FortiOS Backup Issue

[pizu]

Hello,

We noticed that when triggering the backup directly from the fortigate it's self there are more commands when compared to the backup that is being takin from netshot, is it possible to have a feature to trigger the backup from fortigate directly towards netshot?

Thanks.

[Najihel]

Hello @pizu

The FortiOS driver use SCP to download the sys_config file (real config of the unit) if admin-scp is enabled on system global. If not, it failback to show output.

I'm curious, what type of config block are missing for you ?

[pizu]

hi @Najihel

Certificate private key missing
Certificate ca missing
Certificate last updated
ssh local-key private-key missing
endpoint-control certificate missing
switch-controller - set id's missing
firewall addresses - set dirty clean
vpn certificate local - set last-updated missing
global-label in policies missing
set vdom on physical ports some are missing
3/4 of the gui-dashboard config is missing

and much more i think - the above are definitely missing.

Comparing lines alone: show (93348) gui backup (98268)

[pizu]

Or maybe api to download the config

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Get-backup-config-file-on-FortiGate-using-RestAPI/ta-p/202286 <- need to test if the backup is the same as using the execute backup command/gui backup download

This could be a useful idea for more devices not just fortigate.