DOCUMENT LIBRARY
DOCUMENT LIBRARY
Products
Best Practices
Hardware Guides
Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
Hybrid Mesh Firewall
FortiGate/ FortiOS
FortiGate-5000
/
6000
/
7000
NOC Management
FortiManager
/
FortiManager Cloud
Managed Fortigate Service
LAN
FortiSwitch
FortiAP / FortiWiFi
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
More >>
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Lacework FortiCNAPP
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Web Application / API Protection
FortiWeb
FortiADC
FortiDAST
More >>
Security Operations
Security Operations Automation
FortiAnalyzer
/
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
SOC-as-a-Service (SOCaaS)
Identity
FortiAuthenticator
FortiTrust Identity
FortiPAM
Early Detection & Prevention
FortiSandbox
/
FortiSandbox Cloud
FortiNDR
FortiDeceptor
FortiRecon
More >>
Secure Networking
Hybrid Mesh Firewall
FortiGate/ FortiOS
FortiGate-5000
/
6000
/
7000
NOC Management
FortiManager
/
FortiManager Cloud
Managed Fortigate Service
FortiAIOps
LAN
FortiSwitch
FortiAP / FortiWiFi
FortiAP-U Series
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
Communication & Surveillance
FortiVoice
/
FortiVoice Cloud
FortiFone
FortiCamera
FortiRecorder
FortiCentral
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Cloud-Native Security
Lacework FortiCNAPP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiADC
FortiDAST
Security Operations
Security Operations Automation
FortiAnalyzer
/
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
Endpoint
FortiClient
/
FortiClient Cloud
FortiEDR/XDR
Data Protection
FortiDLP
FortiDLP Agent
FortiDLP Policies
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken
/
FortiToken Cloud
FortiPAM
Email
FortiMail
FortiPhish
Early Detection & Prevention
FortiSandbox
/
FortiSandbox Cloud
FortiNDR
FortiDeceptor
FortiRecon
Expert Services
SOC-as-a-Service (SOCaaS)
Edge Firewall
FortiGate/FortiOS
FortiGate-5000
/
6000
/
7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
/
FortiManager Cloud
FortiAnalyzer
/
FortiAnalyzer Cloud
Overlay-as-a-Service
SD Branch
FortiSwitch
FortiAP / FortiWiFi
FortiExtender
/
FortiExtender Cloud
Application Delivery
FortiADC
/
FortiGSLB
Single Vendor SASE
FortiSASE
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Secure Private Access
Secure SD-WAN
Zero Trust Network Access (ZTNA)
Thin Edge
FortiGate/ FortiOS
FortiAP / FortiWiFi
FortiExtender
/
FortiExtender Cloud
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Application Gateway
FortiGate/ FortiOS
FortiProxy
FortiADC
/
FortiGSLB
Enterprise Asset Management
FortiClient EMS
Endpoint Agent
FortiClient
/
FortiClient Cloud
Agentless Security Posture
FortiNAC-F
FortiSIEM
/
FortiSIEM Cloud
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Wireless
FortiAP / FortiWiFi
FortiAP-U Series
FortiGate Cloud
Switching
FortiSwitch
FortiEdge Cloud
FortiNAC-F
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Privilege Acccess Management
FortiPAM
Next Generation Firewall
FortiGate / FortiOS
FortiGate-5000
/
6000
/
7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
/
FortiManager Cloud
FortiAnalyzer
/
FortiAnalyzer Cloud
Expert Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
All
FortiADC Public Cloud
FortiAnalyzer Public Cloud
FortiAuthenticator Public Cloud
FortiDeceptor Public Cloud
FortiGate Public Cloud
FortiIsolator Public Cloud
FortiManager Public Cloud
FortiNDR Public Cloud
FortiPAM Public Cloud
FortiPortal Public Cloud
FortiProxy Public Cloud
FortiSandbox Public Cloud
FortiTester Public Cloud
FortiVoice Public Cloud
FortiWeb Manager Public Cloud
FortiWeb Public Cloud
All
FortiADC Private Cloud
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Private Cloud
FortiAuthenticator Private Cloud
FortiDeceptor Private Cloud
FortiGate Private Cloud
FortiManager Private Cloud
