FortiGate

FortiGate provides flawless convergence that can scale to any location: remote office, branch, campus, data center, and cloud. FortiGate always delivered on the concept of hybrid mesh firewalls with FortiManager for unified management and consistent security across complex hybrid environments. The Fortinet FortiOS operating system provides deep visibility and security across a variety of form factors.

Category

Network Security

Pack

FortiGate

Configuration parameters

• server — Server URL (e.g. https://192.168.0.1) (required)
• credentials — Account username
• api_key — API Key
• unsecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (58)

• fortigate-ban-ip — Ban IPs. Banned IPs are IP addresses that have been quarantined for a variety of reasons, such as administrative decisions or due to security alerts from services like intrusion prevention systems (IPS), antivirus (AV), and denial-of-service (DoS) mitigations.
• fortigate-create-address — Deprecated. Use `fortigate-create-firewall-address-ipv4` instead. Creates a new address object.
• fortigate-create-address-group — Deprecated. Use `fortigate-create-firewall-address-ipv4-group` instead. Create an address group in FortiGate firewall.
• fortigate-create-firewall-address-ipv4 — Create firewall IPv4 addresses. Addresses define sources and destinations of network traffic and can be used in many functions such as firewall policies, ZTNA, etc. The command parameters can be used only in the following combinations: All-[vdom,name,comment,associated_interface], Subnet-[address,mask,allow_routing], IP Range-[start_ip,end_ip], FQDN-[fqdn,allow_routing], Geography-[country], Device (Mac Address)-[mac_addresses].
• fortigate-create-firewall-address-ipv4-group — Create firewall IPv4 address groups. Address groups are designed for ease of use in the administration of the device.
• fortigate-create-firewall-address-ipv4-multicast — Create firewall IPv4 multicast addresses. Multicasting allows a single source to send data to multiple receivers efficiently, conserving bandwidth and minimizing network traffic. It`s suitable for media streaming, news feeds, financial updates, and certain dynamic routing protocols like RIPv2, OSPF, and EIGRP.
• fortigate-create-firewall-address-ipv6 — Create firewall IPv6 addresses. Addresses define sources and destinations of network traffic and can be used in many functions such as firewall policies, ZTNA, etc. The command parameters can be used only in the following combinations: All-[vdom,name,comment], Subnet-[address,mask], IP Range-[start_ip,end_ip], FQDN-[fqdn], Geography-[country], Fabric Connector Address-[sdn_connector], Device (Mac Address)-[mac_addresses].
• fortigate-create-firewall-address-ipv6-group — Create firewall IPv6 address groups. Address groups are designed for ease of use in the administration of the device.
• fortigate-create-firewall-address-ipv6-multicast — Create firewall IPv6 multicast addresses. Multicasting allows a single source to send data to multiple receivers efficiently, conserving bandwidth and minimizing network traffic. It is suitable for media streaming, news feeds, financial updates, and certain dynamic routing protocols like RIPv2, OSPF, and EIGRP.
• fortigate-create-firewall-policy — Create firewall policies. Firewall policies dictate the traffic flow and its processing. They are integral to most of the firewall functions, ensuring that every piece of traffic passing through the unit adheres to a specific policy. These policies determine the direction of the traffic, processing method, and its permission to traverse the firewall.
• fortigate-create-firewall-service — Create firewall services. A service is the combination of network protocols and port numbers that define traffic sources or destinations. The command parameters can be used only in the following combinations: All-[vdom,name,comment,category], TCP/UDP/SCTP-[(start_ip,end_ip or fqdn),tcpRange,udpRange,sctpRange], IP-[ip_protocol], ICMP/ICMP6-[icmp_version,icmp_code,icmp_type].
• fortigate-create-firewall-service-group — Create firewall service groups. Service groups are collections of predefined services. Service groups can be used as the source and destination of the policy.
• fortigate-create-policy — Deprecated. Use `fortigate-create-firewall-policy` instead. Create a firewall policy (rule) on FortiGate.
• fortigate-delete-address — Deprecated. Use `fortigate-delete-firewall-address-ipv4` instead. Deletes an address by name.
• fortigate-delete-address-group — Deprecated. Use `fortigate-delete-firewall-address-ipv4-group` instead. Delete an address group from FortiGate firewall.
• fortigate-delete-firewall-address-ipv4 — Delete firewall IPv4 addresses. Addresses define sources and destinations of network traffic and can be used in many functions such as firewall policies, ZTNA, etc.
• fortigate-delete-firewall-address-ipv4-group — Delete firewall IPv4 address groups. Address groups are designed for ease of use in the administration of the device.
