DOCUMENT LIBRARY
DOCUMENT LIBRARY
Products
Best Practices
Hardware Guides
Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
Hybrid Mesh Firewall
FortiGate/ FortiOS
FortiGate-5000
/
6000
/
7000
NOC Management
FortiManager
/
FortiManager Cloud
Managed Fortigate Service
LAN
FortiSwitch
FortiAP / FortiWiFi
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
More >>
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Lacework FortiCNAPP
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Web Application / API Protection
FortiWeb
FortiADC
FortiDAST
More >>
Security Operations
Security Operations Automation
FortiAnalyzer
/
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
SOC-as-a-Service (SOCaaS)
Identity
FortiAuthenticator
FortiTrust Identity
FortiPAM
Early Detection & Prevention
FortiSandbox
/
FortiSandbox Cloud
FortiNDR
FortiDeceptor
FortiRecon
More >>
Secure Networking
Hybrid Mesh Firewall
FortiGate/ FortiOS
FortiGate-5000
/
6000
/
7000
NOC Management
FortiManager
/
FortiManager Cloud
Managed Fortigate Service
FortiAIOps
LAN
FortiSwitch
FortiAP / FortiWiFi
FortiAP-U Series
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
Communication & Surveillance
FortiVoice
/
FortiVoice Cloud
FortiFone
FortiCamera
FortiRecorder
FortiCentral
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Cloud-Native Security
Lacework FortiCNAPP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiADC
FortiDAST
Security Operations
Security Operations Automation
FortiAnalyzer
/
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
Endpoint
FortiClient
/
FortiClient Cloud
FortiEDR/XDR
Data Protection
FortiDLP
FortiDLP Agent
FortiDLP Policies
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken
/
FortiToken Cloud
FortiPAM
Email
FortiMail
FortiPhish
Early Detection & Prevention
FortiSandbox
/
FortiSandbox Cloud
FortiNDR
FortiDeceptor
FortiRecon
Expert Services
SOC-as-a-Service (SOCaaS)
Edge Firewall
FortiGate/FortiOS
FortiGate-5000
/
6000
/
7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
/
FortiManager Cloud
FortiAnalyzer
/
FortiAnalyzer Cloud
Overlay-as-a-Service
SD Branch
FortiSwitch
FortiAP / FortiWiFi
FortiExtender
/
FortiExtender Cloud
Application Delivery
FortiADC
/
FortiGSLB
Single Vendor SASE
FortiSASE
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Secure Private Access
Secure SD-WAN
Zero Trust Network Access (ZTNA)
Thin Edge
FortiGate/ FortiOS
FortiAP / FortiWiFi
FortiExtender
/
FortiExtender Cloud
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Application Gateway
FortiGate/ FortiOS
FortiProxy
FortiADC
/
FortiGSLB
Enterprise Asset Management
FortiClient EMS
Endpoint Agent
FortiClient
/
FortiClient Cloud
Agentless Security Posture
FortiNAC-F
FortiSIEM
/
FortiSIEM Cloud
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Wireless
FortiAP / FortiWiFi
FortiAP-U Series
FortiGate Cloud
Switching
FortiSwitch
FortiEdge Cloud
FortiNAC-F
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Privilege Acccess Management
FortiPAM
Next Generation Firewall
FortiGate / FortiOS
FortiGate-5000
/
6000
/
7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
/
FortiManager Cloud
FortiAnalyzer
/
FortiAnalyzer Cloud
Expert Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
All
FortiADC Public Cloud
FortiAnalyzer Public Cloud
FortiAuthenticator Public Cloud
FortiDeceptor Public Cloud
FortiGate Public Cloud
FortiIsolator Public Cloud
FortiManager Public Cloud
FortiNDR Public Cloud
FortiPAM Public Cloud
FortiPortal Public Cloud
FortiProxy Public Cloud
FortiSandbox Public Cloud
FortiTester Public Cloud
FortiVoice Public Cloud
FortiWeb Manager Public Cloud
FortiWeb Public Cloud
All
FortiADC Private Cloud
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Private Cloud
FortiAuthenticator Private Cloud
FortiDeceptor Private Cloud
FortiGate Private Cloud
FortiManager Private Cloud
FortiNDR Private Cloud
FortiPAM Private Cloud
FortiProxy Private Cloud
FortiSandbox Private Cloud
FortiTester Private Cloud
FortiVoice Private Cloud
FortiWeb Manager Private Cloud
FortiWeb Private Cloud
Account Management
FortiCloud Services
SAAS Management
FortiGate Cloud
FortiEdge Cloud
FortiEdge Cloud
FortiExtender Cloud
FortiPresence Cloud
FortiToken Cloud
FortiTrust Identity
FortiZTP
FortiCamera Cloud
SAAS Application Security
FortiWeb Cloud
FortiGSLB
FortiCASB
FortiCNP
FortiInsight
FortiPhish
FortiGate CNF
Managed Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
Platform as a service (PAAS)
FortiSASE
FortiAnalyzer Cloud
FortiManager Cloud
FortiClient Cloud
