Fortinet black logo

Managing config

Copy Link
Copy Doc ID 7461b3d5-68ec-11ea-9384-00505692583a:881501
Download PDF

Managing config

This module provides the function of pushing differential configurations to remote FortiWeb devices in terms of SSH connection with GUI.

tooltip icon

This feature aims to manage FortiWeb devices by group, so you need to add devices with similar configurations to a same group.


The Config Management pane includes the following tabs:

Device Group Select the device group among which you want to synchronize the configurations for devices.
Push Config Execute the push operations.
Save Save the configurations of current group, thus the configurations will not be lost when switched to another group.
Initialize Select where to synchronize the configurations from.
Setting Set which modules you want to push to devices.

For the following settings, refer to FortiWeb Administration Guide for details.

The Machine Learning - Bot Detection is not supported in FortiManager yet. To configure bot detection, please go to FortiWeb.

The Machine Learning (Anomaly Detection) configuration is restricted in FortiWeb Manager. It's only allowed to view domains. Actions such as export/import/refresh/stop are not allowed on the domain.


If you add a new device in a group from Device Manager, click Config Management, and a wizard shows as below:


tooltip icon

This wizard is displayed only when at least one device is added in a group.

Use this wizard to pull the benchmark configurations of a device to FortiWeb Manager, and push the configurations to other new devices in this group.

Also, you can go to Initializing config and Pushing config to configure the settings.

To avoid conflicts, some configurations do not support synchronization. The following lists items that can not be synchronized:

  • router static
  • wvs profile
  • wvs policy
  • wvs schedule
  • server-policy pattern predefined-global-white-list-group
  • server-policy pattern known-search-engines-group
  • waf geo-block-list
  • waf geo-ip-except
  • system hsm info
  • user saml-user
  • waf site-publish-helper keytab_file
  • system interface
  • system raid
  • system ha
  • waf xml-schema file

Managing config

This module provides the function of pushing differential configurations to remote FortiWeb devices in terms of SSH connection with GUI.

tooltip icon

This feature aims to manage FortiWeb devices by group, so you need to add devices with similar configurations to a same group.


The Config Management pane includes the following tabs:

Device Group Select the device group among which you want to synchronize the configurations for devices.
Push Config Execute the push operations.
Save Save the configurations of current group, thus the configurations will not be lost when switched to another group.
Initialize Select where to synchronize the configurations from.
Setting Set which modules you want to push to devices.

For the following settings, refer to FortiWeb Administration Guide for details.

The Machine Learning - Bot Detection is not supported in FortiManager yet. To configure bot detection, please go to FortiWeb.

The Machine Learning (Anomaly Detection) configuration is restricted in FortiWeb Manager. It's only allowed to view domains. Actions such as export/import/refresh/stop are not allowed on the domain.


If you add a new device in a group from Device Manager, click Config Management, and a wizard shows as below:


tooltip icon

This wizard is displayed only when at least one device is added in a group.

Use this wizard to pull the benchmark configurations of a device to FortiWeb Manager, and push the configurations to other new devices in this group.

Also, you can go to Initializing config and Pushing config to configure the settings.

To avoid conflicts, some configurations do not support synchronization. The following lists items that can not be synchronized:

  • router static
  • wvs profile
  • wvs policy
  • wvs schedule
  • server-policy pattern predefined-global-white-list-group
  • server-policy pattern known-search-engines-group
  • waf geo-block-list
  • waf geo-ip-except
  • system hsm info
  • user saml-user
  • waf site-publish-helper keytab_file
  • system interface
  • system raid
  • system ha
  • waf xml-schema file