Enable/disable HTTPS login page when PKI is enabled. The following options are available:

• disable: Admin users can login by providing a valid certificate or password.
• enable: Admin users have to provide a valid certificate when PKI is enabled for HTTPS admin access.

When both set clt-cert-req and set admin-https-pki-required are enabled, only PKI administrators can connect to the FortiManager GUI.

Set the lockout duration (seconds) for FortiManager administration. Default: 60

Set the lockout threshold for FortiManager administration. Range: 1 to 10. Default: 3

Set the ADOM mode: advanced or normal.

Auto delete features for old ADOM revisions:

• by-days: Auto delete ADOM revisions by maximum days.
• by-revisions: Auto delete ADOM revisions by maximum number of revisions.
• disable: Disable auto delete function for ADOM revision.

The maximum number of ADOM revisions to backup.

The maximum number of days to keep old ADOM revisions.

The maximum number of ADOM revisions to keep.

Enable/disable administrative domains (ADOMs). Default: disable

Enable/disable a pop-up window that allows administrators to select an ADOM after logging in. Default: enable

Enable or disable device auto registration by log message.

Enable/disable requiring a client certificate for GUI login. The following options are available:

• disable: Disable setting.
• enable: Require client certificate for GUI login.

When both set clt-cert-req and set admin-https-pki-required are enabled, only PKI administrators can connect to the FortiManager GUI.

Select how the output is displayed on the console. Select more to pause the output at each full screen until keypress. Select standard for continuous output without pauses. The following options are available:

• more: More page output.
• standard: Standard output (default)

Enable/disable create revision by default. The following options are available:

• disable: Disable create revision by default.
• enable: Enable create revision by default.

Enable/disable daylight saving time.

If you enable daylight saving time, the FortiManager unit automatically adjusts the system time when daylight saving time begins or ends.

Default: enable

Default disk quota (MB) for registered device. Range: 100 to 100 000 (MB).

Enable/disable unregistered log device detection.

Enable/disable FortiAnalyzer features in FortiManager. This command is not available on the FMG-100C.

Set the lowest SSL protocols for fgfmsd. Default: tlsv1.0

Set SSL communication encryption algorithms. The following options are available:

• high: SSL communication using high encryption algorithms.
• low: SSL communication using all available encryption algorithms.
• medium: SSL communication using high and medium encryption algorithms.

Default: default

FortiManager host name.

GUI language. The following options are available:

• english: English (default)
• japanese: Japanese
• simch: Simplified Chinese
• trach: Traditional Chinese

LDAP cache timeout, in seconds. Default: 86400

LDAP connection timeout (in milliseconds). Default: 60000

Set the 6-digit PIN administrators must enter to use the LCD panel.

Enable/disable the ADOM lock override.

Record log file hash value, timestamp, and authentication code at transmission or rolling. The following options are available:

• md5: Record log file’s MD5 hash value only
• md5-auth: Record log file’s MD5 hash value and authentication code
• none: Do not record the log file checksum

Set the maximum log forwarding and aggregation number, from 5 to 20.

Maximum running reports number. Range: 1 to 10

Set the lowest SSL protocols for oftpd. Default: tlsv1.0

Enable/disable partial install (install only some objects).

Use this command to enable pushing individual objects of the policy package down to all FortiGates in the Policy Package.

Once enabled, in the GUI you can right-click an object and choose to install it.

Enable/disable partial install revision.

Enable/disable show policy hit count. Default: disable

The policy hit count is the number of sessions that match to a firewall policy on a FortiGate. When policy-hit-count is enabled, it collects all hits from all managed FortiGate devices. FortiManager sums up all hit counts for each policy package from the assigned FortiGate devices, and displays the hit count for each of the firewall rules.

Enable/disable show policies and objects in dual pane. Default: disable

Enable/disable pre-login banner.

Set the pre-login banner message.

Remote authentication (RADIUS/LDAP) timeout (in seconds). Default: 10

Enable/disable search all ADOMs for where-used queries.

Enable/disable SSL low-grade (40-bit) encryption. Default: enable

Set the SSL protocols: tlsv1 or sslv3.

Enable/disable virtual memory.

Set the maximum number of completed tasks to keep. Default: 2000

The time zone for the FortiManager unit. Default: (GMT-8)Pacific Time(US & Canada)

Set the maximum transportation unit, from 68 to 9000. Default: 1500

Enable to contact FortiGuard servers only in the USA. Disable to contact any FortiGuard server.

Enable/disable VDOM mirror. Once enabled in the CLI, you can select to enable VDOM Mirror when editing a virtual domain in the System > Virtual Domain device tab in Device Manager. You can then add devices and VDOMs to the list so they may be mirrored. A icon is displayed in the Mirror column of this page to indicate that the VDOM is being mirrored to another device/VDOM.

When changes are made to the master device’s VDOM database, a copy is applied to the mirror device’s VDOM database. A revision is created and then installed to the devices.

Default: disable

VDOM mirror is intended to be used by MSSP or enterprise companies who need to provide a backup VDOM for their customers.

Web Service connection: tlsv1, sslv3, or sslv2.

Maximum number of workflow sessions per ADOM. Range: 100 to 1000. Default: 500

(GMT+3:00) Nairobi

(GMT+3:30) Tehran

(GMT+4:00) Abu Dhabi, Muscat

(GMT+4:00) Baku

(GMT+4:30) Kabul

(GMT+5:00) Ekaterinburg

(GMT+5:00) Islamabad, Karachi,Tashkent

(GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi

(GMT+5:45) Kathmandu

(GMT+6:00) Almaty, Novosibirsk

(GMT+6:00) Astana, Dhaka

(GMT+6:00) Sri Jayawardenapura

(GMT+6:30) Rangoon

(GMT+7:00) Bangkok, Hanoi, Jakarta

(GMT+7:00) Krasnoyarsk

(GMT+8:00) Beijing,ChongQing, HongKong,Urumqi

(GMT+8:00) Irkutsk, Ulaanbaatar

(GMT+8:00) Kuala Lumpur, Singapore

(GMT+8:00) Perth

(GMT+8:00) Taipei

(GMT+9:00) Osaka, Sapporo, Tokyo, Seoul

(GMT+9:00) Yakutsk

(GMT+9:30) Adelaide

(GMT+9:30) Darwin

(GMT+10:00) Brisbane

(GMT+10:00) Canberra, Melbourne, Sydney

(GMT+10:00) Guam, Port Moresby

(GMT+10:00) Hobart

(GMT+10:00) Vladivostok

(GMT+11:00) Magadan

(GMT+11:00) Solomon Is., New Caledonia

(GMT+12:00) Auckland, Wellington

(GMT+12:00) Fiji, Kamchatka, Marshall Is

(GMT+13:00) Nuku'alofa

(GMT-4:30) Caracas

(GMT+1:00) Namibia

(GMT-5:00) Brazil-Acre)

(GMT-4:00) Brazil-West

(GMT-3:00) Brazil-East