Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
MGhandour
New Contributor

FortiManager Delete Some policies and Addresess

Hello dears,

 

during import the policies and addresses from FGT to FMG some policies and addresses are deleted. there is a way to get back these policies from the FMG.

 

I took a back form the FGT configurations.

9 REPLIES 9
srajeswaran
Staff
Staff

Is this a new installation? If not, can you check the config revision history on Forttimanager for the specific Fortigate and then use that?

Regards,
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
MGhandour
New Contributor

yes, this is a new installation and all revision of the fortimanager has the same issue when install the policy.

MGhandour

some policies and addresses were deleted from the fortigate it self.

srajeswaran

Since you have config backup from Fortigate, can you use restore option directly on fortigate? It will restart the firewall. Is that possible for you?

Regards,
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
MGhandour

if there is another option that we can proceed through it. this option will take many approvals.

Toshi_Esumi

Not sure what you meant by "fortigate itself". Did that happen when you upgraded it or other triggers?
Regardless FGT or FMG removing them, if that happens there are some reasons why it happens. If it was FGT, mostlikely it would happen again when you restored the removed stuff.

 

Toshi

saneeshpv_FTNT

Hi,

 

As @srajeswaran mentioned you can look for the revision history which is created when you added the Fortigate device to FortiManager and then reapply this configuration to device.

 

In the attached screenshot "Retrieved" shows the configuration added to Fortimanager when the device is added to FMG. You can download this revision and confirm all the required policies and objects are present and then click "Revert" to this configuration and then perform Install or Manually apply the downloaded configuration to the Firewall.

 

Best Regards,

MGhandour

i will try this option but if all versions don't have these policies what is the next step instead of restoring the configurations.

srajeswaran

If you can't find the correct revision, unfortunately you may have to proceed with restoring config from Fortigate directly.

Regards,
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors