FortiGate : How To Automate Scripts - CLI Version

There are two ways to automate your FortiGate scripts. Through the GUI and the CLI. The CLI enables us to do a better job of explaining the why something is done versus just the step by step how. So we are going to start with the CLI.

My Other Projects:

###### SOCIAL LINKS ######
######################

config system auto-script
edit "script name"
set interval "seconds you wish to kick the script off"
set repeat "number of times you want it to repeat itself"
set start "auto"
set script "command you wish to automate"
next
end

[FortinetGuru]

What scripts are you always running? Can you use this feature to make your life easier? It is time to focus on the bigger issues while the little ones get done automagically!

[RaviChinasamy]

Awesome and highly useful video, mate!!! I think we all want more and more of those. Short, to the point and sweet 😉

[michaelrunyon]

Always great content! Thanks for sharing! Would love to see video on multicast forwarding between VLANs (something a bit more indepth than the one on printing between VLANs).

[achrafaatef]

Thanks for the video, is it possible to automate the configuration backup of the fortimanager? If yes. How?

[tubosun]

Great stuff. It will help me on a project I am working on. Thanks Mike

[christianhdez]

Thanks for sharing! It would be feasible to use this to import new AD users (creating local users via Ldap) to use two factor authentication (fortitokens)? And the other way around; to get rid of local users if they are no longer present in AD. We know that Fortiauthenticator is the best option, but I'm asking just in case it can be done without it. Regards,

[drostoker]

Excellent video. Was wondering how would I trigger a manual script (forgive the basic question but I just starting down this road)?

[kishortp]

Awesome videos Mike, I do have 1 question.

Is it possible to create a script to backup configuration automatically & save it to custom destination like OneDrive folder or something?

[ebgylis]

HI @Fortinet Guru, is there possible automate configure interface via fortimanager with scripts? so call zero touch provision.

[BakemonoCC]

Hi,

On the Windows \ client side computer ONLY (forticlient 6.0.9), from a command line (cmd) I can run a "start / w FCVbltScan.exe" which searches for security vulnerabilities.

Then I would like to launch a command line which would automatically correct the flaws found, what should I type?

It's to automate all this in a script...

[doowtnehpets]

I wanted to do a script to update my sit-tunnel automatically. I use my 60F at home with my DSL and PPPoE gets a different public IP sometimes. IPv6 is provided using 6rd (IPv6 rapid depoyment), works fine with a sit-tunnel on the Fortigate. Only problem is when the public IP changes, I have to manually update the sit-tunnel with the new IPv6 address. You take the 4 octets from the IPv4 address, convert to hex, add the prefix and assign that IP to the sit-tunnel. Not sure how I'd do that with a script on the Fortigate itself.

[CasyrTurambar]

Hi is possibile creat a autmation trigger for this event:


if
type="event" subtype="system" level="critical" msg="Kernel enters memory conserve mode" logdesc="Memory conserve mode entered" conserve="on"
then
diag sys top 1 10
get sys perf stat
diag debug crashlog read

and send the output of this commands?

thanks so much,

[peterchoo]

Do you have a script to help me check all VPN tunnels and then up the tunnels which are down daily automatically? Thanks in advance!

[alexissimpson]

How do you run the script at a specific time ?

[padraics]

So if you wanted to run every day at a specific time, say 10pm, would you have to add that to the config at 10pm and then it would run for the first time 24 hours later?

[jaredcarmouche]

Fortinet support has told me to restart the wad daemon you need to use wad 99 and they've also told me wad 97. I've gotten conflicting information from multiple engineers....

[brylleflores]

Fortinet guro + guitar = fortinet guitarist guro 🤔👌👌👌👌

[sadiasarfarazkhan]

how to take a fortigate backup everyday by auto script