Skip to content

Latest commit

 

History

History
57 lines (29 loc) · 1.18 KB

README.md

File metadata and controls

57 lines (29 loc) · 1.18 KB

Forigate-backup

The Forigate backup system. (For Lunix)

The guy overhere (http://www.jfinley.com/) was the one with the orgianl code.

This is a perl script that will log into a ForiGate Firewall and then do magical backup things. I mean the last thing anyone wants now is the backup to vanish.

#Settings & How To

1 – Enable SSH on the Interface you’ll connect to;

  • Config system interface

  • Edit

  • Set allowaccess ping https ssh

  • end

2 – Enable SCP on the Fortigate

  • config system global

  • set admin-scp enable

  • end

3 – Create a READ-ONLY Admin user

  • config system admin

  • edit BACKUP_USER

  • set password XXXXXXX

  • set accprofile Read-Only

  • set trusthost IP_ADDRESS_OF_THE_BOX_SCP

Note: It’s suggested to set the other trusted to be 255.255.255.255/255.255.255.255

TIP: If you change your Fortigate SSH port, adjust the PERL script “port=>22” to the appropriate port as needed.

I have saved this script on the server as foribkup.pl

To run the script I do the following command perl /home/bk/script/forigate/foribkup.pl

[Credit] (http://www.jfinley.com/2013/03/automated-fortigate-configuration-backups-using-scp/)