FortiManager Delete Some policies and Addresess

[MGhandour]

Hello dears,

during import the policies and addresses from FGT to FMG some policies and addresses are deleted. there is a way to get back these policies from the FMG.

I took a back form the FGT configurations.

[srajeswaran]

Is this a new installation? If not, can you check the config revision history on Forttimanager for the specific Fortigate and then use that?

[MGhandour]

yes, this is a new installation and all revision of the fortimanager has the same issue when install the policy.

[MGhandour]

some policies and addresses were deleted from the fortigate it self.

[srajeswaran]

Since you have config backup from Fortigate, can you use restore option directly on fortigate? It will restart the firewall. Is that possible for you?

[MGhandour]

if there is another option that we can proceed through it. this option will take many approvals.

[Toshi_Esumi]

Not sure what you meant by "fortigate itself". Did that happen when you upgraded it or other triggers?
Regardless FGT or FMG removing them, if that happens there are some reasons why it happens. If it was FGT, mostlikely it would happen again when you restored the removed stuff.

Toshi

[saneeshpv_FTNT]

Hi,

As @srajeswaran mentioned you can look for the revision history which is created when you added the Fortigate device to FortiManager and then reapply this configuration to device.

In the attached screenshot "Retrieved" shows the configuration added to Fortimanager when the device is added to FMG. You can download this revision and confirm all the required policies and objects are present and then click "Revert" to this configuration and then perform Install or Manually apply the downloaded configuration to the Firewall.

Best Regards,

[MGhandour]

i will try this option but if all versions don't have these policies what is the next step instead of restoring the configurations.

[srajeswaran]

If you can't find the correct revision, unfortunately you may have to proceed with restoring config from Fortigate directly.