4/7/2015 FortigateCLI::ComandostilesI

http://stackfire.com/fortigateclicomandosutilesi/ 1/3

(http://stackfire.com)

Blog

FortigateCLI::ComandostilesI(http://stackfire.com/fortigateclicomandosutilesi/)Bysoporte(http://stackfire.com/author/soporte/)

octubre16,2014

0comments(http://stackfire.com/fortigateclicomandosutilesi/#respond)

Fortinet(http://stackfire.com/category/fortinet/),SeguridadInformtica(http://stackfire.com/category/seguridadinformatica/)

SeguramentetodosconocemoselenlacealadocumentacintcnicadeFortinet:http://docs.fortinet.com,peronosolopodemosencontrarinformacintcnicaenestesitioweb,existenvideos,recursosHTML,etc.quenospuedenservirdeayudayquecomentaremosenesteartculo.

EstaseriedepublicacionestieneelobjetivodeincrementarlainformacindelaterminaldecomandosdelappliancellamadaFortinetCLI.Lossiguienteseslaprimerentregadeunlistadodecomandosgeneralesdegranayudaparatodoslosadministradoresdesistemas.

Mostrarlaconfiguracingeneraldelapplianceyestadodelosmdulos:

Mostrarlasestadsticasdeltrficohastaelmomento:

MostrarelestadodelCPUytiempoprendido:

MostrarelusodelCPUordenadoporlosprocesosdemayorpeso:

MostrarelestadodelmdulodeHighAvailability:

Stackfire(http://stackfire.com)Productos&Servicios(http://stackfire.com/portfolio/)CloudServicesBlog(http://stackfire.com/blog/)Cursos(http://www.stackfire.com)Contacto(http://stackfire.com/contacto/)

myfirewall1 # get sys statusVersion: Fortigate-50B v4.0,build0535,120511 (MR3 Patch 7)Virus-DB: 14.00000(2011-08-24 17:17)Extended DB: 14.00000(2011-08-24 17:09)IPS-DB: 3.00150(2012-02-15 23:15)FortiClient application signature package: 1.529(2012-10-09 10:00)Serial-Number: FGT50B1234567890BIOS version: 04000010Log hard disk: Not availableHostname: myfirewall1Operation Mode: NATCurrent virtual domain: rootMax number of virtual domains: 10Virtual domains status: 1 in NAT mode, 0 in TP modeVirtual domain configuration: disableFIPS-CC mode: disableCurrent HA mode: standaloneDistribution: InternationalBranch point: 234Release Version Information: MR3 Patch 7System time: Thu Nov 15 13:12:30 2012

myfirewall1 # get system performance firewall statisticsgetting traffic statistics...Browsing: 544083 packets, 80679942 bytesDNS: 19333 packets, 2400831 bytesE-Mail: 52 packets, 3132 bytesFTP: 0 packets, 0 bytesGaming: 0 packets, 0 bytesIM: 0 packets, 0 bytesNewsgroups: 0 packets, 0 bytesP2P: 0 packets, 0 bytesStreaming: 0 packets, 0 bytesTFTP: 0 packets, 0 bytesVoIP: 0 packets, 0 bytesGeneric TCP: 13460 packets, 1301879 bytesGeneric UDP: 7056 packets, 647156 bytesGeneric ICMP: 172 packets, 11804 bytesGeneric IP: 26 packets, 832 bytes

12345678910

myfirewall1 # get system performance statusCPU states: 0% user 0% system 0% nice 100% idleCPU0 states: 0% user 0% system 0% nice 100% idleMemory states: 48% usedAverage network usage: 1 kbps in 1 minute, 0 kbps in 10 minutes, 0 kbps in 30 minutesAverage sessions: 0 sessions in 1 minute, 0 sessions in 10 minutes, 0 sessions in 30 minutesAverage session setup rate: 0 sessions per second in last 1 minute, 0 sessions per second in last 10 minutes, 0 sessions per second in last 30 minutesVirus caught: 0 total in 1 minuteIPS attacks blocked: 0 total in 1 minuteUptime: 24 days, 11 hours, 25 minutes

1234567891011121314151617181920212223

myfirewall1 # get system performance topRun Time: 24 days, 11 hours and 26 minutes0U, 0S, 100I; 249T, 119F, 60KFinitXXXXXXXXXXX 1 S 0.0 4.5cmdbsvr 23 S 0.0 6.8zebos_launcher 27 S 0.0 4.7uploadd 28 S 0.0 4.6miglogd 29 S 0.0 5.9miglogd 30 S 0.0 4.6httpsd 31 S 0.0 7.0nsm 32 S 0.0 1.1ripd 33 S 0.0 0.9ripngd 34 S 0.0 0.9ospfd 35 S 0.0 0.9proxyd 36 S 0.0 4.6wad_diskd 37 S 0.0 4.6scanunitd 38 S < 0.0 4.9ospf6d 39 S 0.0 0.9bgpd 40 S 0.0 1.0isisd 41 S 0.0 0.9proxyacceptor 42 S 0.0 0.7proxyworker 43 S 0.0 1.8getty 44 S < 0.0 4.6

