Fortinet Extension

Connect a FortiGate device by saving its host and REST API Admin token, after checking they actually work. Create a REST API Admin under System > Administrators in the FortiGate itself.

Connect a FortiManager by saving its host, username, password and ADOM, after checking the login actually works. Session-based login re-authenticates transparently on every call.

Connect a FortiSASE/FortiCloud tenant by saving its API token, after checking it actually works. Create one in FortiCloud under Identity & Access Management > API tokens.

Disconnect and forget a stored FortiGate, FortiManager, or FortiSASE connection.

List all connected FortiGate, FortiManager, and FortiSASE connections.

List firewall policies configured on the connected FortiGate device.

Get one FortiGate firewall policy by id.

Create a new firewall policy on the connected FortiGate device.

Update a FortiGate firewall policy's action and/or enabled status.

Permanently delete a FortiGate firewall policy by id.

Move a FortiGate firewall policy to just before or after another policy in the rule order.

List firewall address objects defined on the connected FortiGate device.

Create a new firewall address object on the connected FortiGate device.

Update a firewall address object's subnet.

Permanently delete a firewall address object by name.

List firewall address groups defined on the connected FortiGate device.

List firewall service objects defined on the connected FortiGate device.

Create a new firewall service object on the connected FortiGate device.

Update a firewall service object's port range.

Permanently delete a firewall service object by name.

List network interfaces on the connected FortiGate device.

Get FortiGate system status: firmware version, serial number, hostname, uptime.

List IPsec and SSL VPN tunnels configured on the connected FortiGate device.

List Administrative Domains (ADOMs) visible on the connected FortiManager.

List FortiGate devices managed by the connected FortiManager, in the configured ADOM.

Get one FortiManager-managed device by name.

List policy packages defined on the connected FortiManager, in the configured ADOM.

List firewall policies inside one FortiManager policy package.

List global (shared) address objects defined on the connected FortiManager.

Create a global (shared) address object on the connected FortiManager.

Update a global (shared) address object on the connected FortiManager.

Permanently delete a global (shared) address object from the connected FortiManager.

List endpoints (managed devices/users) enrolled in the connected FortiSASE tenant.

List SASE access policies configured on the connected FortiSASE tenant.

Create a new SASE access policy on the connected FortiSASE tenant.

Update an existing SASE access policy on the connected FortiSASE tenant.

Permanently delete a SASE access policy from the connected FortiSASE tenant.

List SD-WAN sites configured on the connected FortiSASE tenant.

List recent security events (threats, blocks, anomalies) from the connected FortiSASE tenant.

Enable or disable several FortiGate firewall policies in one call, by explicit policy ids. Continues past per-item failures and reports each outcome, same convention as every other bulk_* tool in the portfolio.

Run a read-only health audit across all connected FortiGate/FortiManager/FortiSASE connections: disabled firewall policies with 'ALL'/'any' access, offline managed devices, expired-looking VPN tunnels, and disconnected endpoints. Same convention as Zscaler Connector's audit_tenant / Cisco Secure Access Connector's audit_secure_access.