Document
Library
Product Pillars
Network Security
Network Security
FortiGate / FortiOS
FortiGate-5000
/
6000
/
7000
FortiProxy
NOC & SOC Management
FortiManager
/
FortiManager Cloud
FortiAnalyzer
/
FortiAnalyzer Cloud
FortiMonitor
FortiGate Cloud
Enterprise Networking
Secure SD-WAN
FortiLAN Cloud
FortiSwitch
FortiAP / FortiWiFi
FortiAP-U Series
FortiNAC-F
FortiExtender
/
FortiExtender Cloud
FortiAIOps
Business Communications
FortiFone
FortiVoice
/
FortiVoice Cloud
FortiRecorder
/
FortiCamera
Zero Trust Access
ZTNA
Zero Trust Network Access
FortiClient EMS
SASE
FortiSASE
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Cloud Security
Hybrid Cloud Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiFlex
Cloud Native Protection
FortiCNP
FortiDevSec
Web Application / API Protection
FortiWeb
/
FortiWeb Cloud
FortiADC
/
FortiGSLB
FortiGuard ABP
SAAS Security
FortiMail
/
FortiMail Cloud
FortiCASB
Security Operations
SOC Platform
FortiAnalyzer
/
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
FortiPhish
Advanced Threat Protection
FortiSandbox
/
FortiSandbox Cloud
FortiNDR
FortiNDR Cloud
FortiDeceptor
FortiInsight
/
FortiInsight Cloud
FortiIsolator
Endpoint Security
FortiClient
/
FortiClient Cloud
FortiEDR
Best Practices
Solution Hubs
Curated links by solution
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Next Generation Firewall
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
4-D Resources
Define, Design, Deploy, Demo
Secure SD-WAN
Zero Trust Network Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Hardware Guides
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP / FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiCache
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiGate
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiProxy
FortiRecorder
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
Product A-Z
AscenLink
AV Engine
AWS Firewall Rules
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIOps
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAP / FortiWiFi
FortiAP-U Series
FortiAuthenticator
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiAuthProxy
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCASB
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiCNP
FortiConnect
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiCSPM
FortiCWP
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDNS
FortiEdge Cloud
FortiEDR/XDR
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate Cloud
FortiGate CNF
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGSLB
FortiGuard Advanced Bot Protection
FortiGuest
FortiHypervisor
FortiInsight
FortiInsight Cloud
FortiIPAM
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail
FortiMail Cloud
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRecon
FortiRecorder
FortiRPS
FortiSandbox
FortiSandbox Cloud
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSASE
FortiScanner
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSwitch
FortiSwitch Manager
FortiTap
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiToken Cloud
FortiTrust Identity
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWeb
FortiWeb Cloud
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiWLM
FortiZTP
IPS Engine
Lacework FortiCNAPP
Managed FortiGate Service
Overlay-as-a-Service
Security Awareness and Training
SOCaaS
Wireless Controller
Ordering Guides
Search documents and hardware ...
CLI Reference
FortiOS CLI reference
CLI configuration commands
alertemail
config alertemail setting
antivirus
config antivirus settings
config antivirus heuristic
config antivirus quarantine
config antivirus profile
application
config application name
config application custom
config application rule-settings
config application list
config application group
authentication
config authentication scheme
config authentication rule
config authentication setting
certificate
config certificate ca
config certificate remote
config certificate local
config certificate crl
cifs
config cifs domain-controller
config cifs profile
dlp
config dlp filepattern
config dlp sensitivity
config dlp sensor
dnsfilter
config dnsfilter domain-filter
config dnsfilter profile
emailfilter
config emailfilter bword
config emailfilter bwl
config emailfilter mheader
config emailfilter dnsbl
config emailfilter iptrust
config emailfilter profile
config emailfilter fortishield
config emailfilter options
endpoint-control
config endpoint-control settings
config endpoint-control fctems
extender
config extender sys-info
config extender modem-status
extender-controller
config extender-controller extender
firewall
config firewall address
config firewall multicast-address
config firewall address6-template
config firewall address6
config firewall multicast-address6
config firewall addrgrp
config firewall addrgrp6
config firewall wildcard-fqdn custom
config firewall wildcard-fqdn group
config firewall service category
config firewall service custom
config firewall service group
config firewall internet-service
config firewall internet-service-group
config firewall internet-service-extension
config firewall internet-service-reputation
config firewall internet-service-custom
config firewall internet-service-addition
config firewall internet-service-append
config firewall internet-service-custom-group
config firewall internet-service-sld
config firewall internet-service-ipbl-vendor
