Fortigate admin tools

[BensonLEI]

Hi, guys,

I am new to Fortigate device; 

In Juniper SRX device, I am using some CLI admin tools, such as traceoptions... etc.

If any CLI fortinet tools, thx 

[sw2090]

There is plenty of cli options on FrtiOS. What do you want to do?

[BensonLEI]

Hi, SW,

Any built-in tools( CLI or WebGui ) for capturing packet, or automated administration tools ?

Due to the tools like, fortigate-cloud, Forti-analyzer....need license

[Yurisk]

Automated administration - REST API for all the devices. You don't need any additional license for that.

Packets capture - you can do it via GUI (on Fortigates with harddisk) or on CLI (any model) - look at  

diagnose sniffer packet <tcpdump syntax for matching here>

For logs - you can export logs in Syslog format for free.

But as Sebastian said - a lot depends on your use cases, what are you trying to achieve ?

[emnoc]

OP

The fortigate matches juniper SRX in similar fashion.

Most of the traceoption  are our diag debug application.

The junos monitor flow is our diag sys session

request ike-debug again is our "diag debug application ike"

So junos and fortios have the same function just difference in doing it. PM me direct if you have a particular issues or if you have a junosSRX command that you want to do in  FortiOS , just raise it in this channel.

Ken Felix

[BensonLEI]

Great recommendations, but I could not mark you guys..very sorry.