DOCUMENT LIBRARY
DOCUMENT LIBRARY
Products
Best Practices
Hardware Guides
Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
Hybrid Mesh Firewall
FortiGate/ FortiOS
FortiGate-5000
/
6000
/
7000
NOC Management
FortiManager
/
FortiManager Cloud
Managed Fortigate Service
LAN
FortiSwitch
FortiAP / FortiWiFi
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
More >>
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Lacework FortiCNAPP
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Web Application / API Protection
FortiWeb
FortiADC
FortiDAST
More >>
Security Operations
Security Operations Automation
FortiAnalyzer
/
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
SOC-as-a-Service (SOCaaS)
Identity
FortiAuthenticator
FortiTrust Identity
FortiPAM
Early Detection & Prevention
FortiSandbox
/
FortiSandbox Cloud
FortiNDR
FortiDeceptor
FortiRecon
More >>
Secure Networking
Hybrid Mesh Firewall
FortiGate/ FortiOS
FortiGate-5000
/
6000
/
7000
NOC Management
FortiManager
/
FortiManager Cloud
Managed Fortigate Service
FortiAIOps
LAN
FortiSwitch
FortiAP / FortiWiFi
FortiAP-U Series
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
Communication & Surveillance
FortiVoice
/
FortiVoice Cloud
FortiFone
FortiCamera
FortiRecorder
FortiCentral
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Cloud-Native Security
Lacework FortiCNAPP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiADC
FortiDAST
Security Operations
Security Operations Automation
FortiAnalyzer
/
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
Endpoint
FortiClient
/
FortiClient Cloud
FortiEDR/XDR
Data Protection
FortiDLP
FortiDLP Agent
FortiDLP Policies
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken
/
FortiToken Cloud
FortiPAM
Email
FortiMail
FortiPhish
Early Detection & Prevention
FortiSandbox
/
FortiSandbox Cloud
FortiNDR
FortiDeceptor
FortiRecon
Expert Services
SOC-as-a-Service (SOCaaS)
Edge Firewall
FortiGate/FortiOS
FortiGate-5000
/
6000
/
7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
/
FortiManager Cloud
FortiAnalyzer
/
FortiAnalyzer Cloud
Overlay-as-a-Service
SD Branch
FortiSwitch
FortiAP / FortiWiFi
FortiExtender
/
FortiExtender Cloud
Application Delivery
FortiADC
/
FortiGSLB
Single Vendor SASE
FortiSASE
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Secure Private Access
Secure SD-WAN
Zero Trust Network Access (ZTNA)
Thin Edge
FortiGate/ FortiOS
FortiAP / FortiWiFi
FortiExtender
/
FortiExtender Cloud
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Application Gateway
FortiGate/ FortiOS
FortiProxy
FortiADC
/
FortiGSLB
Enterprise Asset Management
FortiClient EMS
Endpoint Agent
FortiClient
/
FortiClient Cloud
Agentless Security Posture
FortiNAC-F
FortiSIEM
/
FortiSIEM Cloud
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Wireless
FortiAP / FortiWiFi
FortiAP-U Series
FortiGate Cloud
Switching
FortiSwitch
FortiEdge Cloud
FortiNAC-F
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Privilege Acccess Management
FortiPAM
Next Generation Firewall
FortiGate / FortiOS
FortiGate-5000
/
6000
/
7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
/
FortiManager Cloud
FortiAnalyzer
/
FortiAnalyzer Cloud
Expert Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
All
FortiADC Public Cloud
FortiAnalyzer Public Cloud
FortiAuthenticator Public Cloud
FortiDeceptor Public Cloud
FortiGate Public Cloud
FortiIsolator Public Cloud
FortiManager Public Cloud
FortiNDR Public Cloud
FortiPAM Public Cloud
FortiPortal Public Cloud
FortiProxy Public Cloud
FortiSandbox Public Cloud
FortiTester Public Cloud
FortiVoice Public Cloud
FortiWeb Manager Public Cloud
FortiWeb Public Cloud
All
FortiADC Private Cloud
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Private Cloud
FortiAuthenticator Private Cloud
FortiDeceptor Private Cloud
FortiGate Private Cloud
FortiManager Private Cloud
FortiNDR Private Cloud
FortiPAM Private Cloud
FortiProxy Private Cloud
FortiSandbox Private Cloud
FortiTester Private Cloud
FortiVoice Private Cloud
FortiWeb Manager Private Cloud
FortiWeb Private Cloud
Account Management
FortiCloud Services
SAAS Management
FortiGate Cloud
FortiEdge Cloud
FortiEdge Cloud
FortiExtender Cloud
FortiPresence Cloud
FortiToken Cloud
FortiTrust Identity
FortiZTP