config firewall internet-service-ipbl-reason
config firewall internet-service-owner
config firewall internet-service-list
config firewall internet-service-definition
config firewall shaper traffic-shaper
config firewall shaper per-ip-shaper
config firewall shaper traffic
config firewall shaper per-ip
config firewall proxy-address
config firewall proxy-addrgrp
config firewall schedule onetime
config firewall schedule recurring
config firewall schedule group
config firewall ippool
config firewall ippool6
config firewall ldb-monitor
config firewall vip
config firewall vip46
config firewall vip6
config firewall vip64
config firewall vipgrp
config firewall vipgrp46
config firewall vipgrp6
config firewall vipgrp64
config firewall ipmacbinding setting
config firewall ipmacbinding table
config firewall profile-protocol-options
config firewall ssl-ssh-profile
config firewall profile-group
config firewall ssl-server
config firewall identity-based-route
config firewall auth-portal
config firewall consolidated policy
config firewall security-policy
config firewall policy
config firewall traffic-class
config firewall shaping-policy
config firewall shaping-profile
config firewall local-in-policy
config firewall policy6
config firewall local-in-policy6
config firewall ttl-policy
config firewall policy64
config firewall policy46
config firewall proxy-policy
config firewall dnstranslation
config firewall multicast-policy
config firewall multicast-policy6
config firewall interface-policy
config firewall interface-policy6
config firewall DoS-policy
config firewall DoS-policy6
config firewall sniffer
config firewall acl
config firewall acl6
config firewall central-snat-map
config firewall ssl setting
config firewall ssh local-key
config firewall ssh local-ca
config firewall ssh setting
config firewall ssh host-key
config firewall ip-translation
config firewall ipv6-eh-filter
config firewall iprope list
config firewall iprope appctrl list
config firewall iprope appctrl status
config firewall proute
config firewall proute6
ftp-proxy
config ftp-proxy explicit
hardware
config hardware status
config hardware cpu
config hardware memory
config hardware nic
icap
config icap server
config icap profile
ips
config ips sensor
config ips view-map
config ips decoder
config ips rule
config ips rule-settings
config ips custom
config ips global
config ips settings
config ips session
ipsec
config ipsec tunnel
log
config log threat-weight
config log custom-field
config log syslogd setting
config log syslogd override-setting
config log syslogd filter
config log syslogd override-filter
config log syslogd2 setting
config log syslogd2 override-setting
config log syslogd2 filter
config log syslogd2 override-filter
config log syslogd3 setting
config log syslogd3 override-setting
config log syslogd3 filter
config log syslogd3 override-filter
config log syslogd4 setting
config log syslogd4 override-setting
config log syslogd4 filter
config log syslogd4 override-filter
config log webtrends setting
config log webtrends filter
config log memory global-setting
config log memory setting
config log memory filter
config log disk setting
config log disk filter
config log eventfilter
config log fortiguard setting
config log fortiguard override-setting
config log fortiguard filter
config log fortiguard override-filter
config log null-device setting
config log null-device filter
config log setting
config log gui-display
config log fortianalyzer setting
config log fortianalyzer override-setting
config log fortianalyzer filter
config log fortianalyzer override-filter
config log fortianalyzer2 setting
config log fortianalyzer2 override-setting
config log fortianalyzer2 filter
config log fortianalyzer2 override-filter
config log fortianalyzer3 setting
config log fortianalyzer3 override-setting
config log fortianalyzer3 filter
config log fortianalyzer3 override-filter
config log fortianalyzer-cloud setting
config log fortianalyzer-cloud override-setting
config log fortianalyzer-cloud filter
config log fortianalyzer-cloud override-filter
mgmt-data
config mgmt-data status
router
config router access-list
config router access-list6
config router aspath-list
config router prefix-list
config router prefix-list6
config router key-chain
config router community-list
config router route-map
config router rip
config router ripng
config router static
config router policy
config router policy6
config router static6
config router ospf
config router ospf6
config router bgp
config router isis
config router multicast-flow
config router multicast
config router multicast6
config router info
config router info6
config router auth-path
config router setting
config router bfd
config router bfd6
ssh-filter
config ssh-filter profile
switch-controller
config switch-controller traffic-policy
config switch-controller switch-interface-tag
config switch-controller 802-1X-settings
config switch-controller security-policy 802-1X
config switch-controller security-policy local-access
config switch-controller location
config switch-controller lldp-settings
config switch-controller lldp-profile
config switch-controller qos dot1p-map
config switch-controller qos ip-dscp-map
config switch-controller qos queue-policy
config switch-controller qos qos-policy
config switch-controller storm-control-policy
config switch-controller auto-config policy
