Description
This article explains how to reset a FortiGate to factory defaults.
Scope
This command works on FortiGates and FortiProxys.
Solution
This procedure clears all changes made to the FortiGate configuration and resets the system to its original configuration with the default factory settings.
It does not change the firmware version or the antivirus or IPS attack definitions.
There is also an option to reset FortiGate to factory settings without losing management access.
A FortiGate Device can be reset to Factory defaults by using the CLI interface. This reset will remove all configurations. It will be out of the box condition. Direct access to FortiGate will be needed to access it.
- Open an SSH to the system and execute the following command:
execute factoryreset
This operation will reset the system to factory default!
Do you want to continue? (y/n)
- The system will reboot and will load a basic configuration.
Factory reset without losing management access.
This option will reset the device to factory settings except for VDOM, interface, and static route settings. This means that after resetting, FortiGate will not have any firewall policies or IPsec settings, but it will be possible to access the FortiGate remotely on its IP address.
This option is available only in CLI:
Open a SSH to the system and execute the following command:
execute factoryreset2
This operation will reset the device to factory settings except for a few specific sections related to VDOMs, interfaces, and static route settings. The following is a list of configuration sections that remain unchanged after using the factoryreset2 command:
- system.global.vdom-mode
- system.global.long-vdom-name
- system.virtual-switch
- system.interface
- system.settings
- router.static
- router.static6
Do you want to continue? (y/n) this warning will appear after running the command.
Since FortiOS version 7.0, it is also now a possible option to keep central management configurations after factory-reset. The command below resets the FortiGate to the factory default, except system.central-management.serial-number/system.central-management.fmg.
execute factoryreset-for-central-management
Also, the option below in all versions:
factoryreset-shutdown <- Reset to factory default and shutdown.
Note:
After a reboot, FortiGate will have its factory default settings but still have management access available.
All administrators will be removed and FortiGate can be accessed with the default credentials (admin/{no password}).
Related article:
