Fortimanager - Cancel Pending Changes

[zp]

We had a large address group object accidentally deleted from the Fortimanger. The changes have not been comitted yet and the group is still visible on the individual devices, but not in the Fortimanager. How do we cancel the pending changes?

[asrour]

you mean by "The changes have not been comitted yet " that you didn't install the policy package to the Fortigate? If so, you can re-import configuration (Policies & Objects) from the Fortigates

Or if you have a recent backup of the Fortimanager, restore it.

Unfortunately, there is no undo or un-delete in Fortimanager.

[sw2090]

Hmm since you haven't yet deployed that to your FGTs you could take an unencrypted backup from one FGT and extract the object from it and re-import it into FMG on cli.

Hm btw you have to think one step further. If that object still is on the FGTs that also means it must have had reference(s) since FMG would not have deployed it if it had no reference.

[vraev]

Hi @zp , as asrour already mentioned that there is no undo except if there is a ADOM revision. The following articles could help you in this direction.

https://docs.fortinet.com/document/fortimanager/7.2.2/administration-guide/962634/adoms
https://docs.fortinet.com/document/fortimanager/7.2.2/administration-guide/135259/adoms-and-devices
https://docs.fortinet.com/document/fortimanager/7.4.1/administration-guide/871900/viewing-configurat...
https://docs.fortinet.com/document/fortimanager/7.4.1/administration-guide/54616/adom-revisions

https://community.fortinet.com/t5/FortiManager/Technical-Tip-Configuration-import-from-the-device-to...

https://community.fortinet.com/t5/FortiManager/Troubleshooting-Tip-FortiGate-is-Out-of-sync-in-the-D...
https://community.fortinet.com/t5/FortiManager/Techincal-Tip-How-to-fix-synchronization-issue-in-For...
https://community.fortinet.com/t5/FortiManager/Technical-Tip-How-to-manually-upload-FortiGate-config...