Backup for Fortigate devices
Intro
Our ally used to update Fortigate device backups manually, which was time-consuming and error-prone.
Using Ansible Engine, we automated the backup creation process and centralized the backups in a path defined by the client.
Together with our ally, we achieved backups for over 30 Fortigate devices in less than 5 minutes.
The challenge
To reduce the time for updating configuration backups and changes made to Fortigate devices.
Previously, updating backups was done manually, taking time and prone to errors.
Backups must stay up-to-date, as they are crucial for the security of the entire network, avoiding risks such as:
- Plain text usernames and passwords (Visible from the code).
- Actions in the code that deviate from defined functionality.
The path
Automating the backup processes of devices using Ansible Engine generates backups and directs them to a defined path for easy management.
We created Ansible Engine Playbooks responsible for extracting backups from Fortigate devices, ensuring the process is effective. Our ally provided a user with sufficient permissions to perform the activity, which is stored securely in Ansible Vault, ensuring sensitive data remains protected.
We centralized the backups in a path defined by the client, naming them correctly with date tags for subsequent administration.
The Goal
Thanks to Ansible, backups for over 30 Fortigate devices are now generated in less than 5 minutes.
Together with our ally, we achieved backups for over 30 Fortigate devices in less than 5 minutes, ensuring proper functionality with only the equipment’s connectivity and access user as a prerequisite for the task.