FortiNDR Private Cloud
FortiPAM Private Cloud
FortiProxy Private Cloud
FortiSandbox Private Cloud
FortiTester Private Cloud
FortiVoice Private Cloud
FortiWeb Manager Private Cloud
FortiWeb Private Cloud
Account Management
FortiCloud Services
SAAS Management
FortiGate Cloud
FortiEdge Cloud
FortiEdge Cloud
FortiExtender Cloud
FortiPresence Cloud
FortiToken Cloud
FortiTrust Identity
FortiZTP
FortiCamera Cloud
SAAS Application Security
FortiWeb Cloud
FortiGSLB
FortiCASB
FortiCNP
FortiInsight
FortiPhish
FortiGate CNF
Managed Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
Platform as a service (PAAS)
FortiSASE
FortiAnalyzer Cloud
FortiManager Cloud
FortiClient Cloud
FortiSandbox Cloud
FortiMail Cloud
FortiSOAR Cloud
Other SAAS Services
Overlay-as-a-Service
FortiRecon
FortiConverter
ForiIPAM
FortiFlex
FortiCare Elite
4D Resources
Solution Hubs
Define, design, deploy, demo
4D Pillars
Secure SD-WAN
Zero Trust Network Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Curated Links by Solution
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
Next Generation Firewall
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP / FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiCache
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiProxy
FortiRecorder
FortiGate
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
AscenLink
AV Engine
AWS Firewall Rules
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIOps
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAP / FortiWiFi
FortiAP-U Series
FortiAuthenticator
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiAuthProxy
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCASB
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiCNP
FortiConnect
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiCSPM
FortiCWP
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiDNS
FortiEdge Cloud
FortiEDR/XDR
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate Cloud
FortiGate CNF
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGSLB
FortiGuard Advanced Bot Protection
FortiGuest
FortiHypervisor
FortiInsight
FortiInsight Cloud
FortiIPAM
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail
FortiMail Cloud
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRecon
FortiRecorder
FortiRPS
FortiSandbox
FortiSandbox Cloud
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSASE
FortiScanner
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSwitch
FortiSwitch Manager
FortiTap
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiToken Cloud
FortiTrust Identity
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWeb
FortiWeb Cloud
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiWLM
FortiZTP
IPS Engine
Lacework FortiCNAPP
Managed FortiGate Service
Overlay-as-a-Service
Security Awareness and Training
SOCaaS
Wireless Controller
Search documents and hardware ...
CLI Reference
Introduction
FortiManager documentation
What’s New in FortiManager 7.0
FortiManager 7.0.2
FortiManager 7.0.1
FortiManager 7.0.0
Using the Command Line Interface
CLI command syntax
Connecting to the CLI
Connecting to the FortiManager console
Setting administrative access on an interface
Connecting to the FortiManager CLI using SSH
Connecting to the FortiManager CLI using the GUI
CLI objects
CLI command branches
CLI basics
Command help
Command tree
Command completion
Recalling commands
Editing commands
Line continuation
Command abbreviation
Environment variables
Encrypted password support
Entering spaces in strings
Entering quotation marks in strings
Entering a question mark (?) in a string
International characters
Special characters
IPv4 address formats
Changing the baud rate
Debug log levels
Administrative Domains
ADOMs overview
Configuring ADOMs
To Enable/disable ADOMs:
To change ADOM device modes:
To assign an administrator to an ADOM:
Concurrent ADOM Access
system
admin
admin group
admin ldap
admin profile
admin radius
admin setting
admin tacacs
admin user
alert-console
alertemail
auto-delete
backup all-settings
certificate
certificate ca
certificate crl
certificate local
certificate oftp
certificate remote
certificate ssh
connector
dm
dns
docker
fips
fortiview
fortiview setting
fortiview autocache
global
Syntax
Example
Time zones
ha
ha-scheduled-check
interface
locallog
locallog setting
locallog disk setting
locallog filter
locallog fortianalyzer (fortianalyzer2, fortianalyzer3) setting
locallog memory setting
locallog syslogd (syslogd2, syslogd3) setting
log
log alert
log device-disable
fos-policy-stats
log interface-stats
log ioc
log mail-domain
log ratelimit
log settings
log topology
log-fetch
log-fetch client-profile
log-fetch server-setting
mail
metadata
ntp
password-policy
report
report auto-cache
report est-browse-time
report group
report setting
route
route6
saml
sniffer
snmp
snmp community
snmp sysinfo
snmp user
soc-fabric
sql
syslog
workflow approval-matrix
fmupdate
analyzer virusreport
av-ips
av-ips advanced-log
av-ips web-proxy
custom-url-list
disk-quota
fct-services
fds-setting
Syntax
fds-setting push-override
fds-setting push-override-to-client
fds-setting server-override
fds-setting update-schedule
fwm-setting
multilayer
publicnetwork
server-access-priorities
server-override-status
service
web-spam
web-spam fgd-setting
web-spam web-proxy
execute
add-on-license
add-vm-license
backup
bootimage
certificate
certificate ca
certificate crl
certificate local
certificate remote
chassis
console baudrate
date
device
dmserver
dmserver clearrev
dmserver delrev
dmserver revlist
dmserver showconfig
dmserver showdev
dmserver showrev
erasedisk
factory-license
fgfm reclaim-dev-tunnel
fmpolicy
fmpolicy check-upgrade-object
fmpolicy clone-adom-object
fmpolicy copy-adom-object
fmpolicy install-config
fmpolicy link-adom-object
fmpolicy print-adom-database
fmpolicy print-adom-object
fmpolicy print-adom-package
fmpolicy print-adom-package-assignment
fmpolicy print-adom-policyblock
fmpolicy print-device-database
fmpolicy print-device-object
fmpolicy promote-adom-object
fmpolicy upload-print-log
fmprofile
fmprofile copy-to-device
fmprofile delete-profile
fmprofile export-profile
fmprofile import-from-device
fmprofile import-profile
fmprofile list-profiles
fmscript
fmscript clean-sched
fmscript copy
fmscript delete
fmscript import
fmscript list
fmscript run
fmscript showlog
fmupdate
format
iotop
iotps
log
log adom disk_quota
log device disk_quota
log device permissions
log device vdom
log dlp-files clear
log import
log ips-pkt clear
log quarantine-files clear
log storage-warning
log-fetch
log-fetch client
log-fetch server
log-integrity
lvm
max-dev-licence
migrate
ping
ping6
raid
reboot
remove
reset
reset-sqllog-transfer
restore
sdns
sensor
shutdown
sql-local
Syntax
sql-query-dataset
sql-query-generic
sql-report
ssh
ssh-known-hosts
tac
time
top
traceroute
traceroute6
diagnose
auto-delete
cdb
debug
debug application
debug backup-oldformat-script-logs
debug cdbchk
debug cli
debug console
debug coredump
debug crashlog
debug disable
debug dpm
debug enable
debug gui
debug info
debug klog
debug reset
debug service
debug sysinfo
debug sysinfo-log
debug sysinfo-log-backup
debug sysinfo-log-list
debug timestamp
debug vmd
debug vminfo
dlp-archives
docker
dvm
dvm adom
dvm capability
dvm chassis
dvm check-integrity
dvm csf
dvm dbstatus
dvm debug
dvm device
dvm device-tree-update
dvm extender
dvm fap
dvm fsw
dvm group
dvm lock
dvm proc
dvm remove
dvm supported-platforms
dvm task
dvm taskline
dvm transaction-flag
dvm workflow
faz-cdb
fgfm
fmnetwork
fmnetwork arp
fmnetwork interface
fmnetwork netstat
fmupdate
fortilogd
fwmanager
ha
hardware
incident
license
log device
pm2
report
sniffer
sql
svctools
system
system admin-session
system disk