config switch-controller auto-config default
config switch-controller auto-config custom
config switch-controller switch-profile
config switch-controller custom-command
config switch-controller virtual-port-pool
config switch-controller managed-switch
config switch-controller switch-group
config switch-controller stp-settings
config switch-controller stp-instance
config switch-controller storm-control
config switch-controller global
config switch-controller system
config switch-controller poe
config switch-controller switch-log
config switch-controller igmp-snooping
config switch-controller sflow
config switch-controller quarantine
config switch-controller network-monitor-settings
config switch-controller flow-tracking
config switch-controller snmp-sysinfo
config switch-controller snmp-trap-threshold
config switch-controller snmp-community
config switch-controller snmp-user
config switch-controller traffic-sniffer
config switch-controller remote-log
system
config system vdom
config system global
config system accprofile
config system npu
config system vdom-link
config system switch-interface
config system object-tagging
config system lte-modem
config system interface
config system physical-switch
config system virtual-switch
config system stp
config system password-policy
config system password-policy-guest-admin
config system sms-server
config system custom-language
config system admin
config system api-user
config system sso-admin
config system settings
config system sit-tunnel
config system fsso-polling
config system ha
config system ha-monitor
config system storage
config system dedicated-mgmt
config system arp-table
config system ipv6-neighbor-cache
config system dns
config system ddns
config system sflow
config system vdom-sflow
config system netflow
config system vdom-netflow
config system vdom-dns
config system replacemsg-image
config system replacemsg mail
config system replacemsg http
config system replacemsg webproxy
config system replacemsg ftp
config system replacemsg nntp
config system replacemsg fortiguard-wf
config system replacemsg spam
config system replacemsg alertmail
config system replacemsg admin
config system replacemsg auth
config system replacemsg sslvpn
config system replacemsg device-detection-portal
config system replacemsg nac-quar
config system replacemsg traffic-quota
config system replacemsg utm
config system replacemsg icap
config system replacemsg-group
config system snmp sysinfo
config system snmp community
config system snmp user
config system autoupdate push-update
config system autoupdate schedule
config system autoupdate tunneling
config system session-ttl
config system dhcp server
config system dhcp6 server
config system modem
config system 3g-modem custom
config system status
config system performance status
config system performance top
config system performance firewall packet-distribution
config system performance firewall statistics
config system session
config system session6
config system cmdb
config system fortiguard-service
config system fortianalyzer-connectivity
config system checksum status
config system mgmt-csum
config system ha-nonsync-csum
config system fortiguard-log-service
config system central-mgmt
config system alias
config system auto-script
config system info admin status
config system info admin ssh
config system management-tunnel
config system fortimanager
config system fm
config system central-management
config system zone
config system geoip-country
config system sdn-connector
config system ipv6-tunnel
config system external-resource
config system ips-urlfilter-dns
config system ips-urlfilter-dns6
config system network-visibility
config system gre-tunnel
config system ipsec-aggregate
config system ipip-tunnel
config system mobile-tunnel
config system pppoe-interface
config system vxlan
config system geneve
config system virtual-wire-pair
config system dns-database
config system dns-server
config system resource-limits
config system vdom-property
config system virtual-wan-link
config system speed-test-server
config system lldp network-policy
config system cluster-sync
config system fortiguard
config system arp
config system email-server
config system alarm
config system mac-address-table
config system session-helper
config system proxy-arp
config system fips-cc
config system tos-based-priority
config system dscp-based-priority
config system probe-response
config system link-monitor
config system auto-install
config system console
config system ntp
config system ptp
config system wccp
config system nat64
config system vdom-radius-server
config system startup-error-log
config system source-ip status
config system auto-update status
config system auto-update versions
config system session-info list
config system session-info expectation
config system session-info full-stat
config system session-info statistics
config system session-info ttl
config system session-helper-info list
config system ip-conflict status
config system ftm-push
config system geoip-override
config system fortisandbox
config system vdom-exception
config system csf
config system automation-trigger
config system automation-action
config system automation-destination
config system automation-stitch
config system nd-proxy
config system saml
test
config test smtp
config test ftpd
config test pop3
config test imap
config test nntp
config test harelay