FortiSandbox Cloud
FortiMail Cloud
FortiSOAR Cloud
Other SAAS Services
Overlay-as-a-Service
FortiRecon
FortiConverter
ForiIPAM
FortiFlex
FortiCare Elite
4D Resources
Solution Hubs
Define, design, deploy, demo
4D Pillars
Secure SD-WAN
Zero Trust Network Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Curated Links by Solution
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
Next Generation Firewall
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP / FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiCache
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiProxy
FortiRecorder
FortiGate
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
AscenLink
AV Engine
AWS Firewall Rules
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIOps
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAP / FortiWiFi
FortiAP-U Series
FortiAuthenticator
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiAuthProxy
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCASB
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiCNP
FortiConnect
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiCSPM
FortiCWP
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiDNS
FortiEdge Cloud
FortiEDR/XDR
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate Cloud
FortiGate CNF
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGSLB
FortiGuard Advanced Bot Protection
FortiGuest
FortiHypervisor
FortiInsight
FortiInsight Cloud
FortiIPAM
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail
FortiMail Cloud
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRecon
FortiRecorder
FortiRPS
FortiSandbox
FortiSandbox Cloud
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSASE
FortiScanner
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSwitch
FortiSwitch Manager
FortiTap
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiToken Cloud
FortiTrust Identity
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWeb
FortiWeb Cloud
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiWLM
FortiZTP
IPS Engine
Lacework FortiCNAPP
Managed FortiGate Service
Overlay-as-a-Service
Security Awareness and Training
SOCaaS
Wireless Controller
Search documents and hardware ...
CLI Reference
Introduction
Using the CLI
Command syntax
Subcommands
Permissions
Tips & tricks
config endpoint-control
config endpoint-control fctems
config endpoint-control client
config endpoint-control tag
config firewall
config firewall connlimit
config firewall connlimit6
config firewall global
config firewall nat-snat
config firewall policy
config firewall policy6
config firewall qos-filter
config firewall qos-filter6
config firewall qos-queue
config firewall vip
config global
config config sync-list
config log setting global_remote
config log setting global_faz
config system global
config system vdom-link
config global-dns-server
config global-dns-server address-group
config global-dns-server dns64
config global-dns-server dsset-info-list
config global-dns-server general
config global-dns-server policy
config global-dns-server remote-dns-server
config global-dns-server response-rate-limit
config global-dns-server trust-anchor-key
config global-dns-server zone
config global-load-balance
config global load balance analytic
config global-load-balance data-center
config global-load-balance link
config global-load-balance servers
config global-load-balance setting
Listen on interface/port
Persistence
Proximity
Password
config global-load-balance topology
config global-load-balance virtual-server-pool
config global-load-balance host
config link-load-balance
config link-load-balance flow-policy
config link-load-balance gateway
config link-load-balance link-group
config link-load-balance persistence
config link-load-balance proximity-route
config link-load-balance virtual-tunnel
config load-balance
config load-balance auth-policy
config load-balance caching
config load-balance captcha-profile
config load-balance certificate-caching
config load-balance client-ssl-profile
config load-balance clone-pool
config load-balance compression
config load-balance connection-pool
config load-balance content-rewriting
config load-balance content-routing
config load-balance error-page
config load-balance geoip-list
config load-balance http2-profile
config load-balance http3-profile
config load-balance ippool
config load-balance l2-exception-list
config load-balance method
config load-balance pagespeed
config load-balance pagespeed-profile
config load-balance persistence
config load-balance pool
