DOCUMENT LIBRARY

FortiGate / FortiOS

FortiManager

FortiAnalyzer

CLI Reference

Introduction
Using the CLI
- Command syntax
- Subcommands
- Permissions
- Tips & tricks
config endpoint-control
- config endpoint-control fctems
- config endpoint-control client
- config endpoint-control tag
config firewall
- config firewall connlimit
- config firewall connlimit6
- config firewall global
- config firewall nat-snat
- config firewall policy
- config firewall policy6
- config firewall qos-filter
- config firewall qos-filter6
- config firewall qos-queue
- config firewall vip
config global
- config config sync-list
- config log setting global_remote
- config log setting global_faz
- config system global
- config system vdom-link
config global-dns-server
- config global-dns-server address-group
- config global-dns-server dns64
- config global-dns-server dsset-info-list
- config global-dns-server general
- config global-dns-server policy
- config global-dns-server remote-dns-server
- config global-dns-server response-rate-limit
- config global-dns-server trust-anchor-key
- config global-dns-server zone
config global-load-balance
- config global load balance analytic
- config global-load-balance data-center
- config global-load-balance link
- config global-load-balance servers
- config global-load-balance setting
- config global-load-balance topology
- config global-load-balance virtual-server-pool
- config global-load-balance host
config link-load-balance
- config link-load-balance flow-policy
- config link-load-balance gateway
- config link-load-balance link-group
- config link-load-balance persistence
- config link-load-balance proximity-route
- config link-load-balance virtual-tunnel
config load-balance
- config load-balance auth-policy
- config load-balance caching
- config load-balance captcha-profile
- config load-balance certificate-caching
- config load-balance client-ssl-profile
- config load-balance clone-pool
- config load-balance compression
- config load-balance connection-pool
- config load-balance content-rewriting
- config load-balance content-routing
- config load-balance error-page
- config load-balance geoip-list
- config load-balance http2-profile
- config load-balance http3-profile
- config load-balance ippool
- config load-balance l2-exception-list
- config load-balance method
- config load-balance pagespeed
- config load-balance pagespeed-profile
- config load-balance persistence
- config load-balance pool
- config load-balance profile
- config load-balance real-server-ssl-profile
- config load-balance real-server
- config load-balance reputation
- config load-balance reputation-exception
- config load-balance reputation-black-list
- config load-balance schedule-pool
- config load-balance virtual-server
- config load-balance web-category
- config load-balance web-filter-profile
- config load-balance web-sub-category
- config load-balance allowlist
config log
- config log fast_report
- config log report
- config log report email
- config log report_queryset
- config log setting fast_stats
- config log setting local
- config log setting remote
- config log setting fortianalyzer
config router
- config router isp
- config router bgp
- config router bfd
- config router md5-ospf
- config router ospf
- config router ospf6
- config router policy
- config router setting
- config router static
config security
- config security antivirus profile
- config security antivirus quarantine
- config security antivirus settings
- config security dos dos-protection-profile
- config security dos http-access-limit
- config security dos dns-query-flood-protection
- config security dos dns-reverse-flood-protection
- config security dos http-connection-flood-protection
- config security dos http-request-flood-protection
- config security dos ip-fragmentation-protection
- config security dos tcp-access-flood-protection
- config security dos tcp-slowdata-attack-protection
- config security dos tcp-synflood-protection
- config security ips profile
- config security wad profile
- config security waf adaptive-learning
- config security waf api-gateway-policy
- config security waf api-gateway-rule
- config security waf api-gateway-user
- config security waf api-discovery
- config security waf bot-detection
- config security waf threshold-based-detection
- config security waf biometrics-based-detection
- config security waf fingerprint-based-detection
- config security waf advanced-bot-protection
- config security waf exception
- config security waf heuristic-sql-xss-injection-detection
- config security waf http-protocol-constraint
- config security waf http-header-security
- config security waf action
- config security waf profile
- config security waf input-validation-policy
- config security waf parameter-validation-rule
- config security waf hidden-field-rule
- config security waf file-restriction-rule
- config security waf url-protection
- config security waf web-attack-signature
- config security waf json-validation-detection
- config security waf json-schema file
- config security waf xml-schema file
- config security waf xml-validation-detection
- config security waf openapi-schema-file
- config security waf openapi-validation-detection
- config security waf scanner
- config security waf brute-force-login
- config security waf advanced-protection
- config security waf cookie-security
- config security waf data-leak-protection
- config security waf sensitive-data-type
- config security waf dlp-dictionary
- config security waf dlp-sensors
- config security waf csrf-protection
- config security waf allowed-origin
- config security waf cors-headers
- config security waf cors-protection
- configure security ztna-profile
config system
- config system accprofile
- config system address
- config system address6
- config system addrgrp
- config system addrgrp6
- config system admin
- config system auto backup
- config system azure
- config system azure-lb-backend-ip
- config system certificate ca
- config system certificate ca_group
- config system certificate certificate_verify
- config system certificate crl
- config system certificate intermediate_ca
- config system certificate intermediate_ca_group
- config system certificate local
- config system certificate local_cert_group
