Anybody know a way to capture a configuration change by an administrator?
Currently the system only have a stating configuration change but didn' t have any indication on what changes are being made.
Such auditing can be done (automatically) through the FortiManager and (I believe) through FortiGuard' s Analysis and Management Service (but I am not familiar with that). For a standalone unit, you are pretty much on your own if you want to compare any config changes (e.g. using a text comparison tool).
Well, if you are good at scripting, you can always enable scp on the Fortigate and automate the process of pulling down the config and piping it through a text comparison tool to check for changes against a stored version of the config. :-P
Don' t know if you want to go that far.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.