config test hasync
config test hatalk
config test sessionsync
config test forticldd
config test miglogd
config test urlfilter
config test wf_monitor
config test ovrd
config test ipsmonitor
config test ipsengine
config test ipldbd
config test ddnscd
config test snmpd
config test acd
config test dnsproxy
config test sflowd
config test init
config test l2tpcd
config test dhcprelay
config test pptpcd
config test wccpd
config test wad
config test radiusd
config test fsd
config test ipsufd
config test lted
config test forticron
config test uploadd
config test quarantined
config test dhcp6c
config test info-sslvpnd
config test dsd
config test ipmc_sensord
config test lnkmtd
config test dhcp6r
config test awsd
config test netxd
config test fnbamd
config test mrd
config test zebos_launcher
config test radius-das
config test csfd
config test fsvrd
config test radvd
config test fcnacd
config test sdncd
config test azd
config test gcpd
config test ocid
config test kubed
config test autod
config test bfd
config test openstackd
config test vmwd
config test fas
config test sepmd
user
config user radius
config user tacacs+
config user exchange
config user ldap
config user krb-keytab
config user domain-controller
config user pop3
config user saml
config user fsso
config user adgrp
config user fsso-polling
config user fortitoken
config user password-policy
config user local
config user setting
config user peer
config user peergrp
config user quarantine
config user group
config user security-exempt-list
voip
config voip profile
vpn
config vpn certificate ca
config vpn certificate remote
config vpn certificate local
config vpn certificate crl
config vpn certificate ocsp-server
config vpn certificate setting
config vpn ssl web realm
config vpn ssl web host-check-software
config vpn ssl web portal
config vpn ssl web user-group-bookmark
config vpn ssl web user-bookmark
config vpn ssl settings
config vpn ssl monitor
config vpn ipsec phase1
config vpn ipsec phase2
config vpn ipsec manualkey
config vpn ipsec concentrator
config vpn ipsec phase1-interface
config vpn ipsec phase2-interface
config vpn ipsec manualkey-interface
config vpn ipsec forticlient
config vpn ipsec stats crypto
config vpn ipsec stats tunnel
config vpn ipsec tunnel details
config vpn ipsec tunnel summary
config vpn ipsec tunnel name
config vpn pptp
config vpn l2tp
config vpn ocvpn
config vpn ike gateway
config vpn status l2tp
config vpn status pptp
config vpn status ssl list
config vpn status ssl hw-acceleration-status
waf
config waf main-class
config waf sub-class
config waf signature
config waf profile
web-proxy
config web-proxy profile
config web-proxy global
config web-proxy explicit
config web-proxy forward-server
config web-proxy forward-server-group
config web-proxy debug-url
config web-proxy wisp
config web-proxy url-match
webfilter
config webfilter ftgd-local-cat
config webfilter content
config webfilter content-header
config webfilter urlfilter
config webfilter ips-urlfilter-setting
config webfilter ips-urlfilter-setting6
config webfilter ips-urlfilter-cache-setting
config webfilter profile
config webfilter fortiguard
config webfilter categories
config webfilter override
config webfilter ftgd-local-rating
config webfilter search-engine
config webfilter ftgd-statistics
config webfilter status
config webfilter override-usr
wireless-controller
config wireless-controller inter-controller
config wireless-controller global
config wireless-controller hotspot20 anqp-venue-name
config wireless-controller hotspot20 anqp-network-auth-type
config wireless-controller hotspot20 anqp-roaming-consortium
config wireless-controller hotspot20 anqp-nai-realm
config wireless-controller hotspot20 anqp-3gpp-cellular
config wireless-controller hotspot20 anqp-ip-address-type
config wireless-controller hotspot20 h2qp-operator-name
config wireless-controller hotspot20 h2qp-wan-metric
config wireless-controller hotspot20 h2qp-conn-capability
config wireless-controller hotspot20 icon
config wireless-controller hotspot20 h2qp-osu-provider
config wireless-controller hotspot20 qos-map
config wireless-controller hotspot20 hs-profile
config wireless-controller vap
config wireless-controller timers
config wireless-controller setting
config wireless-controller log
config wireless-controller bonjour-profile
config wireless-controller region
config wireless-controller vap-group
config wireless-controller wids-profile
config wireless-controller ble-profile
config wireless-controller wtp-profile
config wireless-controller wtp
config wireless-controller wtp-group
config wireless-controller qos-profile
config wireless-controller wag-profile
config wireless-controller utm-profile
config wireless-controller address
config wireless-controller addrgrp
config wireless-controller snmp
config wireless-controller scan
config wireless-controller ap-status
config wireless-controller wlchanlistlic
config wireless-controller status
config wireless-controller wtp-status
config wireless-controller client-info
config wireless-controller vap-status
config wireless-controller rf-analysis
config wireless-controller spectral-info
Change Log
Home
FortiGate / FortiOS 6.2.12
CLI Reference
6.2.12
7.6.0
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.15
7.0.14
7.0.13
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.15
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.16