FortiCamera Cloud
SAAS Application Security
FortiWeb Cloud
FortiGSLB
FortiCASB
FortiCNP
FortiInsight
FortiPhish
FortiGate CNF
Managed Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
Platform as a service (PAAS)
FortiSASE
FortiAnalyzer Cloud
FortiManager Cloud
FortiClient Cloud
FortiSandbox Cloud
FortiMail Cloud
FortiSOAR Cloud
Other SAAS Services
Overlay-as-a-Service
FortiRecon
FortiConverter
ForiIPAM
FortiFlex
FortiCare Elite
4D Resources
Solution Hubs
Define, design, deploy, demo
4D Pillars
Secure SD-WAN
Zero Trust Network Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Curated Links by Solution
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
Next Generation Firewall
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP / FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiCache
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiProxy
FortiRecorder
FortiGate
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
AscenLink
AV Engine
AWS Firewall Rules
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIOps
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAP / FortiWiFi
FortiAP-U Series
FortiAuthenticator
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiAuthProxy
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCASB
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiCNP
FortiConnect
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiCSPM
FortiCWP
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiDNS
FortiEdge Cloud
FortiEDR/XDR
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate Cloud
FortiGate CNF
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGSLB
FortiGuard Advanced Bot Protection
FortiGuest
FortiHypervisor
FortiInsight
FortiInsight Cloud
FortiIPAM
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail
FortiMail Cloud
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRecon
FortiRecorder
FortiRPS
FortiSandbox
FortiSandbox Cloud
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSASE
FortiScanner
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSwitch
FortiSwitch Manager
FortiTap
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiToken Cloud
FortiTrust Identity
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWeb
FortiWeb Cloud
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiWLM
FortiZTP
IPS Engine
Lacework FortiCNAPP
Managed FortiGate Service
Overlay-as-a-Service
Security Awareness and Training
SOCaaS
Wireless Controller
Search documents and hardware ...
CLI Reference
Change log
Introduction
Conventions
Using the CLI
Connecting to the CLI
Command syntax
Subcommands
Permissions
Tips
ADOMs
config
log email-policy
log attack log
log custom-sensitive-rule
log disk
log email policy
log event-log
log fortianalyzer
log fortianalyzer-policy
log ftp-policy
log reports
log sensitive
log siem-message-policy
log siem-policy
log syslogd
log syslog-policy
log traffic-log
log trigger-policy
router policy
router setting
router static
server-policy acceleration
server-policy allow-hosts
server-policy health
server-policy http-content-routing-policy
server-policy pattern custom-data-type
server-policy pattern custom-global-white-list-group
server-policy pattern threat-weight
server-policy persistence-policy
server-policy policy
server-policy server-pool
server-policy service custom
server-policy service predefined
server-policy setting
server policy traffic mirror
server-policy vserver
server-policy ztna-profile
server-policy ztna-rule
system accprofile
system admin
system admin-certificate ca
system admin-certificate intermediate-ca
system admin-certificate intermediate-ca-group
system admin-certificate local
system advanced
system antivirus
system autoupdate override
system autoupdate schedule
system autoupdate tunneling
system backup
system central-management
system certificate ca
system certificate ca-group
system certificate crl
system certificate crl-group
system certificate intermediate-certificate
system certificate intermediate-certificate-group
system certificate letsencrypt
system certificate local
system certificate multi-local
system certificate remote
system certificate server-certificate-verify
system certificate sni
system certificate xml-client-certificate
system certificate tsl-ca
