Check diff for Checkpoint (or other) objects and global objects

migros / fotoobo

The mighty Fortinet toolbox

https://fotoobo.readthedocs.io/

GNU Lesser General Public License v3.0

17 stars 2 forks source link

Check diff for Checkpoint (or other) objects and global objects #37

Closed patrikspiess closed 3 weeks ago

patrikspiess commented 1 year ago

Check if the FortiManager contains objects which are not present in the Checkpoint (or other) export file. The check should generate a report. What happens if we try to delete a FMG global object which is used in an ADOM?

patrikspiess commented 3 weeks ago

We won't do that in fotoobo. Instead we implemented methods in the FortiManager class to support you doing that in your own scripts. See PR #222

Example:

Get all network addresses from FortiManager with get_global_addresses()
Get all network addresses from you "other" system with your own logic
Compare both address lists and generate a diff
Optional: Remove obsolete addresses in Fortimanager with delete_global_address()