system export
system flash
system fsck
system geoip
system geoip-city
system interface
system mapserver
system ntp
system print
system process
system raid
system route
system route6
system server
test
test application
test connection
test deploymanager
test policy-check
test search
test sftp
upload
upload clear
upload status
vpn
get
fmupdate analyzer
fmupdate av-ips
fmupdate custom-url-list
fmupdate disk-quota
fmupdate fct-services
fmupdate fds-setting
fmupdate fwm-setting
fmupdate multilayer
fmupdate publicnetwork
fmupdate server-access-priorities
fmupdate server-override-status
fmupdate service
fmupdate web-spam
system admin
system alert-console
system alertemail
system auto-delete
system backup
system certificate
system connector
system dm
system dns
system docker
system fips
system fortiview
system global
system ha
system ha-scheduled-check
system ha-status
system interface
system locallog
system log
system log fetch
system loglimits
system mail
system metadata
system ntp
system password-policy
system performance
system report
system route
system route6
system saml
system sniffer
system snmp
system soc-fabric
system sql
system status
system syslog
system workflow
show
Appendix A - CLI Error Codes
Home
FortiManager 7.0.2
CLI Reference
7.0.2
7.6.1
7.6.0
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.13
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.15
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.3
6.2.2
6.2.1
6.2.0
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.6.11
5.6.10
5.6.9
5.6.8
5.6.8
5.6.7
5.6.7
5.6.6
5.6.6
5.6.5
5.6.5
5.6.4
5.6.4
5.6.3
5.6.3
5.6.2
5.6.2
5.6.1
5.6.1
5.6.0
5.6.0
5.4.7
5.4.6
5.4.6
5.4.5
5.4.5
5.4.4
5.4.4
5.4.3
5.4.3
5.4.2
5.4.2
5.4.1
5.4.1
5.4.0
5.4.0
5.2.10
5.2.9
5.2.9
5.2.7
5.2.7
5.2.6
5.2.6
5.2.4
5.2.4
5.2.3
5.2.3
5.2.2
5.2.2
5.2.1
5.2.0
5.0.12
5.0.12
5.0.11
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.0
4.0.0
system sniffer
system sniffer
Use this command to view the packet sniffer configuration.
Syntax
get system sniffer
Previous
Next
system sniffer
system sniffer
Use this command to view the packet sniffer configuration.
Syntax
get system sniffer
Previous
Next
Home
Product Pillars
Network Security
Network Security
FortiGate / FortiOS
FortiGate 5000
FortiGate 6000
FortiGate 7000
FortiProxy
NOC & SOC Management
FortiManager
FortiManager Cloud
FortiAnalyzer
FortiAnalyzer Cloud
FortiMonitor
FortiGate Cloud
Enterprise Networking
Secure SD-WAN
FortiLAN Cloud
FortiSwitch
FortiAP / FortiWiFi
FortiAP-U Series
FortiNAC-F
FortiExtender
FortiExtender Cloud
FortiAIOps
Business Communications
FortiFone
FortiVoice
FortiVoice Cloud
FortiRecorder
FortiCamera
Zero Trust Access
ZTNA
Zero Trust Network Access
FortiClient EMS
SASE
FortiSASE
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Cloud Security
Hybrid Cloud Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiFlex
Cloud Native Protection
FortiCNP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiWeb Cloud
FortiADC
FortiGSLB
FortiGuard ABP
SAAS Security
FortiMail
FortiMail Cloud
FortiCASB
Security Operations
SOC Platform
FortiAnalyzer
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
FortiPhish
Advanced Threat Protection
FortiSandbox
FortiSandbox Cloud
FortiNDR
FortiNDR Cloud
FortiDeceptor
FortiInsight
FortiInsight Cloud
FortiIsolator
Endpoint Security
FortiClient
FortiClient Cloud
FortiEDR
Best Practices
Solution Hubs
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Next Generation Firewall
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
4-D Resources
Secure SD-WAN
Zero Trust Network Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Hardware Guides
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP / FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiCache
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiGate
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiProxy
FortiRecorder
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
Product A-Z
AscenLink
AV Engine
AWS Firewall Rules
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIOps
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAP / FortiWiFi
FortiAP-U Series
FortiAuthenticator
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiAuthProxy
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCASB
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiCNP
FortiConnect
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiCSPM
FortiCWP
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiDNS
FortiEdge Cloud
FortiEDR/XDR
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate Cloud
FortiGate CNF
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGSLB
FortiGuard Advanced Bot Protection
FortiGuest
FortiHypervisor
FortiInsight
FortiInsight Cloud
FortiIPAM
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail
FortiMail Cloud
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRecon
FortiRecorder
FortiRPS
FortiSandbox
FortiSandbox Cloud
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSASE
FortiScanner
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSwitch
FortiSwitch Manager
FortiTap
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiToken Cloud
FortiTrust Identity
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWeb
FortiWeb Cloud
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiWLM
FortiZTP
IPS Engine
Lacework FortiCNAPP
Managed FortiGate Service
Overlay-as-a-Service
Security Awareness and Training
SOCaaS
Wireless Controller
Ordering Guides
Download PDF
Table of Contents
Introduction
FortiManager documentation
What’s New in FortiManager 7.0
FortiManager 7.0.2
FortiManager 7.0.1
FortiManager 7.0.0
Using the Command Line Interface
CLI command syntax
Connecting to the CLI
Connecting to the FortiManager console
Setting administrative access on an interface
Connecting to the FortiManager CLI using SSH
Connecting to the FortiManager CLI using the GUI
CLI objects
CLI command branches
CLI basics
Command help
Command tree
Command completion
Recalling commands
Editing commands
Line continuation
Command abbreviation
Environment variables
Encrypted password support
Entering spaces in strings
Entering quotation marks in strings
Entering a question mark (?) in a string
International characters
Special characters
IPv4 address formats
Changing the baud rate
Debug log levels
Administrative Domains
ADOMs overview
Configuring ADOMs
To Enable/disable ADOMs:
To change ADOM device modes:
To assign an administrator to an ADOM:
Concurrent ADOM Access
system
admin
admin group
admin ldap
admin profile
admin radius
admin setting
admin tacacs
admin user
alert-console
alertemail
auto-delete
backup all-settings
certificate
certificate ca
certificate crl
certificate local
certificate oftp
certificate remote
certificate ssh
connector
dm
dns
docker
fips
fortiview
fortiview setting
fortiview autocache
global
Syntax
Example
Time zones
ha
ha-scheduled-check
interface
locallog
locallog setting
locallog disk setting
locallog filter
locallog fortianalyzer (fortianalyzer2, fortianalyzer3) setting
locallog memory setting
locallog syslogd (syslogd2, syslogd3) setting
log
log alert
log device-disable
fos-policy-stats
log interface-stats
log ioc
log mail-domain
log ratelimit
log settings
log topology
log-fetch
log-fetch client-profile
log-fetch server-setting
mail
metadata
ntp
password-policy
report
report auto-cache
report est-browse-time
report group
report setting
route
route6
saml
sniffer
snmp
snmp community
snmp sysinfo
snmp user
soc-fabric
sql
syslog
workflow approval-matrix
fmupdate
analyzer virusreport
av-ips
av-ips advanced-log
av-ips web-proxy
custom-url-list
disk-quota
fct-services
fds-setting
Syntax
fds-setting push-override