system certificate urlcert
system certificate verify
system certificate xml-client-certificate-group
system conf-sync
system console
system csf
system decoding enhancement
system dns
system endpoint-control
system eventhub
system fail-open
system fds proxy
system feature-visibility
system fips-cc
system firewall address
system firewall service
system firewall firewall-policy
system firewall fwmark-policy
system firewall dnat policy
system firewall snat-policy
system fortigate-integration
system fortisandbox
system global
system ha
system ha-aa-server-policy-hlck
system ha-mgmt-router-static
system ha-mgmt-router-policy
system ha-node
system icapserver
system ha-traffic-distribution
system hsm info
system hsm partition
system icapserver
system interface
system ip-detection
system manager-mode
system network-option
system password-policy
system raid
system replacemsg-image
system saml
system sdn-connector
system settings
system snmp community
system snmp sysinfo
system snmp user
system sso-admin
system tcpdump
system vip
system v-zone
system wccp
system certificate xml-server-certificate
user admin-usergrp
user kerberos-user
user ldap-user
user local-user
user ntlm-user
user pki-user
user radius-user
user recaptcha-user
user saml-user
user tacacs+ user
user user-group
wad file-filter
wad website
waf allow-method-exceptions
waf allow-method-policy
waf api-learning-policy
waf api-learning-rule
waf api-policy
waf api-rules
waf api-users
waf api-user-group
waf application-layer-dos-prevention
waf base-signature-disable
waf biometrics-based-detection
waf bot-detection-policy
waf bot-mitigation-policy
waf cookie-security
waf csrf-protection
waf custom-access policy
waf custom-access rule
waf custom-protection-group
waf custom-protection-rule
waf exclude-url
waf file-compress-rule
waf file-upload-restriction-policy
waf file-upload-restriction-rule
waf ftp-command-restriction-rule
waf ftp-file-security
waf ftp-protection-profile
waf geo-block-list
waf geo-ip-except
waf hidden-fields-protection
waf hidden-fields-rule
waf http-authen http-authen-policy
waf http-authen http-authen-rule
waf http-connection-flood-check-rule
waf http-constraints-exceptions
waf HTTP-header-security
waf http-protocol-parameter-restriction
waf http-request-flood-prevention-rule
waf input-rule
waf ip-intelligence
waf ip-intelligence-exception
waf ip-list
waf json-schema
waf json-validation
waf_known_bots
waf layer4-access-limit-rule
waf layer4-connection-flood-check-rule
waf link-cloaking link-cloaking-rule
waf link-cloaking link-cloaking-policy
waf machine-learning url-replacer-rule/policy
waf machine-learning-policy
waf mitb-policy
waf mitb-rule
waf mobile-api-protection
waf openapi-file
waf openapi-validation-policy
waf padding-oracle
waf parameter-validation-rule
waf signature
waf signature_update_policy
waf site-publish-helper authentication-server-pool
waf site-publish-helper form-based-delegation
waf site-publish-helper policy
waf site-publish-helper rule
waf staged_signature_list
waf syntax-based-attack-detection
waf threshold-based-detection
waf url-access url-access-policy
waf url-encryption
waf url-access-parameter
waf url-access url-access-rule
waf url-rewrite url-rewrite-policy
waf url-rewrite url-rewrite-rule
waf user-tracking policy
waf user-tracking rule
waf web-cache-exception
waf web-cache-rule
waf web-protection-profile inline-protection
waf web-protection-profile offline-protection
waf webshell-detection-policy
waf websocket-security rule
waf websocket-security policy
waf ws security
waf x-forwarded-for
waf xml-exempted-urls
waf xml-schema
waf xml-validation
waf xml-wsdl
wvs limit
wvs policy
wvs profile
wvs schedule
wvs template
diagnose
debug
debug application
debug cli
debug cmdb
debug comlog
debug console timestamp
debug coredumplog
debug crashlog
debug daemonlog
debug dnsproxy list
debug emerglog
debug flow filter
debug flow filter module-detail
debug flow reset
debug flow trace
debug info
debug init
debug jemalloc-heap
debug kernlog
debug netstatlog
debug proxy log
debug reset
debug trace report
debug trace tcpdump
debug upload
hardware bypass info
hardware check
hardware cpld info
hardware cpu
hardware fail-open
hardware harddisk
hardware interrupts
hardware logdisk info