6.2.15
6.2.14
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.0.0
5.6.0
5.4.0
5.2.0
5.0.0
mgmt-data
mgmt-data
This section includes syntax for the following commands:
config mgmt-data status
Previous
Next
mgmt-data
mgmt-data
This section includes syntax for the following commands:
config mgmt-data status
Previous
Next
Home
Product Pillars
Network Security
Network Security
FortiGate / FortiOS
FortiGate 5000
FortiGate 6000
FortiGate 7000
FortiProxy
NOC & SOC Management
FortiManager
FortiManager Cloud
FortiAnalyzer
FortiAnalyzer Cloud
FortiMonitor
FortiGate Cloud
Enterprise Networking
Secure SD-WAN
FortiLAN Cloud
FortiSwitch
FortiAP / FortiWiFi
FortiAP-U Series
FortiNAC-F
FortiExtender
FortiExtender Cloud
FortiAIOps
Business Communications
FortiFone
FortiVoice
FortiVoice Cloud
FortiRecorder
FortiCamera
Zero Trust Access
ZTNA
Zero Trust Network Access
FortiClient EMS
SASE
FortiSASE
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Cloud Security
Hybrid Cloud Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiFlex
Cloud Native Protection
FortiCNP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiWeb Cloud
FortiADC
FortiGSLB
FortiGuard ABP
SAAS Security
FortiMail
FortiMail Cloud
FortiCASB
Security Operations
SOC Platform
FortiAnalyzer
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
FortiPhish
Advanced Threat Protection
FortiSandbox
FortiSandbox Cloud
FortiNDR
FortiNDR Cloud
FortiDeceptor
FortiInsight
FortiInsight Cloud
FortiIsolator
Endpoint Security
FortiClient
FortiClient Cloud
FortiEDR
Best Practices
Solution Hubs
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Next Generation Firewall
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
4-D Resources
Secure SD-WAN
Zero Trust Network Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Hardware Guides
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP / FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiCache
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiGate
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiProxy
FortiRecorder
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
Product A-Z
AscenLink
AV Engine
AWS Firewall Rules
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIOps
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAP / FortiWiFi
FortiAP-U Series
FortiAuthenticator
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiAuthProxy
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCASB
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiCNP
FortiConnect
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiCSPM
FortiCWP
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDNS
FortiEdge Cloud
FortiEDR/XDR
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate Cloud
FortiGate CNF
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGSLB
FortiGuard Advanced Bot Protection
FortiGuest
FortiHypervisor
FortiInsight
FortiInsight Cloud
FortiIPAM
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail
FortiMail Cloud
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRecon
FortiRecorder
FortiRPS
FortiSandbox
FortiSandbox Cloud
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSASE
FortiScanner
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSwitch
FortiSwitch Manager
FortiTap
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiToken Cloud
FortiTrust Identity
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWeb
FortiWeb Cloud
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiWLM
FortiZTP
IPS Engine
Lacework FortiCNAPP
Managed FortiGate Service
Overlay-as-a-Service
Security Awareness and Training
SOCaaS
Wireless Controller
Ordering Guides
Download PDF
Table of Contents
FortiOS CLI reference
CLI configuration commands
alertemail
config alertemail setting
antivirus
config antivirus settings
config antivirus heuristic
config antivirus quarantine
config antivirus profile
application
config application name
config application custom
config application rule-settings
config application list
config application group
authentication
config authentication scheme
config authentication rule
config authentication setting
certificate
config certificate ca
config certificate remote
config certificate local
config certificate crl
cifs
config cifs domain-controller
config cifs profile
dlp
config dlp filepattern
config dlp sensitivity
config dlp sensor
dnsfilter
config dnsfilter domain-filter
config dnsfilter profile
emailfilter
config emailfilter bword
config emailfilter bwl
config emailfilter mheader
config emailfilter dnsbl
config emailfilter iptrust
config emailfilter profile
config emailfilter fortishield
config emailfilter options
endpoint-control
config endpoint-control settings
config endpoint-control fctems
extender
config extender sys-info
config extender modem-status
extender-controller
config extender-controller extender
firewall
config firewall address
config firewall multicast-address
config firewall address6-template
config firewall address6
config firewall multicast-address6
config firewall addrgrp
config firewall addrgrp6
config firewall wildcard-fqdn custom
config firewall wildcard-fqdn group
config firewall service category
config firewall service custom
config firewall service group
config firewall internet-service
config firewall internet-service-group
config firewall internet-service-extension
config firewall internet-service-reputation
config firewall internet-service-custom
config firewall internet-service-addition
config firewall internet-service-append
config firewall internet-service-custom-group
config firewall internet-service-sld
config firewall internet-service-ipbl-vendor
config firewall internet-service-ipbl-reason
config firewall internet-service-owner
config firewall internet-service-list
config firewall internet-service-definition
config firewall shaper traffic-shaper
config firewall shaper per-ip-shaper
config firewall shaper traffic
config firewall shaper per-ip
config firewall proxy-address
config firewall proxy-addrgrp
config firewall schedule onetime
config firewall schedule recurring
config firewall schedule group
config firewall ippool
config firewall ippool6
config firewall ldb-monitor
config firewall vip
config firewall vip46
config firewall vip6
config firewall vip64
config firewall vipgrp
config firewall vipgrp46
config firewall vipgrp6
config firewall vipgrp64
config firewall ipmacbinding setting
config firewall ipmacbinding table
config firewall profile-protocol-options
config firewall ssl-ssh-profile
config firewall profile-group
config firewall ssl-server
config firewall identity-based-route
config firewall auth-portal
config firewall consolidated policy
config firewall security-policy
config firewall policy
config firewall traffic-class
config firewall shaping-policy
config firewall shaping-profile
config firewall local-in-policy
config firewall policy6
config firewall local-in-policy6
config firewall ttl-policy
config firewall policy64
config firewall policy46
config firewall proxy-policy
config firewall dnstranslation
config firewall multicast-policy
config firewall multicast-policy6
config firewall interface-policy
config firewall interface-policy6
config firewall DoS-policy
config firewall DoS-policy6
config firewall sniffer
config firewall acl
config firewall acl6
config firewall central-snat-map
config firewall ssl setting
config firewall ssh local-key
config firewall ssh local-ca
config firewall ssh setting
config firewall ssh host-key
config firewall ip-translation
config firewall ipv6-eh-filter
config firewall iprope list
config firewall iprope appctrl list
config firewall iprope appctrl status
config firewall proute
config firewall proute6
ftp-proxy
config ftp-proxy explicit
hardware
config hardware status
config hardware cpu
config hardware memory
config hardware nic
icap
config icap server
config icap profile
ips
config ips sensor
config ips view-map
config ips decoder
config ips rule
config ips rule-settings
config ips custom
config ips global
config ips settings
config ips session
ipsec
config ipsec tunnel
log
config log threat-weight
config log custom-field
config log syslogd setting
config log syslogd override-setting
config log syslogd filter
config log syslogd override-filter
config log syslogd2 setting
config log syslogd2 override-setting
config log syslogd2 filter
config log syslogd2 override-filter
config log syslogd3 setting
config log syslogd3 override-setting
config log syslogd3 filter
config log syslogd3 override-filter
config log syslogd4 setting
config log syslogd4 override-setting
config log syslogd4 filter
config log syslogd4 override-filter
config log webtrends setting
config log webtrends filter
config log memory global-setting
config log memory setting
config log memory filter
config log disk setting
config log disk filter
config log eventfilter
config log fortiguard setting
config log fortiguard override-setting
config log fortiguard filter
config log fortiguard override-filter
config log null-device setting
config log null-device filter
config log setting
config log gui-display
config log fortianalyzer setting
config log fortianalyzer override-setting
config log fortianalyzer filter
config log fortianalyzer override-filter
config log fortianalyzer2 setting
config log fortianalyzer2 override-setting
config log fortianalyzer2 filter
config log fortianalyzer2 override-filter
config log fortianalyzer3 setting
config log fortianalyzer3 override-setting
config log fortianalyzer3 filter
config log fortianalyzer3 override-filter
config log fortianalyzer-cloud setting
config log fortianalyzer-cloud override-setting
config log fortianalyzer-cloud filter
config log fortianalyzer-cloud override-filter
mgmt-data
config mgmt-data status
router
config router access-list
config router access-list6
config router aspath-list
config router prefix-list
config router prefix-list6
config router key-chain
config router community-list
config router route-map
config router rip
config router ripng
config router static
config router policy
config router policy6
config router static6
config router ospf
config router ospf6
config router bgp
config router isis
config router multicast-flow
config router multicast
config router multicast6
config router info
config router info6
config router auth-path
config router setting
config router bfd
config router bfd6
ssh-filter
config ssh-filter profile
switch-controller
config switch-controller traffic-policy
config switch-controller switch-interface-tag
config switch-controller 802-1X-settings
config switch-controller security-policy 802-1X
config switch-controller security-policy local-access
config switch-controller location
config switch-controller lldp-settings
config switch-controller lldp-profile
