Configuration Management of Fortinet & Palo Alto Firewall & Restore

Hello,

I have two FortiGate firewalls, and the configuration backup is completing successfully using the script below:

 

@login

config system console

set output standard

end

[running-config] show

config system console

set output more

end

 

However, I am unable to perform a configuration restore from WhatsUp Gold (WUG). During the restore operation, I only see two options, Running and Startup, which I believe are intended for Cisco devices.

 

Could you please advise on the following:

  1. What restore command or script should be used for FortiGate devices in WhatsUp Gold?
  2. How can I configure additional restore targets under "Restore this configuration to the..."?, and where to configure this to see it here
  3. Is there a FortiGate-specific restore template available that needs to be imported or configured within WhatsUp Gold Configuration Management?
  4. Are there any mandatory settings, credentials, or communication methods (SSH/SCP/TFTP) required to enable configuration restore for FortiGate devices?

 

 

image


  • Mike Rockwell (Progress Software)

    Those use the scripts from the System Script library. Currently, there are no scripts to restore to a Palo-Alto. So, you will have to create your own custom script, which you could put in the system script library using the SysObjID of the Palos.

     

    Here is the scripting guide: https://docs.progress.com/bundle/whatsup-gold-custom-scripting/page/About-the-Configuration-Management-Custom-Script-Language.html

     

    You basically write the script like you would do it via SSH command line.

     

    Maybe someone has one created they could share.

    • Himanshu Dwivedi (Customer)

      Hello,

       

      Thanks for your revert, this is not working for Cisco as well.

       

      Although it is getting completed, but no restoring saying, No communications with the device was recorded, but backup of that device is successfully completed.

       

      I logged in to the switch and saw the logs it shows that NMS tried to login, but shows not sure from where this unknowing is coming.

       

      unknown@192.168.1.1

       

      • Mike Rockwell (Progress Software)

        Is it showing in the config management logs that it succeeded, for the Cisco?

      • Himanshu Dwivedi (Customer)

        Yes it is showing in the logs as well as in the task I can compare the file, even in my local drive config is backing up, but unable to restore the changed config.

      • Himanshu Dwivedi (Customer)

        Below are the screenshot.

        image 

        Below is the script what WUG is triggering.

        imageimage

      • Mike Rockwell (Progress Software)

        Go to SETTINGS: Configuration Management: File Transfer Settings and make sure everything there is set.

      • Mike Rockwell (Progress Software)

        You can open the the SFTP/SCP server, go to the user tab and either edit the WhatsUpGold user to change the password so you know it (I don't know the default password) or create your own user to use.

        sftpServerThen set the setting in WUG to the same that you did on the server.

      • Himanshu Dwivedi (Customer)

        okay, so I need to install SFTP server in my system?

      • Mike Rockwell (Progress Software)

        No, it was installed when you installed WhatsUp Gold.

10 of 17