Configuring and Understanding FortiManager 7.6.0 CLI Commands

FortiManager 7.6.0 introduces several changes and new commands to provide enhanced functionality and better management capabilities. This blog post provides a detailed guide on these updated CLI commands to help you configure and manage your FortiManager effectively.

New and Updated Commands in FortiManager 7.6.0

With the release of FortiManager 7.6.0, various commands have been updated, and some new ones have been added. Understanding these changes is crucial for efficient management.

• config fmupdate fds-setting: A new variable, system-support-fai, has been added.
• config fmupdate service: Added variable: query-ioc.
• config system admin profile: Added variable: adom-admin.
• config system admin setting: Removed variables: shell-access and shell-password.
• config system admin user: Added variables: policy-block and fortiai.
• config system fmg-cluster: New command added.
• config system global: New variables added: admin-host, admin-ssh-grace-time, fabric-storage-pool-quota, fabric-storage-pool-size, fcp-cfg-service, jsonapi-log.
• config system password-policy: New variable: password-history.
• diagnose debug application fazincid: New command added.
• diagnose dvm device object-reference: Command updated.
• diagnose dvm device reload: New command added.
• diagnose dvm remove unused-ips-packages: Command removed.
• diagnose fgfm cluster-session-list: New command added.
• diagnose rtm profile change-adom: New command added.
• diagnose rtm profile update check-interval: Command updated.
• diagnose rtm profile update post-interval: New command added.
• diagnose rtm profile update retry-interval: New command added.
• diagnose sql hcache: Command updated.
• diagnose sql remove: Command updated.
• diagnose sql status: Command updated.
• diagnose system aiserver: New command added.
• diagnose system csf resync-fmg-cluster: New command added.
• diagnose system mapserver clearcache: New command added.
• diagnose system mapserver reset: Command removed.
• diagnose system mapserver set: New command added.
• diagnose system mapserver unset: New command added.
• diagnose test application fazincid: New command added.
• execute backup fds: New command added.
• execute backup fgd: New command added.
• execute backup fmg-logs: New command added.
• execute backup fwm: New command added.
• execute backup rtm: New command added.
• execute fgfm cluster-move-dev: New command added.
• execute fgfm cluster-move-group: New command added.
• execute sql-local rebuild-adom: Command removed.
• execute sql-local rebuild-metadb: New command added.
• execute sql-local rebuild-siemdb: Command removed.

Purpose of Each Configuration Command

Understanding the purpose of each command helps in configuring FortiManager efficiently. Here’s a brief on the important categories:

• fmupdate: Configure FortiManager update settings. New variables enhance the flexibility of update configurations.
• system admin: Commands related to administrative settings, profiles, and user management. Updates include the addition of more secure and granular control variables.
• system global: Encompasses global settings affecting the overall system function and administration, with newly added variables for extended control.
• diagnose: Commands for diagnostic purposes, to check status, debug, and ensure system health. Several new and updated commands improve troubleshooting capabilities.
• execute: Commands to carry out specific tasks like backups and cluster operations. Newly added commands provide better management of backup operations and cluster movements.

Conclusion

FortiManager 7.6.0 brings various new and updated CLI commands to enhance management, security, and diagnostic capabilities. By understanding and utilizing these commands, administrators can ensure a more efficient and secure management of their FortiManager instances.

For more detailed information on each command, visit the official Fortinet documentation: FortiManager 7.6.0 CLI Reference