Fortinet black logo

Administration Guide

System templates

System templates

The Device Manager > Provisioning Templates > System Templates pane allows you to create and manage device profiles. A system template is a subset of a model device configuration. Each device or device group can be linked with a system template. When linked, the selected settings come from the template and not from the Device Manager database.

By default, there is one generic profile defined. System templates are managed in a similar manner to policy packages. You can use the context menus to create new device profiles. You can configure settings in the widget or import settings from a specific device.

Go to the Device Manager > Provisioning Templates > System Templates > default pane to configure system templates.

Some settings may not be available in all ADOM versions.

After making changes in a widget, click Apply to save your changes.

To close a widget, click the Close icon in the widget’s top right.

To select which widgets to display, click Toggle Widgets and select which widgets to display.

To import settings from another device, click the Import icon in the widget’s top right and select the device from which to import.

The following widgets and settings are available:

Widget

Description

DNS

Primary DNS Server, Secondary DNS Server, Local Domain Name. You can also allow overrides. See Allowing system template overrides.

NTP Server

Synchronize with NTP Server and Sync Interval settings. You can select to use the FortiGuard server or specify one or more other servers.

Alert Email

SMTP Server settings including server, authentication, SMTP user ID, and password.

Admin Settings

Web Administration Ports, Timeout Settings, and Web Administration.

SNMP

SNMP v1/v2 and SNMP v3 settings. In the toolbar, you can select to create, edit, or delete the record.

To create a new SNMP, click Create New and specify the community name, hosts, queries, traps, and SNMP events.

Replacement Messages

You can customize replacement messages. Click Import to select a device and the objects to import.

FortiGuard

Select Enable FortiGuard Security Updates to retrieve updates from FortiGuard servers or from this FortiManager. You can define multiple servers and specify Update, Rating, or Updates and Rating. You can also select Include Worldwide FortiGuard Servers.

Log Settings

Select Send Logs to FortiAnalyzer/FortiManager and/or Send Logs to Syslog.

If selected, enter the requisite information for the option.

Interface

Zone and interface settings. In the toolbar, you can select to create, edit, or delete the record.

By default the Interface widget is hidden. From the Toggle Widgets menu, select Interface to display the Interface widget.

To create a new interface, click Create New and specify an action and identify what models will receive the action. You can also allow overrides and preview actions. See Allowing system template overrides and Previewing interface actions.

You can create, edit, or delete templates. Select System Templates in the tree to display the Create New, Edit, Delete, and Import options in the content pane. You can also select the devices to be associated with the template by selecting Assign to Device.

To assign a system template to a device:
  1. Go to Device Manager > Provisioning Templates > System Templates.
  2. In the tree menu, select a template, and expand This template is assigned to <number> devices in the content pane.

  3. Click Assigned to Devices.

    The Assign to Device dialog box is displayed.

  4. In the Available Entries list, select one or more devices, and click > to move them to the Selected Entries list, and then click OK.

    The devices assigned to the template are shown in the Assign to Devices column.

System templates

The Device Manager > Provisioning Templates > System Templates pane allows you to create and manage device profiles. A system template is a subset of a model device configuration. Each device or device group can be linked with a system template. When linked, the selected settings come from the template and not from the Device Manager database.

By default, there is one generic profile defined. System templates are managed in a similar manner to policy packages. You can use the context menus to create new device profiles. You can configure settings in the widget or import settings from a specific device.

Go to the Device Manager > Provisioning Templates > System Templates > default pane to configure system templates.

Some settings may not be available in all ADOM versions.

After making changes in a widget, click Apply to save your changes.

To close a widget, click the Close icon in the widget’s top right.

To select which widgets to display, click Toggle Widgets and select which widgets to display.

To import settings from another device, click the Import icon in the widget’s top right and select the device from which to import.

The following widgets and settings are available:

Widget

Description

DNS

Primary DNS Server, Secondary DNS Server, Local Domain Name. You can also allow overrides. See Allowing system template overrides.

NTP Server

Synchronize with NTP Server and Sync Interval settings. You can select to use the FortiGuard server or specify one or more other servers.

Alert Email

SMTP Server settings including server, authentication, SMTP user ID, and password.

Admin Settings

Web Administration Ports, Timeout Settings, and Web Administration.

SNMP

SNMP v1/v2 and SNMP v3 settings. In the toolbar, you can select to create, edit, or delete the record.

To create a new SNMP, click Create New and specify the community name, hosts, queries, traps, and SNMP events.

Replacement Messages

You can customize replacement messages. Click Import to select a device and the objects to import.

FortiGuard

Select Enable FortiGuard Security Updates to retrieve updates from FortiGuard servers or from this FortiManager. You can define multiple servers and specify Update, Rating, or Updates and Rating. You can also select Include Worldwide FortiGuard Servers.

Log Settings

Select Send Logs to FortiAnalyzer/FortiManager and/or Send Logs to Syslog.

If selected, enter the requisite information for the option.

Interface

Zone and interface settings. In the toolbar, you can select to create, edit, or delete the record.

By default the Interface widget is hidden. From the Toggle Widgets menu, select Interface to display the Interface widget.

To create a new interface, click Create New and specify an action and identify what models will receive the action. You can also allow overrides and preview actions. See Allowing system template overrides and Previewing interface actions.

You can create, edit, or delete templates. Select System Templates in the tree to display the Create New, Edit, Delete, and Import options in the content pane. You can also select the devices to be associated with the template by selecting Assign to Device.

To assign a system template to a device:
  1. Go to Device Manager > Provisioning Templates > System Templates.
  2. In the tree menu, select a template, and expand This template is assigned to <number> devices in the content pane.

  3. Click Assigned to Devices.

    The Assign to Device dialog box is displayed.

  4. In the Available Entries list, select one or more devices, and click > to move them to the Selected Entries list, and then click OK.

    The devices assigned to the template are shown in the Assign to Devices column.