FortiGate—Automation_Backup_FortiCloud

Reference

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-send-a-backup-configuration-file-to/ta-p/195985

Note

### FortiCloud必須要是課金版本
It is necessary to have an active account in FortiCloud with paid subscriptions.

Situation

# 自動備份地端的FortiGate給FortiCloud
Automatically backup FortiGate config to FortiCloud.

Solution

[1]
Login FortiGate CLI

[2]
# 設定FortiGate為備份模式
config system central-management
  set mode backup
  set type fortiguard
end

[3]
# 測試備份指令
execute backup config management-station "Comment"

[4]
# 確認備份是否成功
Login FortiCloud > Configuration > Revisions > "FortiGate Serial Number" > Manage revisions

[5]
# 將備份指令指令加入Automation,設定Trigger
FortiGate WebUI > Security Fabric > Automation > Trigger
  event-type configuration-change

[6]
# 將備份指令指令放入Automation,設定Action
FortiGate WebUI > Security Fabric > Automation > Action > CLI Script
  execute backup config management-station "Comment"

[7]
# 建立Automation Stitch > 選定Trigger跟Action

TroubleShooting

# 確認FortiGuard是否可連
execute ping service.fortiguard.net
execute ping update.fortiguard.net

# 如果FortiGuard不可連,確認連出去的介面是否正確
config system fortiguard
  set interface-select-method { auto | sdwan | specify }
end