FortiGate - Provisioning CLI scripts remotely

[pratik_patel]

Hi, Is there a way to configure and execute the CLI scripts on FG servers remotely? Currently we are using FM XML Web Services, ie. our application calls XML Web Service on FM, - Create a CLI Script - Execute a CLI Script - Extract a result of CLI and - Delete a CLI script In this case, FM in-turns communicate with FG to execute script and fetch results. I would like to know if there is a way to bypass FM and execute the scripts directly on FG from our application. May be using FG Web Services(I could not see) or any other alternate mechanisms. Thanks & Regards, Pratik

[Sean_Toomey_FTNT]

Hi Pratik, FortiManager is the best way to do what you are looking to do. There is no API on the FortiGate itself as it is a hardened appliance. If you are looking to bypass FortiManager, it may be possible to use third party utilities that can automate an SSH session to accomplish this task. Hope this helps. Cheers!