Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
alagoutte
New Contributor III

PowerFGT: a PowerShell module for FortiGate

Hi,

I have been working for several months on a PowerShell module that uses the FortiGate REST API.

 

This module is available on psgallery(.com) : https://www.powershellgallery.com/packages/PowerFGT

Actually, we support to connect to HTTPS or HTTP

and use the following feature :

[ul]
  • Address (Add/Get/Copy/Set/Remove object type ipmask/subnet)
  • AddressGroup (Add/Get/Copy/Set/Remove and Add/Remove Member)
  • DNS (Get)
  • HA (Get)
  • Interface (Get)
  • IP Pool (Get)
  • Local User (Get)
  • Policy (Add/Get/Remove)
  • RoutePolicy (Get)
  • Service (Get)
  • Service Group (Get)
  • Static Route (Get)
  • System Global (Get)
  • VDOM (Get)
  • Virtual IP (Get/Add/Remove object type static-nat)
  • Virtual WAN Link/SD-WAN (Get)
  • VPN IPsec Phase 1/Phase 2 Interface (Get)
  • Zone (Get)[/ul]

     

    it is very easy to use (and install)

     

    Launch PowerShell command line and launch following command for install

    Install-Module PowerFGT

    for load the module

    Import-Module PowerFGT

    Connect to your firewall

    Connect-FGT 192.0.2.1

    You get a prompt to ask credential

     

    for example to get all address use

    Get-FGTFirewallAddress

    You can get the list of command available via

    Get-Command -Module PowerFGT

     

     and for get help (and example about a command for example Add-FGTFirewallAddress)

    Get-Help Add-FGTFirewallAddress -Full

     

    More documentation, example is available on https://github.com/FortiPower/PowerFGT and you can also report issue/enhance !

     

  • 1 Solution
    alagoutte
    New Contributor III

    A new release of PowerFGT (0.40 is available on PSGallery => https://www.powershellgallery.com/packages/PowerFGT/

    [ul]
  • Enhance Filtering (using directly API) (#58, #62)
  • Add Add/Set/Remove (and member) Address Group (#57)
  • Add Add/Set/Remove Virtual IP (VIP) (#54)
  • Add Add/Remove (and member) Firewall Policy (#65, #68)
  • Add Deploy-FGTVm for deploy FortiGate vapp (#34)
  • Add Timeout setting for Connect-FGT (and Invoke-FGTRestMethod) (#56)[/ul]

    Documentation is available https://fortipower.github.io/PowerFGT/

    Bug Report / Enhance : https://github.com/FortiPower/PowerFGT

  • View solution in original post

    12 REPLIES 12
    SogeKing
    New Contributor

    Thanks for this great module @alagoutte. Just tried some feature but can't seem to find a way to add mac address to Address or Address Group. Am I missing something?

    alagoutte
    New Contributor III

    Hi,

     

    Not yet ! can you ask on Github project ? https://github.com/FortiPower/PowerFGT/issues

    SogeKing

    Sure, thanks @alagoutte!

    Announcements

    Select Forum Responses to become Knowledge Articles!

    Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

    Labels
    Top Kudoed Authors