config switch-controller qos dot1p-map
config switch-controller qos ip-dscp-map
config switch-controller qos queue-policy
config switch-controller qos qos-policy
config switch-controller storm-control-policy
config switch-controller auto-config policy
config switch-controller auto-config default
config switch-controller auto-config custom
config switch-controller switch-profile
config switch-controller custom-command
config switch-controller virtual-port-pool
config switch-controller managed-switch
config switch-controller switch-group
config switch-controller stp-settings
config switch-controller stp-instance
config switch-controller storm-control
config switch-controller global
config switch-controller system
config switch-controller poe
config switch-controller switch-log
config switch-controller igmp-snooping
config switch-controller sflow
config switch-controller quarantine
config switch-controller network-monitor-settings
config switch-controller flow-tracking
config switch-controller snmp-sysinfo
config switch-controller snmp-trap-threshold
config switch-controller snmp-community
config switch-controller snmp-user
config switch-controller traffic-sniffer
config switch-controller remote-log
system
config system vdom
config system global
config system accprofile
config system npu
config system vdom-link
config system switch-interface
config system object-tagging
config system lte-modem
config system interface
config system physical-switch
config system virtual-switch
config system stp
config system password-policy
config system password-policy-guest-admin
config system sms-server
config system custom-language
config system admin
config system api-user
config system sso-admin
config system settings
config system sit-tunnel
config system fsso-polling
config system ha
config system ha-monitor
config system storage
config system dedicated-mgmt
config system arp-table
config system ipv6-neighbor-cache
config system dns
config system ddns
config system sflow
config system vdom-sflow
config system netflow
config system vdom-netflow
config system vdom-dns
config system replacemsg-image
config system replacemsg mail
config system replacemsg http
config system replacemsg webproxy
config system replacemsg ftp
config system replacemsg nntp
config system replacemsg fortiguard-wf
config system replacemsg spam
config system replacemsg alertmail
config system replacemsg admin
config system replacemsg auth
config system replacemsg sslvpn
config system replacemsg device-detection-portal
config system replacemsg nac-quar
config system replacemsg traffic-quota
config system replacemsg utm
config system replacemsg icap
config system replacemsg-group
config system snmp sysinfo
config system snmp community
config system snmp user
config system autoupdate push-update
config system autoupdate schedule
config system autoupdate tunneling
config system session-ttl
config system dhcp server
config system dhcp6 server
config system modem
config system 3g-modem custom
config system status
config system performance status
config system performance top
config system performance firewall packet-distribution
config system performance firewall statistics
config system session
config system session6
config system cmdb
config system fortiguard-service
config system fortianalyzer-connectivity
config system checksum status
config system mgmt-csum
config system ha-nonsync-csum
config system fortiguard-log-service
config system central-mgmt
config system alias
config system auto-script
config system info admin status
config system info admin ssh
config system management-tunnel
config system fortimanager
config system fm
config system central-management
config system zone
config system geoip-country
config system sdn-connector
config system ipv6-tunnel
config system external-resource
config system ips-urlfilter-dns
config system ips-urlfilter-dns6
config system network-visibility
config system gre-tunnel
config system ipsec-aggregate
config system ipip-tunnel
config system mobile-tunnel
config system pppoe-interface
config system vxlan
config system geneve
config system virtual-wire-pair
config system dns-database
config system dns-server
config system resource-limits
config system vdom-property
config system virtual-wan-link
config system speed-test-server
config system lldp network-policy
config system cluster-sync
config system fortiguard
config system arp
config system email-server
config system alarm
config system mac-address-table
config system session-helper
config system proxy-arp
config system fips-cc
config system tos-based-priority
config system dscp-based-priority
config system probe-response
config system link-monitor
config system auto-install
config system console
config system ntp
config system ptp
config system wccp
config system nat64
config system vdom-radius-server
config system startup-error-log
config system source-ip status
config system auto-update status
config system auto-update versions
config system session-info list
config system session-info expectation
config system session-info full-stat
config system session-info statistics
config system session-info ttl
config system session-helper-info list
config system ip-conflict status
config system ftm-push
config system geoip-override
config system fortisandbox
config system vdom-exception
config system csf
config system automation-trigger
