CLI Reference

• Change log
• Introduction
• Conventions
• Using the CLI
  • Connecting to the CLI
  • Command syntax
  • Subcommands
  • Permissions
  • Tips
  • ADOMs
• config
  • log email-policy
  • log attack log
  • log custom-sensitive-rule
  • log disk
  • log email policy
  • log event-log
  • log fortianalyzer
  • log fortianalyzer-policy
  • log ftp-policy
  • log reports
  • log sensitive
  • log siem-message-policy
  • log siem-policy
  • log syslogd
  • log syslog-policy
  • log traffic-log
  • log trigger-policy
  • router policy
  • router setting
  • router static
  • server-policy acceleration
  • server-policy allow-hosts
  • server-policy health
  • server-policy http-content-routing-policy
  • server-policy pattern custom-data-type
  • server-policy pattern custom-global-white-list-group
  • server-policy pattern threat-weight
  • server-policy persistence-policy
  • server-policy policy
  • server-policy server-pool
  • server-policy service custom
  • server-policy service predefined
  • server-policy setting
  • server policy traffic mirror
  • server-policy vserver
  • system accprofile
  • system admin
  • system admin-certificate ca
  • system admin-certificate local
  • system advanced
  • system antivirus
  • system autoupdate override
  • system autoupdate schedule
  • system autoupdate tunneling
  • system backup
  • system central-management
  • system certificate ca
  • system certificate ca-group
  • system certificate crl
  • system certificate crl-group
  • system certificate intermediate-certificate
  • system certificate intermediate-certificate-group
  • system certificate local
  • system certificate multi-local
  • system certificate remote
  • system certificate server-certificate-verify
  • system certificate sni
  • system certificate xml-client-certificate
  • system certificate tsl-ca
  • system certificate urlcert
  • system certificate verify
  • system certificate xml-client-certificate-group
  • system conf-sync
  • system console
  • system decoding enhancement
  • system dns
  • system eventhub
  • system fabric-connectors
  • system fail-open
  • system fds proxy
  • system feature-visibility
  • system fips-cc
  • system firewall address
  • system firewall service
  • system firewall firewall-policy
  • system firewall fwmark-policy
  • system firewall dnat policy
  • system firewall snat-policy
  • system fortigate-integration
  • system fortisandbox
  • system global
  • system ha
  • system ha-aa-server-policy-hlck
  • system ha-mgmt-router-static
  • system ha-mgmt-router-policy
  • system ha-node
  • system icapserver
  • system ha-traffic-distribution
  • system hsm info
  • system hsm partition
  • system icapserver
  • system interface
  • system ip-detection
  • system manager-mode
  • system network-option
  • system password-policy
  • system raid
  • system replacemsg-image
  • system settings
  • system snmp community
  • system snmp sysinfo
  • system snmp user
  • system tcpdump
  • system vip
  • system v-zone
  • system wccp
  • system certificate xml-server-certificate
  • user admin-usergrp
  • user kerberos-user
  • user ldap-user
  • user local-user
  • user ntlm-user
  • user pki-user
  • user radius-user
  • user saml-user
  • user tacacs+ user
  • user user-group
  • wad file-filter
  • wad website
  • waf allow-method-exceptions
  • waf allow-method-policy
  • waf api-policy
  • waf api-rules
  • waf api-users
  • waf api-user-group
  • waf application-layer-dos-prevention
  • waf base-signature-disable
  • waf biometrics-based-detection
  • waf bot-detection-policy
  • waf bot-mitigation-policy
  • waf cookie-security
  • waf csrf-protection
  • waf custom-access policy
  • waf custom-access rule
  • waf custom-protection-group
  • waf custom-protection-rule
  • waf exclude-url
  • waf file-compress-rule
  • waf file-upload-restriction-policy
  • waf file-upload-restriction-rule
  • waf ftp-command-restriction-rule
  • waf ftp-file-security
  • waf ftp-protection-profile