hardware mem
hardware nic
hardware raid list
hardware raid-card info
index
log
network arp
network ip
network route
network rtcache
network sniffer
network tcp list
network udp list
policy
system endpoint-control
system flash
system ha backup-config
system ha confd_status
system ha dev-info
system ha export-eventlog
system ha file-log
system ha file-stat
system ha interface-macinfo
system ha mac
system ha md5fixed
system ha md5sum-gen
system ha nodes
system ha sessions_stat
system ha status
system ha sync-config
system ha sync-stat
system ha traffic-distribution
system jeprof
system kill
system mount
system top
system update info
test application
execute
backup cert-config
backup cli-config
backup full-config
backup full-config-with-ML-data
backup web-protection-profile
batch
create-raid level
create-raid rebuild
date
db rebuild
dnscache-cleanup
erase-disk
factoryreset
fctems
fdnserver delete
fdnserver show
formatlogdisk
ha disconnect
ha manage
ha md5sum
ha synchronize
icap-cache-clear
ping
ping6
ping-options
ping6-options
reboot
redis rebuild
remove vmlicense
restore cert-config
restore config
restore image
restore secondary-image
restore vmlicense
sandbox-cache-clear
session-cleanup
shutdown
telnet
telnettest
time
traceroute
update-now
get
system fortisandbox-statistics
system performance
system status
waf predefined-global-allow-list
waf signature-rules
show
Home
FortiWeb 7.0.7
CLI Reference
7.0.7
7.6.1
7.6.0
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4.0
7.2.10
7.2.9
7.2.8
7.2.7
7.2.6
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.9
7.0.8
7.0.7
7.0.6
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.3
6.4.2
6.4.1
6.4.0
6.3.23
6.3.19
6.3.18
6.3.17
6.3.16
6.3.15
6.3.14
6.3.13
6.3.11
6.3.10
6.3.9
6.3.7
6.3.6
6.3.5
6.3.4
6.3.3
6.3.2
6.3.1
6.3.0
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.2
6.1.1
5.7.0
5.6.1
5.6.0
Change log
Change log
May 19, 2023
Initial release.
Previous
Next
Change log
Change log
May 19, 2023
Initial release.
Previous
Next
Home
Product Pillars
Network Security
Network Security
FortiGate / FortiOS
FortiGate 5000
FortiGate 6000
FortiGate 7000
FortiProxy
NOC & SOC Management
FortiManager
FortiManager Cloud
FortiAnalyzer
FortiAnalyzer Cloud
FortiMonitor
FortiGate Cloud
Enterprise Networking
Secure SD-WAN
FortiLAN Cloud
FortiSwitch
FortiAP / FortiWiFi
FortiAP-U Series
FortiNAC-F
FortiExtender
FortiExtender Cloud
FortiAIOps
Business Communications
FortiFone
FortiVoice
FortiVoice Cloud
FortiRecorder
FortiCamera
Zero Trust Access
ZTNA
Zero Trust Network Access
FortiClient EMS
SASE
FortiSASE
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Cloud Security
Hybrid Cloud Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiFlex
Cloud Native Protection
FortiCNP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiWeb Cloud
FortiADC
FortiGSLB
FortiGuard ABP
SAAS Security
FortiMail
FortiMail Cloud
FortiCASB
Security Operations
SOC Platform
FortiAnalyzer
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
FortiPhish
Advanced Threat Protection
FortiSandbox
FortiSandbox Cloud
FortiNDR
FortiNDR Cloud
FortiDeceptor
FortiInsight
FortiInsight Cloud
FortiIsolator
Endpoint Security
FortiClient
FortiClient Cloud
FortiEDR
Best Practices
Solution Hubs
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Next Generation Firewall
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
4-D Resources
Secure SD-WAN
Zero Trust Network Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Hardware Guides
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP / FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiCache
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiGate
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiProxy
FortiRecorder
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
Product A-Z
AscenLink
AV Engine
AWS Firewall Rules
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIOps
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAP / FortiWiFi
FortiAP-U Series
FortiAuthenticator
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiAuthProxy
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCASB
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiCNP
FortiConnect
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiCSPM
FortiCWP
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiDNS
FortiEdge Cloud
FortiEDR/XDR
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate Cloud
FortiGate CNF
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGSLB
FortiGuard Advanced Bot Protection
FortiGuest
FortiHypervisor
FortiInsight
FortiInsight Cloud
FortiIPAM
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail
FortiMail Cloud
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRecon
FortiRecorder
FortiRPS
FortiSandbox
FortiSandbox Cloud
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSASE
FortiScanner
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSwitch
FortiSwitch Manager
FortiTap
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiToken Cloud
FortiTrust Identity
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWeb
FortiWeb Cloud
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiWLM
FortiZTP
IPS Engine
Lacework FortiCNAPP
Managed FortiGate Service
Overlay-as-a-Service
Security Awareness and Training
SOCaaS
Wireless Controller
Ordering Guides
Download PDF
Table of Contents
Change log
Introduction
Conventions
Using the CLI
Connecting to the CLI
Command syntax
Subcommands
Permissions
Tips
ADOMs
config
log email-policy
log attack log
log custom-sensitive-rule
log disk
log email policy
log event-log
log fortianalyzer
log fortianalyzer-policy
log ftp-policy
log reports
log sensitive
log siem-message-policy
log siem-policy
log syslogd
log syslog-policy
log traffic-log
log trigger-policy
router policy
router setting
router static
server-policy acceleration
server-policy allow-hosts
server-policy health
server-policy http-content-routing-policy
server-policy pattern custom-data-type
server-policy pattern custom-global-white-list-group
server-policy pattern threat-weight
server-policy persistence-policy
server-policy policy
server-policy server-pool
server-policy service custom
server-policy service predefined
server-policy setting
server policy traffic mirror
server-policy vserver
server-policy ztna-profile
server-policy ztna-rule
system accprofile
system admin
system admin-certificate ca
system admin-certificate intermediate-ca
system admin-certificate intermediate-ca-group
system admin-certificate local
system advanced
system antivirus
system autoupdate override
system autoupdate schedule
system autoupdate tunneling
system backup
system central-management
system certificate ca
system certificate ca-group
system certificate crl
system certificate crl-group
system certificate intermediate-certificate
system certificate intermediate-certificate-group
system certificate letsencrypt
system certificate local
system certificate multi-local
system certificate remote
system certificate server-certificate-verify
system certificate sni
system certificate xml-client-certificate
system certificate tsl-ca
system certificate urlcert
system certificate verify
system certificate xml-client-certificate-group
system conf-sync
system console
system csf
system decoding enhancement
system dns
system endpoint-control
system eventhub
system fail-open
system fds proxy
system feature-visibility
system fips-cc
system firewall address
system firewall service
system firewall firewall-policy
system firewall fwmark-policy
system firewall dnat policy
system firewall snat-policy
system fortigate-integration
system fortisandbox
system global
system ha
system ha-aa-server-policy-hlck
system ha-mgmt-router-static
system ha-mgmt-router-policy
system ha-node
system icapserver
system ha-traffic-distribution
system hsm info
system hsm partition
system icapserver
system interface
system ip-detection
system manager-mode
system network-option
system password-policy
system raid
system replacemsg-image
system saml
system sdn-connector
system settings
system snmp community
system snmp sysinfo
system snmp user
system sso-admin
system tcpdump
system vip
system v-zone
system wccp
system certificate xml-server-certificate
user admin-usergrp
user kerberos-user
user ldap-user
user local-user
user ntlm-user
user pki-user
user radius-user
user recaptcha-user
user saml-user
user tacacs+ user
user user-group
wad file-filter
wad website
waf allow-method-exceptions
waf allow-method-policy
waf api-learning-policy
