Script to manage Policies

[VictorSB]

Hello colleagues,

Does anyone here have a method to manage all rules from several firewalls to ensure that we have some condition enabled or disabled? For example - Running a script to all rules and enabling Security Groups Profiles.

I tried via Fortimanager and without sucess so far. There is not possibility as well directly via CLI on Fortigate to manage than a single policy.

Does anyone has any idea?

[DPadula]

Hi Victor,

Normally FMG is the central point of management for all FortiGates. You could raise a ticket with the Fortimanager team to confirm if you can do such thing via FMG. You can try to use some automation tool available on the market as well.
The other option would be write a script to use API to collect and make changes on the firewalls.

Regards

DPadula

[ametkola]

Hello,

The documentation below from Fortinet gives a details brief regarding the script on how to manage the Fortigate.

https://docs.fortinet.com/document/fortimanager/7.6.1/administration-guide/990788/scripts

If it doesn't help the Fortimanager team can further assist in this issue.

Regards.