Forti config backup

[prem0069]

Hi everyone,

I’d like to set up automated regular backups for my FortiGate 300D devices in my company’s network. What solutions or tools do you use in your infrastructure to handle this? Any suggestions for reliable, efficient, and easy-to-implement and free or unexpensive:) methods would be greatly appreciated!

Thanks in advance!

[vifi]

Hi,

You can configure automation stitch.
Please check KB below how to configure the automation stitch.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-send-automated-backups-of-the-confi...

If you have multi VDOM environment, please have a look at:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-Automation-Stitches-for-M...

[haegi75]

Hello prem0069,

so vifi's solution is good and convincing. Here are two more ideas.

If you have a FortiManager, you can set up a Fortigate in backup mode. If you don't have a FortiManager yet, that costs money.... Maybe that's not suitable for you.

Option two would be free. If you have an Ansible server or AWX server on the network, you can create a playbook via Ansible and use the Fortigate's API. With the AWX server, you could schedule the backup times. However, I would only recommend this option if you already have an Ansible and AWX environment, as it would take some time to set up such an environment.

[peter-supply]

Ideally, I would like to see a solution where you could setup a secure, "Fortilink-style" connection from a Fortigate to a "Fortibackup" appliance (local or cloud) that would securely backup a Fortigate firewall's configuration.  SonicWALL has a feature like this already.

[haegi75]

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-send-a-backup-configuration-file-to...

Perhaps that would be a solution for you? But I have no experience with that. We use FortiManager for the backups.

[peter-supply]

Thanks.  No, this isn't the solution we're looking for.  From the SonicWALL GUI, I can setup and schedule config backups to the cloud.  We would like a similar setup with the Fortigates.  Login to the Fortigate GUI, configure/schedule configuration backups to the cloud.