config load-balance profile
config load-balance real-server-ssl-profile
config load-balance real-server
config load-balance reputation
config load-balance reputation-exception
config load-balance reputation-black-list
config load-balance schedule-pool
config load-balance virtual-server
config load-balance web-category
config load-balance web-filter-profile
config load-balance web-sub-category
config load-balance allowlist
config log
config log fast_report
config log report
config log report email
config log report_queryset
config log setting fast_stats
config log setting local
config log setting remote
config log setting fortianalyzer
config router
config router isp
config router bgp
config router bfd
config router md5-ospf
config router ospf
config router policy
config router setting
config router static
config security
config security antivirus profile
config security antivirus quarantine
config security antivirus settings
config security dos dos-protection-profile
config security dos http-access-limit
config security dos dns-query-flood-protection
config security dos dns-reverse-flood-protection
config security dos http-connection-flood-protection
config security dos http-request-flood-protection
config security dos ip-fragmentation-protection
config security dos tcp-access-flood-protection
config security dos tcp-slowdata-attack-protection
config security dos tcp-synflood-protection
config security ips profile
config security wad profile
config security waf api-gateway-policy
config security waf api-gateway-rule
config security waf api-gateway-user
config security waf api-discovery
config security waf bot-detection
config security waf threshold-based-detection
config security waf biometrics-based-detection
config security waf fingerprint-based-detection
config security waf advanced-bot-protection
config security waf exception
config security waf heuristic-sql-xss-injection-detection
config security waf http-protocol-constraint
config security waf http-header-security
config security waf action
config security waf profile
config security waf input-validation-policy
config security waf parameter-validation-rule
config security waf url-protection
config security waf web-attack-signature
config security waf json-validation-detection
config security waf json-schema file
config security waf xml-schema file
config security waf xml-validation-detection
config security waf openapi-schema-file
config security waf openapi-validation-detection
config security waf scanner
config security waf brute-force-login
config security waf advanced-protection
config security waf cookie-security
config security waf data-leak-protection
config security waf sensitive-data-type
config security waf dlp-dictionary
config security waf dlp-sensors
config security waf csrf-protection
config security waf allowed-origin
config security waf cors-headers
config security waf cors-protection
configure security ztna-profile
config system
config system accprofile
config system address
config system address6
config system addrgrp
config system addrgrp6
config system admin
config system auto backup
config system azure
config system azure-lb-backend-ip
config system certificate ca
config system certificate ca_group
config system certificate certificate_verify
config system certificate crl
config system certificate intermediate_ca
config system certificate intermediate_ca_group
config system certificate local
config system certificate local_cert_group
config system certificate remote
config system certificate ocsp
config system certificate ocsp_stapling
config system certificate remote
config system dns
config system dns-vdom
config system external-resource
config system fortiguard
config system ha
config system health-check
config system health-check-script
config system interface
config system isp-addr
config system mailserver
config system one-click-glb-server
config system overlay-tunnel
config system password-policy
config system schedule-group
config system scripting
config system sdn-connector
config system service
config system servicegrp
config system setting
config system snmp community
config system snmp sysinfo
config system snmp user
config system tcpdump
config system time manual
config system time ntp
config system web-filter
config system fortisandbox
config system alert
config system alert-action
config system alert-policy
config system alert-email
config system alert-snmp-trap
config system central-management
config user
config user ldap
config user local
