Fortigate Command Line Cheat Sheet

fortigate_basic_cheat_sheet.txt

# get basic system informaton (including version)
get system status

# overview of hardware interfaces
get system interface physical      

# details of a single network interface,
get hardware nic <nic-name>          

# kind of hidden command to see more  interface stats such as errors
fnsysctl ifconfig <nic-name>

# CPU and network usage
get system performance status

# power supply, temperature, fans
execute sensor list
execute sensor detail

# top with all forked processed
diagnose sys top

# top easier, incl. CPU and mem bars. Forks are displayed by [x13] or whatever
diagnose sys top-summary

execute dhcp lease-list

get system arp

diagnose ip arp list

diagnose ipv6 address list

diagnose ipv6 neighbor-cache list

diagnose sys ntp status

# lists the attack definition versions, last update, etc.
diagnose autoupdate versions

# generated all possibe log entries
diagnose log test

# shows the IP addresses of FQDN objects
diagnose test application dnsproxy 6

# shows crashlog, a status of 0 indicates a normal close of a process!
diagnose debug crashlog read

# reboot
execute reboot


# high avaibilbilty basics
# ------------------------
get system ha status

diagnose sys ha status

# switch to the CLI of a secondary unit
execute ha manage ?

execute ha manage <device-index>

# verify the checksum of all synchronized
diagnose sys ha checksum show

# test failover
execute ha set-priority <serial-number> <new-priority>

fortigate_helpful_URLs.txt

# HelpFull URL's
https://weberblog.net/cli-commands-for-troubleshooting-fortigate-firewalls/
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/c287b6bf-#a995-11e9-81a4-00505692583a/FortiOS-6.0.12-CLI_Reference.pdf
https://ipwithease.com/wp-content/uploads/2020/07/FORTINET-FORTIGATE-CLI-CHEATSHEET.pdf