I am looking into creation of mass objects in a Fortimanager , it is currently managing two 1500 D's . I know i can create the objects in the firewalls them selves but i could not find a way to import just the objects into the manager. The firewalls have been joined to the manager already.
What are the CLI commands of creating objects in the manager ?
I use the command below on the firewalls
edit host_10.12.170.0
set subnet 10.12.170.0 255.255.255.0 next
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
you can create a script for the config and run script on package db
you can enable script function display on GUI from SS - admin settings
Thanks
Simon
And what is the context of the script ? is it the same as the context that is done directly on the firewall. I would rather not do it in a script but one by one in the CLI. Is that possible ?
FMG does not support run CLI to generate db config like address etc
a common CLI script content is similar as FOS CLI like
config firewall address edit "FMG200D" set comment "for testing" set subnet 10.2.112.71 255.255.255.255 next
end
Thanks
Simon
just wanted to give an update this does not work for fortimanager
the command "config firewall address" is not allowed. I am still looking for the correct commands to apply to a fortimanager not directly to a firewall.
Is there a MOD that can ansswer this ?
you can not just run this CLI like on FGT side
the script I mentioned is a function on FMG side
so go to System Settings - Admin - Admin Settings, enable "Show Scripts", then go to "Device Manager", you will see a new section in left tree bottom "Scripts" and go to script page, you can create a CLI script, for device db, or remote device, or package db
so if you want to create many address on FMG side, you choose package db, and then copy the address CLI config into script, save script, then in script list page, you will see your newly created script, right click, you can then run script on package/ADOM db to generate the addresses
Thanks
Simon
As mentioned earlier, you need to enable scripting and run it towards the package/adom database.
This post didn't really sum it all up for me, so I fiddled around and wrote this little guide: http://www.networkoc.net/adding-firewall-objects-in-fortimanager-through-scripting/
Hope this helps. =)
Thanks Gos! I was just about to give up on the FortiManager.
gos wrote:As mentioned earlier, you need to enable scripting and run it towards the package/adom database.
This post didn't really sum it all up for me, so I fiddled around and wrote this little guide: http://www.networkoc.net/adding-firewall-objects-in-fortimanager-through-scripting/
Hope this helps. =)
Spent about 20 minutes on your site/blog. Nice work there: small but tidy! Just subscribed to you!
The most expensive and scarce resource for man is time, paradoxically, it' s infinite.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1698 | |
1092 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.