Can we update firewall rules from external files?

[solidblueliquid]

Hi Everyone,

I constantly have to update our firewall for external monitoring systems when they change IP addresses. Normally this is just one of two addresses, but sometimes it can be 10 or more. Is there a way to import them from a file?

[Bubu]

Yes you can: http://help.fortinet.com/fconverter/5-2-0_revision3/Content/FortiConverter/user-guide/F_Importing/im...

You have to set up a template for FortiGate and use the same file for each transfer.

At your disposal for further info

BR

Bubu

[cjw]

I think the best way to accomplish this would be use the API. You can load scripts and run those as well, but I think changing address objects via the API is the best way to go.

You need a developer account to get access to API docs, but there are some people who have created some simple tools on GitHub that might accomplish what you need.