config system csf
Add this FortiProxy to a Security Fabric or set up a new Security Fabric on this FortiProxy.
config system csf
Description: Add this FortiProxy to a Security Fabric or set up a new Security Fabric on this FortiProxy.
set status [enable|disable]
set upstream {string}
set upstream-port {integer}
set group-name {string}
set group-password {password}
set accept-auth-by-cert [disable|enable]
set log-unification [disable|enable]
set authorization-request-type [serial|certificate]
set certificate {string}
set fabric-workers {integer}
set downstream-access [enable|disable]
set downstream-accprofile {string}
set configuration-sync [default|local]
set fabric-object-unification [default|local]
set saml-configuration-sync [default|local]
config trusted-list
Description: Pre-authorized and blocked security fabric nodes.
edit <name>
set authorization-type [serial|certificate]
set serial {string}
set certificate {var-string}
set action [accept|deny]
set ha-members {string}
set downstream-authorization [enable|disable]
next
end
config fabric-connector
Description: Fabric connector configuration.
edit <serial>
set accprofile {string}
set configuration-write-access [enable|disable]
next
end
set forticloud-account-enforcement [enable|disable]
end
config system csf
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
status |
Enable/disable Security Fabric. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
upstream |
IP/FQDN of the FortiProxy upstream from this FortiProxy in the Security Fabric. |
string |
Maximum length: 255 |
|
||||||
|
upstream-port |
The port number to use to communicate with the FortiProxy upstream from this FortiProxy in the Security Fabric. |
integer |
Minimum value: 1 Maximum value: 65535 |
8013 |
||||||
|
group-name |
Security Fabric group name. All FortiProxys in a Security Fabric must have the same group name. |
string |
Maximum length: 35 |
|
||||||
|
group-password |
Security Fabric group password. All FortiProxys in a Security Fabric must have the same group password. |
password |
Not Specified |
|
||||||
|
accept-auth-by-cert |
Accept connections with unknown certificates and ask admin for approval. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
log-unification |
Enable/disable broadcast of discovery messages for log unification. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
authorization-request-type |
Authorization request type. |
option |
- |
serial |
||||||
|
|
|
|||||||||
|
certificate |
Certificate. |
string |
Maximum length: 35 |
|
||||||
|
fabric-workers |
Number of worker processes for Security Fabric daemon. |
integer |
Minimum value: 1 Maximum value: 4 |
2 |
||||||
|
downstream-access |
Enable/disable downstream device access to this device's configuration and data. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
downstream-accprofile |
Default access profile for requests from downstream devices. |
string |
Maximum length: 35 |
|
||||||
|
configuration-sync |
Configuration sync mode. |
option |
- |
default |
||||||
|
|
|
|||||||||
|
fabric-object-unification |
Fabric CMDB Object Unification. |
option |
- |
default |
||||||
|
|
|
|||||||||
|
saml-configuration-sync |
SAML setting configuration synchronization. |
option |
- |
default |
||||||
|
|
|
|||||||||
|
forticloud-account-enforcement |
Fabric FortiCloud account unification. |
option |
- |
enable |
||||||
|
|
|
|||||||||
config trusted-list
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
name |
Name. |
string |
Maximum length: 35 |
|
||||||
|
authorization-type |
Authorization type. |
option |
- |
serial |
||||||
|
|
|
|||||||||
|
serial |
Serial. |
string |
Maximum length: 19 |
|
||||||
|
certificate |
Certificate. |
var-string |
Maximum length: 32767 |
|
||||||
|
action |
Security fabric authorization action. |
option |
- |
accept |
||||||
|
|
|
|||||||||
|
ha-members |
HA members. |
string |
Maximum length: 19 |
|
||||||
|
downstream-authorization |
Trust authorizations by this node's administrator. |
option |
- |
disable |
||||||
|
|
|
|||||||||
config fabric-connector
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
serial |
Serial. |
string |
Maximum length: 19 |
|
||||||
|
accprofile |
Override access profile. |
string |
Maximum length: 35 |
|
||||||
|
configuration-write-access |
Enable/disable downstream device write access to configuration. |
option |
- |
disable |
||||||
|
|
|
|||||||||