Deleted a firewall.policy by accident

manucmp · ‎08-09-2023

Hi, yesterday a Firewall Policy was accidentally deleted on Fortinet (v7.0.11).

In Log Events I only see "Delete firewall.policy 37". How and where can I see what the policy did so that I can recreate it?

Thanks.

Shilpa1 · ‎08-09-2023

Hello,

Do you have a recent backup of your Fortinet device's configuration, you might be able to restore the deleted policy from there. In the backup, check for "edit 37" under "config firewall policy"

Regards,
Shilpa C.P

View solution in original post

Shilpa1 · ‎08-09-2023

Hello,

Do you have a recent backup of your Fortinet device's configuration, you might be able to restore the deleted policy from there. In the backup, check for "edit 37" under "config firewall policy"

Regards,
Shilpa C.P

sw2090 · ‎08-10-2023

If that FGT happens to be in FortiManager you could look at an older revision of its config in there.

--

"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams