Hi Community,
I have imported the configuration for 1 VDOM into Forti Manager (7.6) and after imported successfully, it's still at "modified" status.
I changed Routing objects and BGP directly on the Firewall, FGM and FGT immediately went out of sync, so hence I tried to import from FGT to FGM to get back into a sync status.
The policy imports successfully, but why aren't the routing objects such as Prefix Lists and Route Maps, static routes and BGP config are not updating on FGM?
What am I missing here?
Routing is primarily Device-Level, not Policy/Object Level
While Prefix Lists and Route Maps are objects, and dynamic routing protocols (BGP) are configurations, FortiManager typically manages them as device-level configurations or via provisioning templates, rather than as part of a "policy package" import.
The "Import Configuration" doesn't pull in the full routing table, BGP configuration, or standalone routing objects like prefix lists/route maps into the ADOM's shared objects if they aren't explicitly tied to a policy that's being imported.
This might be the reason you do not see them when importing through FMG.
Created on 05-31-2025 07:45 AM Edited on 05-31-2025 07:52 AM
Many thanks for your reply, and the info.
I have three VDOMs, and I have specifically configured PL, RM, and BGP for this particular VDOM only, which is out of sync. What I am concerned about is whether I push/install the policy my PL, RM's and BGP will be overwritten on the FGT (and there is a lot of config). But as you mentioned, this is not at the policy level so should be ok I hope!
User | Count |
---|---|
2625 | |
1395 | |
810 | |
671 | |
455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.