config system csf
Add this FortiGate to a Security Fabric or set up a new Security Fabric on this FortiGate.
config system csf
Description: Add this FortiGate to a Security Fabric or set up a new Security Fabric on this FortiGate.
set accept-auth-by-cert [disable|enable]
set authorization-request-type [serial|certificate]
set certificate {string}
set configuration-sync [default|local]
set downstream-access [enable|disable]
set downstream-accprofile {string}
config fabric-connector
Description: Fabric connector configuration.
edit <serial>
set serial {string}
set accprofile {string}
set configuration-write-access [enable|disable]
next
end
config fabric-device
Description: Fabric device configuration.
edit <name>
set name {string}
set device-ip {ipv4-address}
set https-port {integer}
set access-token {varlen_password}
next
end
set fabric-object-unification [default|local]
set fabric-workers {integer}
set forticloud-account-enforcement [enable|disable]
set group-name {string}
set group-password {password}
set log-unification [disable|enable]
set saml-configuration-sync [default|local]
set status [enable|disable]
config trusted-list
Description: Pre-authorized and blocked security fabric nodes.
edit <name>
set name {string}
set authorization-type [serial|certificate]
set serial {string}
set certificate {var-string}
set action [accept|deny]
set ha-members {string}
set downstream-authorization [enable|disable]
next
end
set upstream {string}
set upstream-port {integer}
end
config system csf
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
accept-auth-by-cert |
Accept connections with unknown certificates and ask admin for approval. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
authorization-request-type |
Authorization request type. |
option |
- |
serial |
||||||
|
|
|
|||||||||
|
certificate |
Certificate. |
string |
Not Specified |
|
||||||
|
configuration-sync |
Configuration sync mode. |
option |
- |
default |
||||||
|
|
|
|||||||||
|
downstream-access |
Enable/disable downstream device access to this device's configuration and data. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
downstream-accprofile |
Default access profile for requests from downstream devices. |
string |
Not Specified |
|
||||||
|
fabric-object-unification |
Fabric CMDB Object Unification. |
option |
- |
default |
||||||
|
|
|
|||||||||
|
fabric-workers |
Number of worker processes for Security Fabric daemon. |
integer |
Minimum value: 1 Maximum value: 4 |
2 |
||||||
|
forticloud-account-enforcement |
Fabric FortiCloud account unification. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
group-name |
Security Fabric group name. All FortiGates in a Security Fabric must have the same group name. |
string |
Not Specified |
|
||||||
|
group-password |
Security Fabric group password. All FortiGates in a Security Fabric must have the same group password. |
password |
Not Specified |
|
||||||
|
log-unification |
Enable/disable broadcast of discovery messages for log unification. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
saml-configuration-sync |
SAML setting configuration synchronization. |
option |
- |
default |
||||||
|
|
|
|||||||||
|
status |
Enable/disable Security Fabric. |
option |
- |
disable |
||||||
|
|
|
|||||||||
|
upstream |
IP/FQDN of the FortiGate upstream from this FortiGate in the Security Fabric. |
string |
Not Specified |
|
||||||
|
upstream-port |
The port number to use to communicate with the FortiGate upstream from this FortiGate in the Security Fabric. |
integer |
Minimum value: 1 Maximum value: 65535 |
8013 |
||||||
config fabric-connector
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
serial |
Serial. |
string |
Not Specified |
|
||||||
|
accprofile |
Override access profile. |
string |
Not Specified |
|
||||||
|
configuration-write-access |
Enable/disable downstream device write access to configuration. |
option |
- |
disable |
||||||
|
|
|
|||||||||
config fabric-device
|
Parameter |
Description |
Type |
Size |
Default |
|---|---|---|---|---|
|
name |
Device name. |
string |
Not Specified |
|
|
device-ip |
Device IP. |
ipv4-address |
Not Specified |
0.0.0.0 |
|
https-port |
HTTPS port for fabric device. |
integer |
Minimum value: 1 Maximum value: 65535 |
443 |
|
access-token |
Device access token. |
varlen_password |
Not Specified |
|
config trusted-list
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
name |
Name. |
string |
Not Specified |
|
||||||
|
authorization-type |
Authorization type. |
option |
- |
serial |
||||||
|
|
|
|||||||||
|
serial |
Serial. |
string |
Not Specified |
|
||||||
|
certificate |
Certificate. |
var-string |
Not Specified |
|
||||||
|
action |
Security fabric authorization action. |
option |
- |
accept |
||||||
|
|
|
|||||||||
|
ha-members |
HA members. |
string |
Not Specified |
|
||||||
|
downstream-authorization |
Trust authorizations by this node's administrator. |
option |
- |
disable |
||||||
|
|
|
|||||||||