waf api-learning-rule
waf api-policy
waf api-rules
waf api-users
waf api-user-group
waf application-layer-dos-prevention
waf base-signature-disable
waf biometrics-based-detection
waf bot-detection-policy
waf bot-mitigation-policy
waf cookie-security
waf csrf-protection
waf custom-access policy
waf custom-access rule
waf custom-protection-group
waf custom-protection-rule
waf exclude-url
waf file-compress-rule
waf file-upload-restriction-policy
waf file-upload-restriction-rule
waf ftp-command-restriction-rule
waf ftp-file-security
waf ftp-protection-profile
waf geo-block-list
waf geo-ip-except
waf hidden-fields-protection
waf hidden-fields-rule
waf http-authen http-authen-policy
waf http-authen http-authen-rule
waf http-connection-flood-check-rule
waf http-constraints-exceptions
waf HTTP-header-security
waf http-protocol-parameter-restriction
waf http-request-flood-prevention-rule
waf input-rule
waf ip-intelligence
waf ip-intelligence-exception
waf ip-list
waf json-schema
waf json-validation
waf_known_bots
waf layer4-access-limit-rule
waf layer4-connection-flood-check-rule
waf link-cloaking link-cloaking-rule
waf link-cloaking link-cloaking-policy
waf machine-learning url-replacer-rule/policy
waf machine-learning-policy
waf mitb-policy
waf mitb-rule
waf mobile-api-protection
waf openapi-file
waf openapi-validation-policy
waf padding-oracle
waf parameter-validation-rule
waf signature
waf signature_update_policy
waf site-publish-helper authentication-server-pool
waf site-publish-helper form-based-delegation
waf site-publish-helper policy
waf site-publish-helper rule
waf staged_signature_list
waf syntax-based-attack-detection
waf threshold-based-detection
waf url-access url-access-policy
waf url-encryption
waf url-access-parameter
waf url-access url-access-rule
waf url-rewrite url-rewrite-policy
waf url-rewrite url-rewrite-rule
waf user-tracking policy
waf user-tracking rule
waf web-cache-exception
waf web-cache-rule
waf web-protection-profile inline-protection
waf web-protection-profile offline-protection
waf webshell-detection-policy
waf websocket-security rule
waf websocket-security policy
waf ws security
waf x-forwarded-for
waf xml-exempted-urls
waf xml-schema
waf xml-validation
waf xml-wsdl
wvs limit
wvs policy
wvs profile
wvs schedule
wvs template
diagnose
debug
debug application
debug cli
debug cmdb
debug comlog
debug console timestamp
debug coredumplog
debug crashlog
debug daemonlog
debug dnsproxy list
debug emerglog
debug flow filter
debug flow filter module-detail
debug flow reset
debug flow trace
debug info
debug init
debug jemalloc-heap
debug kernlog
debug netstatlog
debug proxy log
debug reset
debug trace report
debug trace tcpdump
debug upload
hardware bypass info
hardware check
hardware cpld info
hardware cpu
hardware fail-open
hardware harddisk
hardware interrupts
hardware logdisk info
hardware mem
hardware nic
hardware raid list
hardware raid-card info
index
log
network arp
network ip
network route
network rtcache
network sniffer
network tcp list
network udp list
policy
system endpoint-control
system flash
system ha backup-config
system ha confd_status
system ha dev-info
system ha export-eventlog
system ha file-log
system ha file-stat
system ha interface-macinfo
system ha mac
system ha md5fixed
system ha md5sum-gen
system ha nodes
system ha sessions_stat
system ha status
system ha sync-config
system ha sync-stat
system ha traffic-distribution
system jeprof
system kill
system mount
system top
system update info
test application
execute
backup cert-config
backup cli-config
backup full-config
backup full-config-with-ML-data
backup web-protection-profile
batch
create-raid level
create-raid rebuild
date
db rebuild
dnscache-cleanup
erase-disk
factoryreset
fctems
fdnserver delete
fdnserver show
formatlogdisk
ha disconnect
ha manage
ha md5sum
ha synchronize
icap-cache-clear
ping
ping6
ping-options
ping6-options
reboot
redis rebuild
remove vmlicense
restore cert-config
restore config
restore image
restore secondary-image
restore vmlicense
sandbox-cache-clear
session-cleanup
shutdown
telnet
telnettest
time
traceroute
update-now
get
system fortisandbox-statistics
system performance
system status
waf predefined-global-allow-list
waf signature-rules
show