  • waf geo-block-list
  • waf geo-ip-except
  • waf hidden-fields-protection
  • waf hidden-fields-rule
  • waf http-authen http-authen-policy
  • waf http-authen http-authen-rule
  • waf http-connection-flood-check-rule
  • waf http-constraints-exceptions
  • waf http-header-security
  • waf http-protocol-parameter-restriction
  • waf http-request-flood-prevention-rule
  • waf input-rule
  • waf ip-intelligence
  • waf ip-intelligence-exception
  • waf ip-list
  • waf json-schema
  • waf json-validation
  • waf_known_bots
  • waf layer4-access-limit-rule
  • waf layer4-connection-flood-check-rule
  • waf machine-learning
  • waf machine-learning-policy
  • waf mitb-policy
  • waf mitb-rule
  • waf mobile-api-protection
  • waf openapi-file
  • waf openapi-validation-policy
  • waf padding-oracle
  • waf parameter-validation-rule
  • waf signature
  • waf signature_update_policy
  • waf site-publish-helper authentication-server-pool
  • waf site-publish-helper keytab_file
  • waf site-publish-helper policy
  • waf site-publish-helper rule
  • waf staged_signature_list
  • waf syntax-based-attack-detection
  • waf threshold-based-detection
  • waf url-access url-access-policy
  • waf url-encryption
  • waf url-access url-access-rule
  • waf url-rewrite url-rewrite-policy
  • waf url-rewrite url-rewrite-rule
  • waf user-tracking policy
  • waf user-tracking rule
  • waf web-cache-exception
  • waf web-cache-rule
  • waf web-protection-profile inline-protection
  • waf web-protection-profile offline-protection
  • waf websocket-security rule
  • waf websocket-security policy
  • waf ws security
  • waf x-forwarded-for
  • waf xml-exempted-urls
  • waf xml-schema
  • waf xml-validation
  • waf xml-wsdl
  • wvs limit
  • wvs policy
  • wvs profile
  • wvs schedule
  • wvs template
• diagnose
  • debug
  • debug application
  • debug cli
  • debug cmdb
  • debug console timestamp
  • debug coredumplog
  • debug crashlog
  • debug daemonlog
  • debug dnsproxy list
  • debug emerglog
  • debug flow filter
  • debug flow filter module-detail
  • debug flow reset
  • debug flow trace
  • debug info
  • debug init
  • debug jemalloc-heap
  • debug kernlog
  • debug netstatlog
  • debug proxy log
  • debug reset
  • debug trace report
  • debug trace tcpdump
  • debug upload
  • hardware check
  • hardware cpu
  • hardware fail-open
  • hardware harddisk
  • hardware interrupts
  • hardware logdisk info
  • hardware mem
  • hardware nic
  • hardware raid list
  • index
  • log
  • network arp
  • network ip
  • network route
  • network rtcache
  • network sniffer
  • network tcp list
  • network udp list
  • policy
  • system flash
  • system ha backup-config
  • system ha confd_status
  • system ha dev-info
  • system ha export-eventlog
  • system ha file-log
  • system ha file-stat
  • system ha interface-macinfo
  • system ha mac
  • system ha md5fixed
  • system ha md5sum-gen
  • system ha nodes
  • system ha sessions_stat
  • system ha status
  • system ha sync-config
  • system ha sync-stat
  • system ha traffic-distribution
  • system jeprof
  • system kill
  • system mount
  • system top
  • system update info
• execute
  • backup cert-config
  • backup cli-config
  • backup full-config
  • backup full-config-with-ML-data
  • backup web-protection-profile
  • batch
  • create-raid level
  • create-raid rebuild
  • date
  • db rebuild
  • dnscache-cleanup
  • erase-disk
  • factoryreset
  • fdnserver delete
  • fdnserver show
  • formatlogdisk
  • ha disconnect
  • ha manage
  • ha md5sum
  • ha synchronize
  • ping
  • ping6
  • ping-options
  • ping6-options
  • reboot
  • remove vmlicense
  • restore cert-config
  • restore config
  • restore image
  • restore secondary-image
  • restore vmlicense
  • session-cleanup
  • shutdown
  • telnet
  • telnettest
  • time
  • traceroute
  • update-now
• get
  • system fortisandbox-statistics
  • system performance
  • system status
  • waf predefined-global-white-list
  • waf signature-rules
• show