FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
cborgato_FTNT
Description
This article describes  how to rollback using WorkFlow mode.

Solution
WorkFlow Summary.

Work Flow mode.


Workflow mode is used to control the creation, configuration, and installation of policies and objects.
It helps to ensure all changes are reviewed and approved before they are applied.
When workflow mode is enabled, the ADOM has to be locked and a session has to be started before policy, object, or unit changes can be made in an ADOM.

Work Flow mode Approval.

When a session is submitted for approval, email messages are sent to the approvers, who can then approve or reject the changes directly from the email message.
Sessions can also be approved or rejected by the approvers from within the ADOM itself.
This case example particularity (‘auto-approve’ method).
same user approves what has been modified and submitted by himself.
The goal is to avoid as much as possible common mistakes and cosmetic errors forcing the user to check multiple time the same group of changes.

Note.
This article it will not explain how to configure the flow-mode.

FlowChart Summary with WorkFlow mode on Policy Package.





Rollback WorkFlow Procedures.

Review of latest install steps.

Let’s assume the workflow procedure was completed and (Install Wizard) the Policy Package has been successfully installed to the FortiGate.






The next image will introduce 2 different ways on doing rollback.






Rollback Procedure 1.





Rollback Procedure 2.



Related Articles

Techincal Tip: How to use WorkFlow mode with ‘auto-approve’ method

Technical Tip: How to use WorkFlow mode using ‘auto-approve’ method with scripts

Contributors