config user radius
config user tacacs+
config user user-group
config user authentication-relay
config user oauth
config user saml-idp
config user saml-sp
diagnose
diagnose antivirus quarantine
diagnose debug cmdb
diagnose debug enable/disable
diagnose debug flow
diagnose debug info
diagnose debug module
diagnose debug module fcnacd
diagnose debug module fnginx
diagnose debug module httproxy scripting
diagnose debug module httproxy ssl
diagnose debug module httproxy ztna
diagnose debug module kernel
diagnose debug module miglogd syslog
diagnose debug module named
diagnose debug module waf
diagnose debug module wassd
diagnose debug timestamp
diagnose endpoint-control client list
diagnose endpoint-control tag list
diagnose firewall-session clear
diagnose hardware deviceinfo
diagnose hardware ioport
diagnose hardware pciconfig
diagnose hardware sysinfo
diagnose llb policy list
diagnose netlink backlog
diagnose netlink device
diagnose netlink interface
diagnose netlink ip/ipv6
diagnose netlink neighbor/neighbor6
diagnose netlink route/route6
diagnose netlink tcp
diagnose netlink udp
diagnose server load balance dns-clients
diagnose server-load-balance persistence
diagnose server-load-balance session
diagnose server-load-balance slb_load
diagnose sniffer packet
diagnose system top
diagnose system vm
diagnose system threat-analytics info
diagnose tech-report
diagnose waf api-security memory
execute
execute autoupdate
execute caching
execute certificate ca
execute certificate crl
execute certificate local
execute certificate local import automated
execute certificate remote
execute certificate config
execute checklogdisk
execute clean
execute config-sync
execute curl
execute curl-option
execute date
execute discovery-glb-virtual-server
execute dns rebuild
execute dumpsystem
execute dumpsystem-file
execute factoryreset
execute factoryreset2
execute fixlogdisk
execute formatlogdisk
execute geolookup
execute glb-dprox-lookup
execute glb-persistence-lookup
execute ha force fetch-peers-info
execute ha force standby
execute ha force sync-config
execute ha force transfer-file
execute ha manage
execute hardware-ssl list-ciphers
execute health-check-verify
execute hwmon
execute isplookup
execute log delete-file
execute log delete-type
execute log list-type
execute log rebuild-db
execute nslookup
execute oas-file import
execute packet-capture/packet-capture6
execute packet-capture-file
execute ping-option/ping6-option
execute ping/ping6
execute reboot
execute reload
execute restore
execute scan-report export
execute scan-report import
execute scripting-shared-table
execute shutdown
execute ssh
execute statistics-db
execute ssli mode
execute telnet
execute traceroute
execute vm license
execute web-category-test
execute SSL client-side session statistics
execute SSL handshake record statistics
execute waf block-ip
execute web vulnerability scan
execute web-vulnerability-scan mitigate
execute forticloud create-account
execute forticloud login
execute forticloud try
execute fctems
execute update-now
execute update-dldb
get
get firewall global
get router info ospf
get router info routing-table
get security waf-signature-status
get security scan-report
get security scan-task
get system ha-status
get system performance
get system status
get system traffic-group
get system traffic-group status
get router info bgp all
get router info bgp ip
get router info bgp neighbors
get router info bgp regexp
get router info bgp summary
get router info6 bgp all
get router info6 bgp ip
get router info6 bgp neighbors
get router info6 bgp regexp
get router info6 bgp summary
show
Appendix A: Virtual domains
Change Log
Home
FortiADC 7.4.3
CLI Reference
7.4.3
7.6.0
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.1.4
7.1.3
7.1.2
7.1.1
7.1.0
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.2
6.0.1
6.0.0
5.4.5
5.4.3
5.4.2
5.4.1
5.4.0
5.3.0
4.8.1
4.7.0
config global-load-balance setting
config global-load-balance setting
Use this command to configure the following:
Listen on interface/port
Persistence
Proximity
Authentication
Previous
Next
config global-load-balance setting
config global-load-balance setting
Use this command to configure the following:
Listen on interface/port
Persistence
Proximity
Authentication
Previous
Next
Home
Product Pillars
Network Security
Network Security
FortiGate / FortiOS
FortiGate 5000
FortiGate 6000
FortiGate 7000
FortiProxy
NOC & SOC Management
FortiManager
FortiManager Cloud
FortiAnalyzer
FortiAnalyzer Cloud
FortiMonitor
FortiGate Cloud
