Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Aabir007 wrote:the best way to do this is to use fortigate rest api if you are a programmer .
Fortigate 401E with version 6.4.4 I have to create a bulk amount of objects on the firewall using any script or we can do it in a single go? Please suggest. Ex- I have a list of 5000 IP address. So I want to add the same in the firewall without entering it manually as because huge time will be required.
You can use the telnet script to do this, but it's not stable.
you also can do this by edit the config file manually in "config firewall address" section
been there, done that...
Some time ago I have developed a python script to exactly this task. It will not only create the address objects, but also address groups and super-groups to accommodate the group limits.
You can download it here: https://www.beneicke-edv.de/support/tools/#ext_blacklists
and use or adopt it to your needs freely.
The only requirement is that you have python installed. I might even make it an executable for convenience.
And no, there is no Youtube flic about this showing you how to run it :)
When I migrated a pFSense to Fortigate I created the objects in excel, copy /past in notepad++ and then ran the the script using Fortigate
config firewall addressedit P2P_radioset comment "P2P_radio_to_2nd_location"set subnet 172.16.11.0 255.255.255.248set color 17end
https://docs.fortinet.com/document/fortigate/6.4.0/administration-guide/780930/configuration-scripts
Ede has a more elegant option. :)
thanks, AdiMizil! I started with a simple DOS batch but then I ran into trouble with address group size...
I've added a Windows executable now, so Python is no longer needed. HTH.
hello ede_pfau,,
can you please elaborate on this solution.
i also have bulk addresses to be added.
Please check this article on Creation and addition of bulk IP address objects.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Creation-and-addition-of-bulk-IP-address-o...
hope it helps let us know if you have any queries.
Thanks,
Pavan
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1688 | |
1087 | |
752 | |
446 | |
227 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.