SheynShield: “🛡 FortiGate Backup, Restore & Factory Reset FortiOS CLI Quick Referen…”

🛡 FortiGate Backup, Restore & Factory Reset

FortiOS CLI Quick Reference
Backup • Restore • Configuration Revision • YAML • Logs • IPS Signatures • Certificates • Factory Reset

اگر قبل از یک تغییر مهم روی FortiGate دنبال یک Recovery Point هستید، این Commandها و نکات را حتماً داشته باشید. 👇
🔹 1. Standard Configuration Backup

execute backup config

برای گرفتن Backup معمولی از Configuration.
🔹 2. Full Configuration Backup

execute backup full-config

⚠️ config و full-config را یکی در نظر نگیرید.

execute backup config
        ↓
Standard Configuration Backup

execute backup full-config
        ↓
More Complete Configuration / Recovery Data

🔹 3. YAML Configuration
Backup:

execute backup yaml-config tftp fgt.yml 192.168.254.254

Restore:

execute restore yaml-config tftp fgt.yml 192.168.254.254

⚠️ هنگام کار با YAML، Configuration Metadata Headers را حذف نکنید.

#config-version=...
#conf_file_ver=...
#buildno=...
#global_vdom=...

🔹 4. Configuration Revision
ایجاد Revision روی Flash:

execute backup config flash test

Restore یک Revision:

execute restore config flash 2

Diff vs Revert

Diff
 ↓
Compare Configurations

Revert
 ↓
Rollback to Previous Configuration

💡 Diff قبل از Revert یک Rule بسیار مهم برای عملیات واقعی است.
🔹 5. Central Management Backup

execute backup config management-station

برای Backup Configuration به Management Station در سناریوهای Central Management.
🔹 6. Log Backup
Disk:

execute backup disk alllogs
execute backup disk ipsarchive
execute backup disk log

Memory:

execute backup memory alllogs
execute backup memory log

🔹 7. Custom IPS Signatures
FTP:

execute backup ipsuserdefsig ftp

TFTP:

execute backup ipsuserdefsig tftp

اگر Custom IPS Signature دارید، آن را بخشی از مجموعه Recovery خود در نظر بگیرید.
🔹 8. Certificate Export
Example:

execute vpn certificate local export tftp \
fortinet_ca_ssl cer cassl.cer 192.168.254.254

قبل از Reset یا Migration، Certificateهای موردنیاز را فراموش نکنید.
⚠️ Factory Reset
Factory Reset یک عملیات HIGH-RISK / DESTRUCTIVE است.
قبل از اجرای آن:

☑️ Configuration Backup
☑️ Full Backup if required
☑️ Certificates
☑️ Custom IPS Signatures
☑️ Required Logs
☑️ FortiOS Version
☑️ Console / OOB Access
☑️ Post-Reset Access Plan

🔥 Factory Reset Commands
Reset + Reboot

execute factoryreset

Reset + Shutdown

execute factoryresetshutdown

Selective / Specific Reset Behavior

execute factoryreset2

⚠️ factoryreset2 را صرفاً به‌عنوان یک نام دیگر برای factoryreset حفظ نکنید؛ رفتار و Configuration Areas تحت تأثیر آن متفاوت است و باید با Release موردنظر بررسی شود.
🧠 NSE Exam Traps
1️⃣ Backup

config ≠ full-config

2️⃣ YAML

Metadata Headers
        ↓
DO NOT DELETE

3️⃣ Revision

Diff   → Compare
Revert → Rollback

4️⃣ Restore
قبل از Restore Configuration بررسی کنید:

MODEL
  +
FORTIOS VERSION
  +
VDOM / OPERATION MODE
  +
CONFIGURATION COMPATIBILITY

5️⃣ Factory Reset

factoryreset
      ↓
Reset + Reboot

factoryresetshutdown
      ↓
Reset + Shutdown

factoryreset2
      ↓
Different / Selective Reset Behavior

⚡️ One-Minute CLI Recall

# Backup
execute backup config
execute backup full-config

# YAML
execute backup yaml-config tftp fgt.yml 192.168.254.254
execute restore yaml-config tftp fgt.yml 192.168.254.254

# Revision
execute backup config flash test
execute restore config flash 2

# Management
execute backup config management-station

# Logs
execute backup disk alllogs
execute backup disk ipsarchive
execute backup disk log
execute backup memory alllogs
execute backup memory log

# IPS
execute backup ipsuserdefsig ftp
execute backup ipsuserdefsig tftp

# Factory Reset
execute factoryreset
execute factoryresetshutdown
execute factoryreset2

🔥 Golden Rule