Enterprise Networking
Secure SD-WAN
FortiLAN Cloud
FortiSwitch
FortiAP / FortiWiFi
FortiAP-U Series
FortiNAC-F
FortiExtender
FortiExtender Cloud
FortiAIOps
Business Communications
FortiFone
FortiVoice
FortiVoice Cloud
FortiRecorder
FortiCamera
Zero Trust Access
ZTNA
Zero Trust Network Access
FortiClient EMS
SASE
FortiSASE
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Cloud Security
Hybrid Cloud Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiFlex
Cloud Native Protection
FortiCNP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiWeb Cloud
FortiADC
FortiGSLB
FortiGuard ABP
SAAS Security
FortiMail
FortiMail Cloud
FortiCASB
Security Operations
SOC Platform
FortiAnalyzer
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
FortiPhish
Advanced Threat Protection
FortiSandbox
FortiSandbox Cloud
FortiNDR
FortiNDR Cloud
FortiDeceptor
FortiInsight
FortiInsight Cloud
FortiIsolator
Endpoint Security
FortiClient
FortiClient Cloud
FortiEDR
Best Practices
Solution Hubs
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Next Generation Firewall
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
4-D Resources
Secure SD-WAN
Zero Trust Network Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Hardware Guides
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP / FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiCache
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiGate
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiProxy
FortiRecorder
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
Product A-Z
AscenLink
AV Engine
AWS Firewall Rules
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIOps
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAP / FortiWiFi
FortiAP-U Series
FortiAuthenticator
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiAuthProxy
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCASB
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiCNP
FortiConnect
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiCSPM
FortiCWP
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiDNS
FortiEdge Cloud
FortiEDR/XDR
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate Cloud
FortiGate CNF
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGSLB
FortiGuard Advanced Bot Protection
FortiGuest
FortiHypervisor
FortiInsight
FortiInsight Cloud
FortiIPAM
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail
FortiMail Cloud
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRecon
FortiRecorder
FortiRPS
FortiSandbox
FortiSandbox Cloud
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSASE
FortiScanner
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSwitch
FortiSwitch Manager
FortiTap
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiToken Cloud
FortiTrust Identity
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWeb
FortiWeb Cloud
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiWLM
FortiZTP
IPS Engine
Lacework FortiCNAPP
Managed FortiGate Service
Overlay-as-a-Service
Security Awareness and Training
SOCaaS
Wireless Controller
Ordering Guides
Download PDF
Table of Contents
Introduction
Using the CLI
Command syntax
Subcommands
Permissions
Tips & tricks
config endpoint-control
config endpoint-control fctems
config endpoint-control client
config endpoint-control tag
config firewall
config firewall connlimit
config firewall connlimit6
config firewall global
config firewall nat-snat
config firewall policy
config firewall policy6
config firewall qos-filter
config firewall qos-filter6
config firewall qos-queue
config firewall vip
config global
config config sync-list
config log setting global_remote
config log setting global_faz
config system global
config system vdom-link
config global-dns-server
config global-dns-server address-group
config global-dns-server dns64
config global-dns-server dsset-info-list
config global-dns-server general
config global-dns-server policy
config global-dns-server remote-dns-server
config global-dns-server response-rate-limit
config global-dns-server trust-anchor-key
config global-dns-server zone
config global-load-balance
config global load balance analytic
config global-load-balance data-center
config global-load-balance link
config global-load-balance servers
config global-load-balance setting
Listen on interface/port
Persistence
Proximity
Password
config global-load-balance topology
config global-load-balance virtual-server-pool
config global-load-balance host
config link-load-balance
config link-load-balance flow-policy
config link-load-balance gateway
