Global settings - CLI
The following table lists commands in the web-based manager that are considered global settings when VDOMs are enabled.
From a super_admin profile account, use this command to configure features that apply to the complete FortiGate unit including all virtual domains. Virtual domain configuration (vdom-admin) must be enabled first.
This command syntax shows how you access the commands within config global. For information on these commands, refer to the relevant sections in this Reference. If there are multiple versions of the same command with a “2” or “3” added, the additional commands are not listed but fall under the unnumbered command of the same name.
config global
config antivirus heuristic
config antivirus service
config application name
config dlp settings
config endpoint-control forticlient-registration-sync
config firewall ssl
config firewall ipv6-eh-filter
config gui console
config ips decoder
config ips global
config ips rule
config log fortianalyzer setting
config log fortianalyzer2 setting
config log fortianalyzer3 setting
config log fortiguard setting
config log syslogd setting
config log syslogd2 filter
config log syslogd2 setting
config log syslogd3 filter
config log syslogd3 setting
config log webtrends filter
config log webtrends setting
config spamfilter fortishield
config spamfilter options
config system accprofile
config system admin
config system auto-install
config system autoupdate push-update
config system autoupdate schedule
config system autoupdate tunneling
config system central-management
config system console
config system custom-language
config system ddns
config system dialinsvr
config system dns
config system dscp-based-priority
config system email-server
config system fips-cc
config system fortiguard
config system fortisandbox
config system fsso-polling
config system geoip-override
config system global
config system ha
config system interface
config system ips-urlfilter-dns
config system netflow
config system npu
config system ntp
config system password-policy
config system probe-response
config system replacemsg admin <msg-type>
config system replacemsg alertmail <msg-type>
config system replacemsg auth <msg-type>
config system replacemsg device-detection-portal <msg-type>
config system replacemsg ec <msg-type>
config system replacemsg fortiguard-wf <msg-type>
config system replacemsg ftp <msg-type>
config system replacemsg http <msg-type>
config system replacemsg im <msg-type>
config system replacemsg mail <msg-type>
config system replacemsg nac-quar <msg-type>
config system replacemsg nntp <msg-type>
config system replacemsg spam <msg-type>
config system replacemsg sslvpn <msg-type>
config system replacemsg traffic-quota <msg-type>
config system replacemsg utm <msg-type>
config system replacemsg webproxy <msg-type>
config system replacemsg-image
config system resource-limits
config system session-helper
config system session-sync
config system sflow
config system sms-server
config system snmp community
config system snmp sysinfo
config system snmp user
config system storage
config system stp
config system switch-interface
config system tos-based-priority
config system vdom-link
config system vdom-property
config system vdom-radius-server
config vpn certificate ca
config vpn certificate crl
config vpn certificate local
config vpn certificate remote
config wanopt storage
config webfilter fortiguard
config webfilter ips-urlfilter-cache-setting
config wireless-controller global
config wireless-controller timers
config wireless-controller vap
execute backup config flash <comment>
execute backup config ftp <string>
execute backup config management-station <comment>
execute backup config tftp <string>
execute backup config usb <string>
execute backup config usb-mode <enter>|<password>
execute backup config-with-forticlient-info ftp <string>
execute backup config-with-forticlient-info tftp <string>
execute backup config-with-forticlient-info usb <string>
execute backup config-with-forticlient-info usb-mode <enter>|<password>
execute backup full-config ftp <string>
execute backup full-config tftp <string>
execute backup full-config usb <string>
execute backup full-config usb-mode <enter>|<password>
execute batch end
execute batch lastlog
execute batch start
execute batch status
execute central-mgmt register-device <fmg-serial-no>
execute central-mgmt set-mgmt-id <management id>
execute central-mgmt unregister-device <fmg-serial-no>
execute cfg reload
execute cfg save
execute cli check-template-status
execute cli status-msg-only <enable/disable>
execute date <yyyy-mm-dd>
execute disconnect-admin-session <integer>
execute disk format <integer>
execute disk list
execute disk scan <integer>
execute enter <name>
execute erase-disk
execute extender delete-fortiextender-image
execute extender list-fortiextender-image