12345678910

myfirewall1 # get sys ha statusModel: 311Mode: a-pGroup: 0Debug: 0ses_pickup: enableMaster:254 myfirewall1 FG311B1111111111 0Slave :128 myfirewall2 FG311B1111111112 1number of vcluster: 1vcluster 1: work 10.0.0.1

4/7/2015 FortigateCLI::ComandostilesI

http://stackfire.com/fortigateclicomandosutilesi/ 2/3

VerificarlatabladesesionesdelFirewall:

Lasiguientelistatieneunasolasesin,quepuedeserunasolicituddeDNSde192.168.227.97a.theservidordns65.39.139.53:

Aunqueesdemuchomayorutilidadsiseutilizaunfiltroparabuscarunasesinenparticular:

Documentosaadidosoactualizadosrecientemente

EstossonlosdocumentosquesehanincorporadooaadidoenelWebSitededocumentacin(http://docs.fortinet.com(http://docs.fortinet.com/)):

FortiGate/FortiOSWhatsNewforFortiOS5.2(http://docs.fortinet.com/uploaded/files/1912/fortigatewhatsnew52patch1.pdf)(Actualizado)FortiOS5.2.1MaximumValuesTables(http://docslegacy.fortinet.com/fgt/handbook/52/521/maxvalues/maxvalues.html)(Actualizado)FortiAnalyzerFortiAnalyzer3900EQuickStartGuide(http://docs.fortinet.com/uploaded/files/2130/FortiAnalyzer3900EQuickStart%20%20Online.pdf)(Nuevo)FortiAnalyzer3500EQuickStartGuide(http://docs.fortinet.com/uploaded/files/2129/FortiAnalyzer3500EQuickStart%20%20online.pdf)(Nuevo)FortiAnalyzer5.0.8Datasets(http://docs.fortinet.com/uploaded/files/2126/FortiAnalyzer_Dataset_Dictionary.pdf)(Nuevo)FortiAnalyzer5.2.0CLIReference(http://docs.fortinet.com/uploaded/files/2090/fortianalyzercli520.pdf)(Actualizado)FortiAnalyzer5.0.6CLIReference(http://docs.fortinet.com/uploaded/files/1772/FortiAnalzyer506CLIReference.pdf)(Actualizado)FortiManagerFortiManager5.2.0AdministrationGuide(http://docs.fortinet.com/d/fortimanager5.2.0administrationguide)(Nuevo)FortiManager5.2.0CLIReference(http://docs.fortinet.com/uploaded/files/2089/fortimanagercli520.pdf)(Actualizado)VMInstallGuideforVMware(http://docs.fortinet.com/uploaded/files/1128/FortiManagerVMVMwareInstallGuide.pdf)(Nuevo)FortiManager5.0.7CLIReference(http://docs.fortinet.com/uploaded/files/2000/fortimanagercli507.pdf)(Actualizado)FortiManager5.0.6CLIReference(http://docs.fortinet.com/uploaded/files/1771/FortiManager506CLIReference.pdf)(Actualizado)FortiClientFortiClient(Windows)5.2.1AdministrationGuide(http://docs.fortinet.com/uploaded/files/1975/forticlientadmin52.pdf)(Nuevo)FortiClient(MacOSX)5.2.1AdministrationGuide(http://docs.fortinet.com/uploaded/files/1976/forticlientadmin52.pdf)(Nuevo)FortiClient(Android)5.2.3UserGuide(http://docs.fortinet.com/uploaded/files/1961/forticlientandroiduserguidev52.pdf)(Actualizado)FortiClientVPN(Android)5.2.3UserGuide(http://docs.fortinet.com/d/forticlientvpnandroid5.2userguide)(Actualizado)

FortiMailWhatsNewforFortiMail5.2.0(http://docs.fortinet.com/uploaded/files/2105/fortimailwhatsnew520.pdf)(Nuevo)FortiMail5.2.0AdministrationGuide(http://docs.fortinet.com/uploaded/files/2093/fortimailadmin520.pdf)(Actualizado)

FortiWebFortiWebVM5.3InstallGuide(http://docs.fortinet.com/uploaded/files/1973/FortiWebVM_5_3_Install_Guide_Revision2.pdf)(Actualizado)FortiWeb5.3AdministrationGuide(HTML)(http://docslegacy.fortinet.com/fweb/admin_hlp/530/index.html)(Actualizado)

FortiWeb5.3AdministrationGuide(PDF)(http://docs.fortinet.com/uploaded/files/2108/FortiWeb_5_3_Administration_Guide_Revision1.pdf)(Nuevo)FortiWeb5.3LogReference(PDF)(http://docs.fortinet.com/uploaded/files/2125/FortiWeb_5_3_Log_Reference_Revision1.pdf)(Actualizado)FortiWeb5.3CLIReference(HTML)(http://docslegacy.fortinet.com/fweb/520/cli/index.html)(Actualizado)

FortiControllerFortiControllerSessionAwareLoadBalancingGuide(http://docs.fortinet.com/uploaded/files/2039/forticontrollersessionawareloadbalancing50.pdf)(Actualizado)