fds-setting push-override-to-client
fds-setting server-override
fds-setting update-schedule
fwm-setting
multilayer
publicnetwork
server-access-priorities
server-override-status
service
web-spam
web-spam fgd-setting
web-spam web-proxy
execute
add-on-license
add-vm-license
backup
bootimage
certificate
certificate ca
certificate crl
certificate local
certificate remote
chassis
console baudrate
date
device
dmserver
dmserver clearrev
dmserver delrev
dmserver revlist
dmserver showconfig
dmserver showdev
dmserver showrev
erasedisk
factory-license
fgfm reclaim-dev-tunnel
fmpolicy
fmpolicy check-upgrade-object
fmpolicy clone-adom-object
fmpolicy copy-adom-object
fmpolicy install-config
fmpolicy link-adom-object
fmpolicy print-adom-database
fmpolicy print-adom-object
fmpolicy print-adom-package
fmpolicy print-adom-package-assignment
fmpolicy print-adom-policyblock
fmpolicy print-device-database
fmpolicy print-device-object
fmpolicy promote-adom-object
fmpolicy upload-print-log
fmprofile
fmprofile copy-to-device
fmprofile delete-profile
fmprofile export-profile
fmprofile import-from-device
fmprofile import-profile
fmprofile list-profiles
fmscript
fmscript clean-sched
fmscript copy
fmscript delete
fmscript import
fmscript list
fmscript run
fmscript showlog
fmupdate
format
iotop
iotps
log
log adom disk_quota
log device disk_quota
log device permissions
log device vdom
log dlp-files clear
log import
log ips-pkt clear
log quarantine-files clear
log storage-warning
log-fetch
log-fetch client
log-fetch server
log-integrity
lvm
max-dev-licence
migrate
ping
ping6
raid
reboot
remove
reset
reset-sqllog-transfer
restore
sdns
sensor
shutdown
sql-local
Syntax
sql-query-dataset
sql-query-generic
sql-report
ssh
ssh-known-hosts
tac
time
top
traceroute
traceroute6
diagnose
auto-delete
cdb
debug
debug application
debug backup-oldformat-script-logs
debug cdbchk
debug cli
debug console
debug coredump
debug crashlog
debug disable
debug dpm
debug enable
debug gui
debug info
debug klog
debug reset
debug service
debug sysinfo
debug sysinfo-log
debug sysinfo-log-backup
debug sysinfo-log-list
debug timestamp
debug vmd
debug vminfo
dlp-archives
docker
dvm
dvm adom
dvm capability
dvm chassis
dvm check-integrity
dvm csf
dvm dbstatus
dvm debug
dvm device
dvm device-tree-update
dvm extender
dvm fap
dvm fsw
dvm group
dvm lock
dvm proc
dvm remove
dvm supported-platforms
dvm task
dvm taskline
dvm transaction-flag
dvm workflow
faz-cdb
fgfm
fmnetwork
fmnetwork arp
fmnetwork interface
fmnetwork netstat
fmupdate
fortilogd
fwmanager
ha
hardware
incident
license
log device
pm2
report
sniffer
sql
svctools
system
system admin-session
system disk
system export
system flash
system fsck
system geoip
system geoip-city
system interface
system mapserver
system ntp
system print
system process
system raid
system route
system route6
system server
test
test application
test connection
test deploymanager
test policy-check
test search
test sftp
upload
upload clear
upload status
vpn
get
fmupdate analyzer
fmupdate av-ips
fmupdate custom-url-list
fmupdate disk-quota
fmupdate fct-services
fmupdate fds-setting
fmupdate fwm-setting
fmupdate multilayer
fmupdate publicnetwork
fmupdate server-access-priorities
fmupdate server-override-status
fmupdate service
fmupdate web-spam
system admin
system alert-console
system alertemail
system auto-delete
system backup
system certificate
system connector
system dm
system dns
system docker
system fips
system fortiview
system global
system ha
system ha-scheduled-check
system ha-status
system interface
system locallog
system log
system log fetch
system loglimits
system mail
system metadata
system ntp
system password-policy
system performance
system report
system route
system route6
system saml
system sniffer
system snmp
system soc-fabric
system sql
system status
system syslog
system workflow
show
Appendix A - CLI Error Codes