config link-load-balance link-group
config link-load-balance persistence
config link-load-balance proximity-route
config link-load-balance virtual-tunnel
config load-balance
config load-balance auth-policy
config load-balance caching
config load-balance captcha-profile
config load-balance certificate-caching
config load-balance client-ssl-profile
config load-balance clone-pool
config load-balance compression
config load-balance connection-pool
config load-balance content-rewriting
config load-balance content-routing
config load-balance error-page
config load-balance geoip-list
config load-balance http2-profile
config load-balance http3-profile
config load-balance ippool
config load-balance l2-exception-list
config load-balance method
config load-balance pagespeed
config load-balance pagespeed-profile
config load-balance persistence
config load-balance pool
config load-balance profile
config load-balance real-server-ssl-profile
config load-balance real-server
config load-balance reputation
config load-balance reputation-exception
config load-balance reputation-black-list
config load-balance schedule-pool
config load-balance virtual-server
config load-balance web-category
config load-balance web-filter-profile
config load-balance web-sub-category
config load-balance allowlist
config log
config log fast_report
config log report
config log report email
config log report_queryset
config log setting fast_stats
config log setting local
config log setting remote
config log setting fortianalyzer
config router
config router isp
config router bgp
config router bfd
config router md5-ospf
config router ospf
config router policy
config router setting
config router static
config security
config security antivirus profile
config security antivirus quarantine
config security antivirus settings
config security dos dos-protection-profile
config security dos http-access-limit
config security dos dns-query-flood-protection
config security dos dns-reverse-flood-protection
config security dos http-connection-flood-protection
config security dos http-request-flood-protection
config security dos ip-fragmentation-protection
config security dos tcp-access-flood-protection
config security dos tcp-slowdata-attack-protection
config security dos tcp-synflood-protection
config security ips profile
config security wad profile
config security waf api-gateway-policy
config security waf api-gateway-rule
config security waf api-gateway-user
config security waf api-discovery
config security waf bot-detection
config security waf threshold-based-detection
config security waf biometrics-based-detection
config security waf fingerprint-based-detection
config security waf advanced-bot-protection
config security waf exception
config security waf heuristic-sql-xss-injection-detection
config security waf http-protocol-constraint
config security waf http-header-security
config security waf action
config security waf profile
config security waf input-validation-policy
config security waf parameter-validation-rule
config security waf url-protection
config security waf web-attack-signature
config security waf json-validation-detection
config security waf json-schema file
config security waf xml-schema file
config security waf xml-validation-detection
config security waf openapi-schema-file
config security waf openapi-validation-detection
config security waf scanner
config security waf brute-force-login
config security waf advanced-protection
config security waf cookie-security
config security waf data-leak-protection
config security waf sensitive-data-type
config security waf dlp-dictionary
config security waf dlp-sensors
config security waf csrf-protection
config security waf allowed-origin
config security waf cors-headers
config security waf cors-protection
configure security ztna-profile
config system
config system accprofile
config system address
config system address6
config system addrgrp
config system addrgrp6
config system admin
config system auto backup
config system azure
config system azure-lb-backend-ip
config system certificate ca
config system certificate ca_group
config system certificate certificate_verify
config system certificate crl
config system certificate intermediate_ca
config system certificate intermediate_ca_group
config system certificate local
config system certificate local_cert_group
config system certificate remote
config system certificate ocsp
config system certificate ocsp_stapling
config system certificate remote
config system dns