FortiConverterFortiConverter4.5UserGuide(http://docs.fortinet.com/uploaded/files/2127/FortiConverter_4_5_0_User_Guide_Revision1.pdf)

FortiADCFortiADCESeriesHelp(http://docslegacy.fortinet.com/fadc/404/htmle/Index.htm)(Actualizado)FortiADCESeriesHandbook(http://docs.fortinet.com/d/fortiadceseriesfortiadchandbookforeseriesmodels3)(Actualizado)

FortiDDoSFortiDDoS4.1Patch2Handbook(http://docs.fortinet.com/uploaded/files/2071/FortiDDoS_4_1_Patch_2_Handbook_Revision1.pdf)(Nuevo)

FortiSandboxFortiSandbox1.4AdministrationGuide(http://docs.fortinet.com/uploaded/files/2077/fortisandboxadminv1.4.pdf)(Actualizado)FortiSandboxVMwareInstallGuide(http://docs.fortinet.com/uploaded/files/2107/fortisandboxvmvmwareinstallguide.pdf)(Nuevo)

ParamayorinformacinconsultaelmanualdereferenciadeFortinethttp://docslegacy.fortinet.com/fweb/520/cli/index.html#page/FortiWeb%2520CLI%2520Reference/introduction.html(%20http://docslegacy.fortinet.com/fweb/520/cli/index.html#page/FortiWeb%2520CLI%2520Reference/introduction.html)

LeaveaReplyTudireccindecorreoelectrniconoserpublicada.Loscamposnecesariosestnmarcados*

Name *

Email *

URL

Message

PuedesusarlassiguientesetiquetasyatributosHTML(HyperTextMarkupLanguage):

Submit

Recibirunemailconlossiguientescomentariosaestaentrada.

Recibirunemailconcadanuevaentrada.

Search Search

Publicacionesmarzo2015(http://stackfire.com/2015/03/)(1)noviembre2014(http://stackfire.com/2014/11/)(2)octubre2014(http://stackfire.com/2014/10/)(2)septiembre2014(http://stackfire.com/2014/09/)(2)

101112

vcluster 1: work 10.0.0.1Master:0 FG311B1111111111Slave :1 FG311B1111111112

123456789101112131415161718192021

myfirewall1 # diag sys session full-statsession table: table_size=65536 max_depth=1 used=2expect session table: table_size=1024 max_depth=0 used=0misc info: session_count=1 setup_rate=0 exp_count=0 clash=0memory_tension_drop=0 ephemeral=0/16368 removeable=0 ha_scan=0delete=0, flush=0, dev_down=0/0TCP sessions:1 in ESTABLISHED statefirewall error stat:error1=00000000error2=00000000error3=00000000error4=00000000tt=00000000cont=00000000ids_recv=00000000url_recv=00000000av_recv=00000000fqdn_count=00000000tcp reset stat:syncqf=0 acceptqf=0 no-listener=11025 data=0 ses=0 ips=0

123456789101112131415

myfirewall # diag sys session listsession info: proto=17 proto_state=01 duration=2214 expire=123 timeout=0 flags=00000000 sockflag=00000000 sockport=0 av_idx=0 use=3origin-shaper=reply-shaper=per_ip_shaper=ha_id=0 hakey=28310policy_dir=0 tunnel=/state=localstatistic(bytes/packets/allow_err): org=5095/76/1 reply=8757/75/1 tuples=2orgin->sink: org out->post, reply pre->in dev=10->12/12->10 gwy=0.0.0.0/192.168.227.97hook=out dir=org act=noop 192.168.227.97:54223->65.39.139.53:53(0.0.0.0:0)hook=in dir=reply act=noop 65.39.139.53:53->192.168.227.97:54223(0.0.0.0:0)misc=0 policy_id=0 auth_info=0 chk_client_info=0 vd=0 serial=0047c5b4 tos=ff/ff imp2p=0 app=0dd_type=0 dd_rule_id=0total session 7

12

myfirewall1 # diagnose sys session filter src 192.168.227.129myfirewall1 # diag sys session list

4/7/2015 FortigateCLI::ComandostilesI

http://stackfire.com/fortigateclicomandosutilesi/ 3/3

septiembre2014(http://stackfire.com/2014/09/)(2)agosto2014(http://stackfire.com/2014/08/)(1)

CategorasApple(http://stackfire.com/category/apple/)Blog(http://stackfire.com/category/blog/)Desarrollo(http://stackfire.com/category/desarrollo/)Fortinet(http://stackfire.com/category/fortinet/)Microsoft(http://stackfire.com/category/microsoft/)SeguridadInformtica(http://stackfire.com/category/seguridadinformatica/)Uncategorized(http://stackfire.com/category/uncategorized/)

Selprimerodetusamigosenindicarquetegustaesto.

Stackfire611Megusta

Megustaestapgina

RioAmur#30,Col.CuauhtmocCP.01209,MxicoD.F.

+5212091804VentasExt.101SoporteExt.102CorporativosExt.103contacto@stackfire.com

Copyright2015Stackfire.AllRightsReserved.

PoweredbyStackfire(http://www.stackfire.com)