
Himanshu Dwivedi (Customer) asked a question.
Configuration Management of Fortinet & Palo Alto Firewall & Restore
Hello,
I have two FortiGate firewalls, and the configuration backup is completing successfully using the script below:
@login
config system console
set output standard
end
[running-config] show
config system console
set output more
end
However, I am unable to perform a configuration restore from WhatsUp Gold (WUG). During the restore operation, I only see two options, Running and Startup, which I believe are intended for Cisco devices.
Could you please advise on the following:
- What restore command or script should be used for FortiGate devices in WhatsUp Gold?
- How can I configure additional restore targets under "Restore this configuration to the..."?, and where to configure this to see it here
- Is there a FortiGate-specific restore template available that needs to be imported or configured within WhatsUp Gold Configuration Management?
- Are there any mandatory settings, credentials, or communication methods (SSH/SCP/TFTP) required to enable configuration restore for FortiGate devices?
Those use the scripts from the System Script library. Currently, there are no scripts to restore to a Palo-Alto. So, you will have to create your own custom script, which you could put in the system script library using the SysObjID of the Palos.
Here is the scripting guide: https://docs.progress.com/bundle/whatsup-gold-custom-scripting/page/About-the-Configuration-Management-Custom-Script-Language.html
You basically write the script like you would do it via SSH command line.
Maybe someone has one created they could share.
Hello,
Thanks for your revert, this is not working for Cisco as well.
Although it is getting completed, but no restoring saying, No communications with the device was recorded, but backup of that device is successfully completed.
I logged in to the switch and saw the logs it shows that NMS tried to login, but shows not sure from where this unknowing is coming.
unknown@192.168.1.1
Is it showing in the config management logs that it succeeded, for the Cisco?
Yes it is showing in the logs as well as in the task I can compare the file, even in my local drive config is backing up, but unable to restore the changed config.
Below are the screenshot.
Below is the script what WUG is triggering.
Go to SETTINGS: Configuration Management: File Transfer Settings and make sure everything there is set.
Which credentials should I put, windows or switch?
You can open the the SFTP/SCP server, go to the user tab and either edit the WhatsUpGold user to change the password so you know it (I don't know the default password) or create your own user to use.
okay, so I need to install SFTP server in my system?
No, it was installed when you installed WhatsUp Gold.