config system automation-action
config system automation-destination
config system automation-stitch
config system nd-proxy
config system saml
test
config test smtp
config test ftpd
config test pop3
config test imap
config test nntp
config test harelay
config test hasync
config test hatalk
config test sessionsync
config test forticldd
config test miglogd
config test urlfilter
config test wf_monitor
config test ovrd
config test ipsmonitor
config test ipsengine
config test ipldbd
config test ddnscd
config test snmpd
config test acd
config test dnsproxy
config test sflowd
config test init
config test l2tpcd
config test dhcprelay
config test pptpcd
config test wccpd
config test wad
config test radiusd
config test fsd
config test ipsufd
config test lted
config test forticron
config test uploadd
config test quarantined
config test dhcp6c
config test info-sslvpnd
config test dsd
config test ipmc_sensord
config test lnkmtd
config test dhcp6r
config test awsd
config test netxd
config test fnbamd
config test mrd
config test zebos_launcher
config test radius-das
config test csfd
config test fsvrd
config test radvd
config test fcnacd
config test sdncd
config test azd
config test gcpd
config test ocid
config test kubed
config test autod
config test bfd
config test openstackd
config test vmwd
config test fas
config test sepmd
user
config user radius
config user tacacs+
config user exchange
config user ldap
config user krb-keytab
config user domain-controller
config user pop3
config user saml
config user fsso
config user adgrp
config user fsso-polling
config user fortitoken
config user password-policy
config user local
config user setting
config user peer
config user peergrp
config user quarantine
config user group
config user security-exempt-list
voip
config voip profile
vpn
config vpn certificate ca
config vpn certificate remote
config vpn certificate local
config vpn certificate crl
config vpn certificate ocsp-server
config vpn certificate setting
config vpn ssl web realm
config vpn ssl web host-check-software
config vpn ssl web portal
config vpn ssl web user-group-bookmark
config vpn ssl web user-bookmark
config vpn ssl settings
config vpn ssl monitor
config vpn ipsec phase1
config vpn ipsec phase2
config vpn ipsec manualkey
config vpn ipsec concentrator
config vpn ipsec phase1-interface
config vpn ipsec phase2-interface
config vpn ipsec manualkey-interface
config vpn ipsec forticlient
config vpn ipsec stats crypto
config vpn ipsec stats tunnel
config vpn ipsec tunnel details
config vpn ipsec tunnel summary
config vpn ipsec tunnel name
config vpn pptp
config vpn l2tp
config vpn ocvpn
config vpn ike gateway
config vpn status l2tp
config vpn status pptp
config vpn status ssl list
config vpn status ssl hw-acceleration-status
waf
config waf main-class
config waf sub-class
config waf signature
config waf profile
web-proxy
config web-proxy profile
config web-proxy global
config web-proxy explicit
config web-proxy forward-server
config web-proxy forward-server-group
config web-proxy debug-url
config web-proxy wisp
config web-proxy url-match
webfilter
config webfilter ftgd-local-cat
config webfilter content
config webfilter content-header
config webfilter urlfilter
config webfilter ips-urlfilter-setting
config webfilter ips-urlfilter-setting6
config webfilter ips-urlfilter-cache-setting
config webfilter profile
config webfilter fortiguard
config webfilter categories
config webfilter override
config webfilter ftgd-local-rating
config webfilter search-engine
config webfilter ftgd-statistics
config webfilter status
config webfilter override-usr
wireless-controller
config wireless-controller inter-controller
config wireless-controller global
config wireless-controller hotspot20 anqp-venue-name
config wireless-controller hotspot20 anqp-network-auth-type
config wireless-controller hotspot20 anqp-roaming-consortium
config wireless-controller hotspot20 anqp-nai-realm
config wireless-controller hotspot20 anqp-3gpp-cellular
config wireless-controller hotspot20 anqp-ip-address-type
config wireless-controller hotspot20 h2qp-operator-name
config wireless-controller hotspot20 h2qp-wan-metric
config wireless-controller hotspot20 h2qp-conn-capability
config wireless-controller hotspot20 icon
config wireless-controller hotspot20 h2qp-osu-provider
config wireless-controller hotspot20 qos-map
config wireless-controller hotspot20 hs-profile
config wireless-controller vap
config wireless-controller timers
config wireless-controller setting
config wireless-controller log
config wireless-controller bonjour-profile
config wireless-controller region
config wireless-controller vap-group
config wireless-controller wids-profile
config wireless-controller ble-profile
config wireless-controller wtp-profile
config wireless-controller wtp
config wireless-controller wtp-group
config wireless-controller qos-profile
config wireless-controller wag-profile
config wireless-controller utm-profile
config wireless-controller address
config wireless-controller addrgrp
config wireless-controller snmp
config wireless-controller scan
config wireless-controller ap-status
config wireless-controller wlchanlistlic
config wireless-controller status
config wireless-controller wtp-status
config wireless-controller client-info
config wireless-controller vap-status
config wireless-controller rf-analysis
config wireless-controller spectral-info
Change Log