4 Ways to Backup/Restore FortiGate Configuration

in this video we will go over four different ways on how we can back up our fortigate configuration uh from manual to automatic options and then we'll also cover how we can restore our configuration we can manually backup our configuration by clicking the admin username in the top right corner going to configuration backup hitting ok and then we'll have a file downloaded to our downloads folder and this is the whole configuration in its entirety now let's pick a quick change to the fortigates configuration we'll just change the hostname from 483 to ttp fortinet we'll apply that configuration and then now let's just restore that configuration that we that we just saved a moment ago all right so that will require a system reboot all right now once we're back online we can see that the host name is 48 number 3 like it is in the configuration file which if we take a closer look we can actually even see that specific in in the file that we just uploaded so that's pretty much it you know all the configuration is just stored on one file on the fortigate so really easy to backup and restore manually another option we have is to leverage automation so before we get into the automation logic this is kind of the idea here is that we can have a com a command that is run whenever we set a trigger which we'll get into in a moment here but this would be the command that would be run so when we run that command we've connected to a tftp server and we've dropped the configuration file so this would this is the tftp server that we're logging to let's do it again here there we go so we can see that action happening we go to tftpd here and this is where our config file is all right and how we configure this is we go to security fabric followed by automation we'll create a new automation stitch let's just name it backup we'll make it on a schedule you know so maybe we're going to make it a you know monday morning cli trigger here and we'll name our script backup and then i've just kind of copy pasted the same command that we just ran a moment ago so yeah pretty much every single monday morning we're going to have a backup that gets automatically triggered to the tftp server another good option here is if we configure 40 gate cloud so if you haven't already you can just click not not activated on this main dashboard and then configure your your samesupport.fortinet.com credentials that you use to log into the support portal but just configure 40 cloud if you if you haven't already great once we've activated fortigate cloud um let's just make one more check and go to security fabric fabric connectors 40 manager i know we're not configuring 40 manager but let's just make sure that this section says 40 cloud here and we have to configure one thing via cli here so we go config configure system central management we go set mode backup now whenever the following command is run then a backup of the configuration file will be available via 40 gate cloud so let's log in to 40 gate cloud now first we go to 40 cloud.com and then we'll log in here now once we access 48 cloud let's go to the specific fortigate go to the management section and then we'll click backup and there we have it right and in my case i just ran the same command twice and what's kind of cool about that too is even though we're using the same name in in the cli command from the 40 gate we do save a unique copy and that's one thing that differentiates this option versus the tftp option that we showed before now same as our tftp example before when we set it on an automation script we can go to the one that we just created prior which was the backup option here and then we'll just change that command and then in this case it would actually upload the log or the configuration to 40 cloud instead of to that tftp server now now our final option to backup configurations automatically would be using the scalable and and a lot more feature-rich option which would be the 40 manager so to do that what we would start by doing here would be to configure our fabric connector we'll change from our 40 gate cloud config here like we did in our previous example we'll move over to on premise i'll put in the ip address of my 4d manager unit and then an authorization request will be sent to the 40 manager on the 40 manager in the top right corner i'll just authorize the device here all right so once authorized we can click on the new unit here and then we see that we have the revision and the revision history here so now what we'll do is i'll just push a policy configuration pretty much pushing a configuration update to the fortigate and then see what it looks like so using the same example as before let's just change the host name again we'll change it from 483 to ttp fortinet okay and then after that we do we just go through the install wizard as normal and we will update the configuration for forty gate three so let's install that now okay after the install let's take a look again at the revision history there we go so we have two now and then we can you know for example let's do a diff between these two select version so that's pretty cool there we can see the the diff here and then what we can also do is we can right click this and go revert so if we want to go back to the initial configuration we just would select revert perfect and then after the after we do that revert there then really the next step is that we import the configuration once again and then we run the install wizard again once that's done we can take a look at our unit again and we confirm the hostname is back to being forty gate three and now we have three total revisions the latest one the latest revision technically being the the first revision as well all right so that covers our four different ways on how we can back up our configuration on our fortigate thanks for watching and we'll see you in the next video

Channel: ToThePoint Fortinet

Views: 9,496

Keywords: backup, fortigate, configuration, fortinet how to, fortigate how to, fortimanager, backup config, fortigate cloud, forticloud, fortigate backup, fortinet backup

Id: Pjt8RrkaOh0

Length: 7min 15sec (435 seconds)

Published: Thu Feb 03 2022