- config system certificate remote
- config system certificate ocsp
- config system certificate ocsp_stapling
- config system certificate remote
- config system dns
- config system dns-vdom
- config system external-resource
- config system fortiguard
- config system ha
- config system health-check
- config system health-check-script
- config system interface
- config system isp-addr
- config system mailserver
- config system one-click-glb-server
- config system overlay-tunnel
- config system password-policy
- config system schedule-group
- config system scripting
- config system sdn-connector
- config system service
- config system servicegrp
- config system setting
- config system snmp community
- config system snmp sysinfo
- config system snmp user
- config system tcpdump
- config system time manual
- config system time ntp
- config system web-filter
- config system fortisandbox
- config system alert
- config system alert-action
- config system alert-policy
- config system alert-email
- config system alert-snmp-trap
- config system central-management
- config system csf
config user
- config user ldap
- config user local
- config user radius
- config user tacacs+
- config user user-group
- config user authentication-relay
- config user oauth
- config user saml-idp
- config user saml-sp
diagnose
- diagnose antivirus quarantine
- diagnose debug cmdb
- diagnose debug enable/disable
- diagnose debug flow
- diagnose debug ha
- diagnose debug info
- diagnose debug module
- diagnose debug module autolearn
- diagnose debug module csfd
- diagnose debug module fcnacd
- diagnose debug module fnginx
- diagnose debug module httproxy dos
- diagnose debug module httproxy scripting
- diagnose debug module httproxy ssl
- diagnose debug module httproxy ztna
- diagnose debug module kernel
- diagnose debug module miglogd syslog
- diagnose debug module named
- diagnose debug module ospf6d
- diagnose debug module waf
- diagnose debug module wassd
- diagnose debug pool-member-debug
- diagnose debug timestamp
- diagnose endpoint-control client list
- diagnose endpoint-control tag list
- diagnose firewall-session clear
- diagnose hardware deviceinfo
- diagnose hardware ioport
- diagnose hardware pciconfig
- diagnose hardware sysinfo
- diagnose llb policy list
- diagnose lldprx neighbor
- diagnose netlink backlog
- diagnose netlink device
- diagnose netlink interface
- diagnose netlink ip/ipv6
- diagnose netlink neighbor/neighbor6
- diagnose netlink route/route6
- diagnose netlink tcp
- diagnose netlink udp
- diagnose server load balance dns-clients
- diagnose server-load-balance persistence
- diagnose server-load-balance session
- diagnose server-load-balance slb_load
- diagnose sniffer packet
- diagnose system top
- diagnose system vm
- diagnose system threat-analytics info
- diagnose tech-report
- diagnose waf api-security memory
execute
- execute autoupdate
- execute caching
- execute certificate ca
- execute certificate crl
- execute certificate local
- execute certificate local import automated
- execute certificate local import-pair tftp
- execute certificate remote
- execute certificate config
- execute checklogdisk
- execute clean
- execute config-sync
- execute curl
- execute curl-option
- execute date
- execute discovery-glb-virtual-server
- execute dns rebuild
- execute dumpsystem
- execute dos get
- execute dumpsystem-file
- execute factoryreset
- execute factoryreset2
- execute fixlogdisk
- execute formatlogdisk
- execute geolookup
- execute glb-dprox-lookup
- execute glb-persistence-lookup
- execute ha force fetch-peers-info
- execute ha force standby
- execute ha force failover-standby
- execute ha force sync-config
- execute ha force transfer-file
- execute ha manage
- execute hardware-ssl list-ciphers
- execute health-check-verify
- execute hwmon
- execute isplookup
- execute log delete-file
- execute log delete-type
- execute log list-type
- execute log rebuild-db
- execute nslookup
- execute oas-file import
- execute packet-capture/packet-capture6
- execute packet-capture-file
- execute ping-option/ping6-option
- execute ping/ping6
- execute reboot
- execute reload
- execute restore
- execute scan-report export
- execute scan-report import
- execute scripting-shared-table
- execute shutdown
- execute ssh
- execute statistics-db
- execute ssli mode
- execute telnet
- execute traceroute
- execute vm license
- execute web-category-test
- execute SSL client-side session statistics
- execute SSL handshake record statistics
- execute waf block-ip
- execute web vulnerability scan
- execute web-vulnerability-scan mitigate
- execute forticloud create-account
- execute forticloud login
- execute forticloud try
- execute fctems
- execute update-now
- execute update-dldb
- execute 40G-fan-out-config
get
- get firewall global
- get router info ospf
- get router info routing-table
- get router ospf6
- get security waf-signature-status
- get security scan-report
- get security scan-task
- get system ha-status
- get system performance
- get system status
- get system traffic-group
- get system traffic-group status
- get router info bgp all
- get router info bgp ip
- get router info bgp neighbors
- get router info bgp regexp
- get router info bgp summary
- get router info6 bgp all
- get router info6 bgp ip
- get router info6 bgp neighbors
- get router info6 bgp regexp
- get router info6 bgp summary
- get router info6 ospf6 database
- get router info6 ospf6 interface
- get router info6 ospf6 neighbor
- get router info6 ospf6 route
- get router info6 ospf6 status
show
Appendix A: Virtual domains
Change Log

Home FortiADC 7.6.2 CLI Reference

7.6.2

diagnose endpoint-control tag list

Use this command to view information about the ZTNA tags synchronized to FortiADC from FortiClient EMS.

Syntax

Use this command to view information about the ZTNA tags synchronized to FortiADC from FortiClient EMS.

Syntax

diagnose endpoint-control tag list

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

Web Application / API Protection

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

All Products

CLI Reference

diagnose endpoint-control tag list

diagnose endpoint-control tag list

Syntax

diagnose endpoint-control tag list

diagnose endpoint-control tag list

Syntax