NCM and Fortigate

deverts

We manage 100s of Fortigate devices and the config change reports are full of false-positives that I need to clean up. Is anyone else struggling to get these RegEx configlets working in the comparison criteria?

Certificate block - ^.set private-key .$

Config file - ^#config_file_ver=.*$

Enc Passwords - ^.set password ENC .$

deverts

Hi everyone,

I figured this out. I used the following RegEx statements to "clean-up" the reporting and remove the false-positive.

ForgtiGate Encrypted Passwd — .*set passwd ENC .*$

FortiGate Certificate Block — ^.*set private-key .*$

FortiGate Config File Version — ^#conf_file_ver=.*$

FortiGate Encrypted Key — ^\s*set key ENC .*$

FortiGate Encrypted Passwords — ^\s*set password ENC .*$

FortiGate Encrypted PSKSECRET — .*set psksecret ENC .*$

FortiGate Encrypted Secrets — .*set secret ENC .*$