• fortigate-delete-firewall-address-ipv4-multicast — Delete firewall IPv4 multicast addresses. Multicasting allows a single source to send data to multiple receivers efficiently, conserving bandwidth and minimizing network traffic. It is suitable for media streaming, news feeds, financial updates, and certain dynamic routing protocols like RIPv2, OSPF, and EIGRP.
• fortigate-delete-firewall-address-ipv6 — Delete firewall IPv6 addresses. Addresses define sources and destinations of network traffic and can be used in many functions such as firewall policies, ZTNA, etc.
• fortigate-delete-firewall-address-ipv6-group — Delete firewall IPv6 address groups. Address groups are designed for ease of use in the administration of the device.
• fortigate-delete-firewall-address-ipv6-multicast — Delete firewall IPv6 multicast addresses. Multicasting allows a single source to send data to multiple receivers efficiently, conserving bandwidth and minimizing network traffic. It is suitable for media streaming, news feeds, financial updates, and certain dynamic routing protocols like RIPv2, OSPF, and EIGRP.
• fortigate-delete-firewall-policy — Delete firewall policies. Firewall policies dictate the traffic flow and its processing. They are integral to most of the firewall functions, ensuring that every piece of traffic passing through the unit adheres to a specific policy. These policies determine the direction of the traffic, processing method, and its permission to traverse the firewall.
• fortigate-delete-firewall-service — Delete firewall services. A service is the combination of network protocols and port numbers that define traffic sources or destinations.
• fortigate-delete-firewall-service-group — Delete firewall service groups. Service groups are collections of predefined services. Service groups can be used as the source and destination of the policy.
• fortigate-delete-policy — Deprecated. Use `fortigate-delete-firewall-policy` instead. Delete a policy from FortiGate firewall.
• fortigate-delete-service-group — Deprecated. Use `fortigate-delete-firewall-service-group` instead. Delete a service group from FortiGate.
• fortigate-get-address-groups — Deprecated. Use `fortigate-list-firewall-address-ipv4-groups` instead. Get information about address groups from FortiGate.
• fortigate-get-addresses — Deprecated. Use `fortigate-list-firewall-address-ipv4s` instead. Get all address objects from your firewall.
• fortigate-get-banned-ips — Deprecated. Use `fortigate-list-banned-ips` instead. Returns a list of banned IP addresses.
• fortigate-get-firewall-service — Deprecated. Use `fortigate-list-firewall-services` instead. Get information about a service from FortiGate Firewall.
• fortigate-get-policy — Deprecated. Use `fortigate-list-firewall-policies` instead. Get information about a firewall policy on FortiGate.
• fortigate-get-service-groups — Deprecated. Use `fortigate-list-firewall-service-groups` instead. Get information about FortiGate service groups.
• fortigate-list-banned-ips — Retrieve Banned IPs. Banned IPs are IP addresses that have been quarantined for a variety of reasons, such as administrative decisions or due to security alerts from services like intrusion prevention systems (IPS), antivirus (AV), and denial-of-service (DoS) mitigation.
• fortigate-list-firewall-address-ipv4-groups — Retrieve firewall IPv4 address groups. Address groups are designed for ease of use in the administration of the device.
• fortigate-list-firewall-address-ipv4-multicasts — Retrieve firewall IPv4 multicast addresses. Multicasting allows a single source to send data to multiple receivers efficiently, conserving bandwidth and minimizing network traffic. It is suitable for media streaming, news feeds, financial updates, and certain dynamic routing protocols like RIPv2, OSPF, and EIGRP.
• fortigate-list-firewall-address-ipv4s — Retrieve firewall IPv4 addresses. Addresses define sources and destinations of network traffic and can be used in many functions such as firewall policies, ZTNA, etc.
• fortigate-list-firewall-address-ipv6-groups — Retrieve firewall IPv6 address groups. Address groups are designed for ease of use in the administration of the device.
• fortigate-list-firewall-address-ipv6-multicasts — Retrieve firewall IPv6 multicast addresses. Multicasting allows a single source to send data to multiple receivers efficiently, conserving bandwidth and minimizing network traffic. It is suitable for media streaming, news feeds, financial updates, and certain dynamic routing protocols like RIPv2, OSPF, and EIGRP.
• fortigate-list-firewall-address-ipv6s — Retrieve firewall IPv6 addresses. Addresses define sources and destinations of network traffic and can be used in many functions such as firewall policies, ZTNA, etc.
• fortigate-list-firewall-policies — Retrieve firewall policies. Firewall policies dictate the traffic flow and its processing. They are integral to most of the firewall functions, ensuring that every piece of traffic passing through the unit adheres to a specific policy. These policies determine the direction of the traffic, processing method, and its permission to traverse the firewall.
• fortigate-list-firewall-service-groups — Retrieve firewall service groups. Service groups are collections of predefined services. Service groups can be used as the source and destination of the policy.