config system dns-vdom
config system external-resource
config system fortiguard
config system ha
config system health-check
config system health-check-script
config system interface
config system isp-addr
config system mailserver
config system one-click-glb-server
config system overlay-tunnel
config system password-policy
config system schedule-group
config system scripting
config system sdn-connector
config system service
config system servicegrp
config system setting
config system snmp community
config system snmp sysinfo
config system snmp user
config system tcpdump
config system time manual
config system time ntp
config system web-filter
config system fortisandbox
config system alert
config system alert-action
config system alert-policy
config system alert-email
config system alert-snmp-trap
config system central-management
config user
config user ldap
config user local
config user radius
config user tacacs+
config user user-group
config user authentication-relay
config user oauth
config user saml-idp
config user saml-sp
diagnose
diagnose antivirus quarantine
diagnose debug cmdb
diagnose debug enable/disable
diagnose debug flow
diagnose debug info
diagnose debug module
diagnose debug module fcnacd
diagnose debug module fnginx
diagnose debug module httproxy scripting
diagnose debug module httproxy ssl
diagnose debug module httproxy ztna
diagnose debug module kernel
diagnose debug module miglogd syslog
diagnose debug module named
diagnose debug module waf
diagnose debug module wassd
diagnose debug timestamp
diagnose endpoint-control client list
diagnose endpoint-control tag list
diagnose firewall-session clear
diagnose hardware deviceinfo
diagnose hardware ioport
diagnose hardware pciconfig
diagnose hardware sysinfo
diagnose llb policy list
diagnose netlink backlog
diagnose netlink device
diagnose netlink interface
diagnose netlink ip/ipv6
diagnose netlink neighbor/neighbor6
diagnose netlink route/route6
diagnose netlink tcp
diagnose netlink udp
diagnose server load balance dns-clients
diagnose server-load-balance persistence
diagnose server-load-balance session
diagnose server-load-balance slb_load
diagnose sniffer packet
diagnose system top
diagnose system vm
diagnose system threat-analytics info
diagnose tech-report
diagnose waf api-security memory
execute
execute autoupdate
execute caching
execute certificate ca
execute certificate crl
execute certificate local
execute certificate local import automated
execute certificate remote
execute certificate config
execute checklogdisk
execute clean
execute config-sync
execute curl
execute curl-option
execute date
execute discovery-glb-virtual-server
execute dns rebuild
execute dumpsystem
execute dumpsystem-file
execute factoryreset
execute factoryreset2
execute fixlogdisk
execute formatlogdisk
execute geolookup
execute glb-dprox-lookup
execute glb-persistence-lookup
execute ha force fetch-peers-info
execute ha force standby
execute ha force sync-config
execute ha force transfer-file
execute ha manage
execute hardware-ssl list-ciphers
execute health-check-verify
execute hwmon
execute isplookup
execute log delete-file
execute log delete-type
execute log list-type
execute log rebuild-db
execute nslookup
execute oas-file import
execute packet-capture/packet-capture6
execute packet-capture-file
execute ping-option/ping6-option
execute ping/ping6
execute reboot
execute reload
execute restore
execute scan-report export
execute scan-report import
execute scripting-shared-table
execute shutdown
execute ssh
execute statistics-db
execute ssli mode
execute telnet
execute traceroute
execute vm license
execute web-category-test
execute SSL client-side session statistics
execute SSL handshake record statistics
execute waf block-ip
execute web vulnerability scan
execute web-vulnerability-scan mitigate
execute forticloud create-account
execute forticloud login
execute forticloud try
execute fctems
execute update-now
execute update-dldb
get
get firewall global
get router info ospf
get router info routing-table
get security waf-signature-status
get security scan-report
get security scan-task
get system ha-status
get system performance
get system status
get system traffic-group
get system traffic-group status
get router info bgp all
get router info bgp ip
get router info bgp neighbors
get router info bgp regexp
get router info bgp summary
get router info6 bgp all
get router info6 bgp ip
get router info6 bgp neighbors
get router info6 bgp regexp
get router info6 bgp summary
show
Appendix A: Virtual domains
Change Log