Fortinet white logo
Fortinet white logo

CLI Reference

config dlp label

config dlp label

Configure labels used by DLP blocking.

config dlp label
    Description: Configure labels used by DLP blocking.
    edit <name>
        set comment {var-string}
        set connector {string}
        config entries
            Description: DLP label entries.
            edit <id>
                set fortidata-label-name {string}
                set guid {string}
                set mpip-label-name {string}
            next
        end
        set fabric-force-sync [enable|disable]
        set fabric-object [enable|disable]
        set fabric-object-source [member|local|...]
        set mpip-type [remote|local]
        set type [mpip|fortidata]
        set uuid {uuid}
    next
end

config dlp label

Parameter

Description

Type

Size

Default

comment

Optional comments.

var-string

Maximum length: 255

connector

Name of SDN connector.

string

Maximum length: 35

fabric-force-sync *

Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped.

option

-

disable

Option

Description

enable

Enable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

disable

Disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

fabric-object *

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

fabric-object-source *

Source of truth for fabric object.

option

-

root

Option

Description

member

Source of truth for this object is a non-root member of fabric.

local

Source of truth for this object is this security fabric member.

root

Source of truth for this object is the root of the fabric.

mpip-type

MPIP label type.

option

-

remote

Option

Description

remote

Remotely fetched MPIP labels.

local

Locally configured MPIP labels.

name

Name of table containing the label.

string

Maximum length: 35

type

Label type.

option

-

mpip

Option

Description

mpip

Microsoft Purview Information Protection.

fortidata

FortiData.

uuid *

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.

config entries

Parameter

Description

Type

Size

Default

fortidata-label-name

Name of FortiData label

string

Maximum length: 127

guid

MPIP label guid.

string

Maximum length: 36

id

ID.

integer

Minimum value: 1 Maximum value: 32

0

mpip-label-name

Name of MPIP label.

string

Maximum length: 127

config dlp label

config dlp label

Configure labels used by DLP blocking.

config dlp label
    Description: Configure labels used by DLP blocking.
    edit <name>
        set comment {var-string}
        set connector {string}
        config entries
            Description: DLP label entries.
            edit <id>
                set fortidata-label-name {string}
                set guid {string}
                set mpip-label-name {string}
            next
        end
        set fabric-force-sync [enable|disable]
        set fabric-object [enable|disable]
        set fabric-object-source [member|local|...]
        set mpip-type [remote|local]
        set type [mpip|fortidata]
        set uuid {uuid}
    next
end

config dlp label

Parameter

Description

Type

Size

Default

comment

Optional comments.

var-string

Maximum length: 255

connector

Name of SDN connector.

string

Maximum length: 35

fabric-force-sync *

Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped.

option

-

disable

Option

Description

enable

Enable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

disable

Disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

fabric-object *

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

fabric-object-source *

Source of truth for fabric object.

option

-

root

Option

Description

member

Source of truth for this object is a non-root member of fabric.

local

Source of truth for this object is this security fabric member.

root

Source of truth for this object is the root of the fabric.

mpip-type

MPIP label type.

option

-

remote

Option

Description

remote

Remotely fetched MPIP labels.

local

Locally configured MPIP labels.

name

Name of table containing the label.

string

Maximum length: 35

type

Label type.

option

-

mpip

Option

Description

mpip

Microsoft Purview Information Protection.

fortidata

FortiData.

uuid *

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.

config entries

Parameter

Description

Type

Size

Default

fortidata-label-name

Name of FortiData label

string

Maximum length: 127

guid

MPIP label guid.

string

Maximum length: 36

id

ID.

integer

Minimum value: 1 Maximum value: 32

0

mpip-label-name

Name of MPIP label.

string

Maximum length: 127