploading FortiGate configuration managed by Forti...