Is there a CLI short-cut command that will show all members of a nested address group? Ie, trace the membership list all the way to the bottom, showing all of the children and sub-children?
You might beable todo;
diag sys checkused firewall.addrgrp.name <groupname>
And then you have to do each member directly via
show firewall address <addressname>
http://socpuppet.blogspot...-to-do-dependency.html
Just play around with it and see what you can come up with ;)
PCNSE
NSE
StrongSwan
Thanks for the reply. Looks like that would help if you wanted to go bottom-up, but not the other way around.
I am going to take a look at using a TCL script from the FMG, might be the only way to do it inside of FortiWorld and not just parsing config files.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1771 | |
1116 | |
766 | |
447 | |
242 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.