Steps to implement an automated config backup solution for your FortiGate with Wasabi Cloud for 6.99$/month
- Create an account on wasabi cloud https://wasabi.com/fr.
- Create a bucket and activate the versioning.
- Activate the FTP/FTPS protocol in Wasabi
- Configure your FortiGate CLI config backup over FTP command
- Configure Your automation Trigger
- Configure Your automation Action
- Configure Your automation Stitch
FortiGate CLI config backup over FTP command
You can connect over FTP/FTPS to your Wasabi S3 Bucket with your account credentials. In paid plan you can create sub-user with FTP/FTPS access.
To connect to your Wasabi S3 Bucket over FTP you need :
- The region where the bucket is created here is eu-west-2
- The name of the Bucket, here is backup_fortigate
- Your username/email & password of your Wasabi account here is fortigate@gitbook.deddy.me
You can connect to your Bucket with a FTP’s client https://winscp.net or https://filezilla-project.org with this configuration :
- Host : s3.<wasabi_bucket_region>.wasabisys.com ⇒ s3.eu-west-2.wasabisys.com
- Username : The Wasabi account email => fortigate@gitbook.deddy.me
- Password : The Wasabi account password => superStrongPassword
Build the FortiGate CLI Command
execute backup full-config ftp <bucket_name>/fortigate_01_config [s3.<](http://s3.eu-west-2.wasabisys.com:21/)wasabi_bucket_region>.wasabisys.[com:21](http://s3.eu-west-2.wasabisys.com:21/) <ftp_username/email> <ftp_password>
The complete FortiGate CLI Command
execute backup full-config ftp backup_fortigate/fortigate_01_config [s3.](http://s3.eu-west-2.wasabisys.com:21/)eu-west-2.wasabisys.[com:21](http://s3.eu-west-2.wasabisys.com:21/) fortigate@gitbook.deddy.me superStrongPassword
Wasabi Cloud Active the FTP/FTPS protocol in the settings
Create a Trigger in Security Fabric > Automation > Trigger
Each day the script will be executed.
Create an action in Security Fabric > Automation > Action
Create a Stitch on Security Fabric > Automation > Stitch
How to monitor that Fortigate backups are up to date ?
You can implement a solution that monitors the last modification date of files either via the AWS S3 SDK JS library. See