configuration management with FortiManager when power outage occurs

[sean3]

greetings all,

we are using FortiGate firmware 7.2.10, the hardware device is installed in China and is connected to a FortiManager in Europe. I believe all the configuration is pushed from the FortiManager, for example, the changes to configuration like SD-WAN rule, firewall policy, VPN, etc., is pushed from FM to fortigate to be effective.

My question is where the configuration (file) is stored? Is it centrally managed or stored in FM? I cannot find it from the fortigate GUI. What if there is a power outage occurs to the Fortigate, will it come back with all settings as it had before the power outage? 

Thanks for the help.

[joshbergm]

Hi,

Please consider upgrading your firewall from 7.2.10 to 7.2.11 since it's no longer vulnerable to this CVE: CVE-2024-3596.

Configuration is stored in the FortiManager as well as the FortiGate. You can send the config to the FortiGate from the FortiManager and you can also retrieve the FortiGate config from the FortiManager import wizard.

Config will stay available after a power outage since it's saved on the FortiGate device as well as the device database in the FortiManager.

Hope this helps :)

[ede_pfau]

if you consider power outages to occur frequently, set the FGT to automatically check the filesystem on boot up:

config system global
   set autorun-log-fsck enable
end

[srajeswaran]

Fortigate configuration is saved on Fortigate itself and a backup is stored in Fortimanager. In case the config is lost from Fortigate for any reason like the power outage you mentioned, you can use the backup on Fortimanager to restore the configuration.

Below articles will be handy.

https://community.fortinet.com/t5/FortiManager/Technical-Tip-How-to-revert-to-the-previous-FortiGate...
https://community.fortinet.com/t5/FortiManager/Technical-Tip-Restore-configuration-on-FortiGate-usin...
https://community.fortinet.com/t5/FortiManager/Technical-Tip-How-to-restore-FortiGate-config-backup-...