• fortigate-list-firewall-services — Retrieve firewall services. A service is the combination of network protocols and port numbers that define traffic sources or destinations.
• fortigate-list-system-vdoms — Retrieve system VDOMs. Virtual Domains (VDOMs) are used to divide a FortiGate into two or more virtual units that function independently. VDOMs can provide separate security policies and, in NAT mode, completely separate configurations for routing and VPN services for each connected network. Multiple VDOMs can be created and managed as independent units in multi VDOM mode.
• fortigate-move-firewall-policy — Move the position of firewall policies. Firewall policies dictate the traffic flow and its processing. They are integral to most of the firewall functions, ensuring that every piece of traffic passing through the unit adheres to a specific policy. These policies determine the direction of the traffic, processing method, and its permission to traverse the firewall.
• fortigate-move-policy — Deprecated. Use `fortigate-move-firewall-policy` instead. Move a firewall policy rule to a different position.
• fortigate-unban-ip — Unban IPs. Banned IPs are IP addresses that have been quarantined for a variety of reasons, such as administrative decisions or due to security alerts from services like intrusion prevention systems (IPS), antivirus (AV), and denial-of-service (DoS) mitigations.
• fortigate-update-address-group — Deprecated. Use `fortigate-update-firewall-address-ipv4-group` instead. Update an address group on FortiGate firewall.
• fortigate-update-firewall-address-ipv4 — Update firewall IPv4 addresses. Addresses define sources and destinations of network traffic and can be used in many functions such as firewall policies, ZTNA, etc. The command parameters can be used only in the following combinations: All-[vdom,name,comment,associated_interface,type], Subnet-[address,mask,allow_routing], IP Range-[start_ip,end_ip], FQDN-[fqdn,allow_routing], Geography-[country], Device (Mac Address)-[mac_addresses].
• fortigate-update-firewall-address-ipv4-group — Update firewall IPv4 address groups. Address groups are designed for ease of use in the administration of the device. New members will override the existing members within the group incase of a conflict.
• fortigate-update-firewall-address-ipv4-multicast — Update firewall IPv4 multicast addresses. Multicasting allows a single source to send data to multiple receivers efficiently, conserving bandwidth and minimizing network traffic. It`s suitable for media streaming, news feeds, financial updates, and certain dynamic routing protocols like RIPv2, OSPF, and EIGRP.
• fortigate-update-firewall-address-ipv6 — Update firewall IPv6 addresses. Addresses define sources and destinations of network traffic and can be used in many functions such as firewall policies, ZTNA, etc. The command parameters can be used only in the following combinations: All-[vdom,name,comment,associated_interface], Subnet-[address,mask], IP Range-[start_ip,end_ip], FQDN-[fqdn], Geography-[country], Fabric Connector Address-[sdn_connector], Device (Mac Address)-[mac_addresses].
• fortigate-update-firewall-address-ipv6-group — Update firewall IPv6 address groups. Address groups are designed for ease of use in the administration of the device. New members will override the existing members within the group incase of a conflict.
• fortigate-update-firewall-address-ipv6-multicast — Update firewall IPv6 multicast addresses. Multicasting allows a single source to send data to multiple receivers efficiently, conserving bandwidth and minimizing network traffic. It is suitable for media streaming, news feeds, financial updates, and certain dynamic routing protocols like RIPv2, OSPF, and EIGRP.
• fortigate-update-firewall-policy — Update firewall policies. Firewall policies dictate the traffic flow and its processing. They are integral to most of the firewall functions, ensuring that every piece of traffic passing through the unit adheres to a specific policy. These policies determine the direction of the traffic, processing method, and its permission to traverse the firewall.
• fortigate-update-firewall-service — Update firewall services. A service is the combination of network protocols and port numbers that define traffic sources or destinations. The command parameters can be used only in the following combinations: All-[vdom,name,comment,category], TCP/UDP/SCTP-[(start_ip,end_ip or fqdn),tcpRange,udpRange,sctpRange], IP-[ip_protocol], ICMP/ICMP6-[icmp_version,icmp_code,icmp_type].
• fortigate-update-firewall-service-group — Update firewall service groups. Service groups are collections of predefined services. Service groups can be used as the source and destination of the policy. New members will override the existing members within the group incase of a conflict.
• fortigate-update-policy — Deprecated. Use `fortigate-update-firewall-policy` instead. Update a firewall policy on FortiGate.
• fortigate-update-service-group — Deprecated. Use `fortigate-update-firewall-service-group` instead. Update a FortiGate service group.