execute extender push-fortiextender-image
execute extender restart-fortiextender-daemon
execute extender upload-fortiextender-image
execute factoryreset
execute factoryreset2
execute formatlogdisk
execute forticlient info
execute forticlient list <enter or ALL>|<type>
execute fortiguard-log certificate-activation
execute fortiguard-log update
execute fortiguard-message add <activation code>
execute fortiguard-message info
execute fortiguard-message update
execute ha ignore-hardware-revision <disable/enable>
execute ha ignore-hardware-revision status
execute log fortianalyzer test-connectivity arg
execute log fortiguard
execute policy-packet-capture delete-all
execute reboot
execute restore av ftp <string>
execute restore av tftp <string>
execute restore config dhcp <port>
execute restore config flash <revision>
execute restore config ftp <string>
execute restore config management-station normal <revision>
execute restore config management-station script <revision>
execute restore config management-station template <revision>
execute restore config tftp <string>
execute restore config usb <string>
execute restore config usb-mode <Enter>|<passwd>
execute restore image flash <revision>
execute restore image ftp <string>
execute restore image management-station <revision>
execute restore image tftp <string>
execute restore image usb <string>
execute restore ips ftp <string>
execute restore ips tftp <string>
execute restore secondary-image ftp <string>
execute restore secondary-image tftp <string>
execute restore secondary-image usb <string>
execute restore src-vis ftp <string>
execute restore src-vis tftp <string>
execute restore vcm ftp <string>
execute restore vcm tftp <string>
execute revision delete config <revision>
execute revision delete image <revision>
execute revision list config
execute revision list image
execute router restart
execute send-fds-statistics
execute set system session filter clear all
execute set system session filter clear dport
execute set system session filter clear dst
execute set system session filter clear duration
execute set system session filter clear expire
execute set system session filter clear policy
execute set system session filter clear proto
execute set system session filter clear sport
execute set system session filter clear src
execute set system session filter clear vd
execute set system session filter dport <0-65535>
execute set system session filter dst <xxx.xxx.xxx.xxx>
execute set system session filter duration <xxx>
execute set system session filter expire <xxx>
execute set system session filter list
execute set system session filter negate dport
execute set system session filter negate dst
execute set system session filter negate duration
execute set system session filter negate expire
execute set system session filter negate policy
execute set system session filter negate proto
execute set system session filter negate sport
execute set system session filter negate src
execute set system session filter negate vd
execute set system session filter policy <xxx>
execute set system session filter proto <0-255>
execute set system session filter sport <0-65535>
execute set system session filter src <xxx.xxx.xxx.xxx>
execute set system session filter vd <xxx>
execute set-next-reboot <primary/secondary>
execute sfp-mode-sgmii <port>
execute shutdown
execute system custom-language import <string>
execute system fortisandbox test-connectivity
execute tac report
execute time <hh:mm:ss>
execute update-av
execute update-geo-ip
execute update-ips
execute update-list
execute update-netscan
execute update-now
execute update-src-vis
execute upload config ftp <string>
execute upload config tftp <string>
execute upload config usb <string>
execute upload image ftp <string>
execute upload image tftp <string>
execute upload image usb <string>
execute usb-device disconnect
execute usb-device list
execute usb-disk delete <filename>
execute usb-disk format
execute usb-disk list
execute usb-disk rename <old>
execute vpn certificate ca export tftp <string>
execute vpn certificate ca import auto <string>
execute vpn certificate ca import tftp <string>
execute vpn certificate crl import auto <string>
execute vpn certificate local export tftp <string>
execute vpn certificate local generate default-ssl-ca
execute vpn certificate local generate default-ssl-serv-key
execute vpn certificate local generate ec <string>
execute vpn certificate local generate rsa <string>
execute vpn certificate local import tftp <string>
execute vpn certificate remote export tftp <string>
execute vpn certificate remote import tftp <string>
execute wireless-controller delete-wtp-image
execute wireless-controller list-wtp-image
execute wireless-controller restart-acd
execute wireless-controller upload-wtp-image ftp <string>
execute wireless-controller upload-wtp-image tftp <string>
end
See also