FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
jasonhong
Staff
Staff
Article Id 362203
Description

This article provides the FortiManager ADOM revision best practice.

Scope

FortiManager.

Solution

Below are the guidelines to implement best practices for FortiManager ADOM revision.

 

  1. ADOM revision should only be used for significant changes. ADOM revision can be enabled when using the install wizard: Installing policy packages and device settings
  2. The number of ADOM revisions to be kept within FortiManager should be limited. The default value is 120 ADOM revisions.

 

FMG# config system global

FMG# set adom-rev-max-revisions <integer>

FMG# end

 

  1. Implement an ADOM revision deletion policy to limit the number of ADOM revisions retained. The ADOM revision deletion policy can be either by the number of days or by the number of revisions.

 

FMG# config system global

FMG# set adom-rev-max-days <integer>

FMG# set adom-rev-auto-delete by-days [Auto delete ADOM revisions by maximum days.]

FMG# end

 

FMG# config system global

FMG# set adom-rev-max-revisions <integer>

FMG# set adom-rev-auto-delete by-revisions [Auto delete ADOM revisions by maximum number of revisions (default).]

FMG# end

Contributors