Fortinet black logo

CLI Reference

config system external-resource

config system external-resource

Configure external resource.

config system external-resource
    Description: Configure external resource.
    edit <name>
        set uuid {uuid}
        set status [enable|disable]
        set type [category|address|...]
        set update-method [feed|push]
        set category {integer}
        set username {string}
        set password {password}
        set comments {var-string}
        set resource {string}
        set user-agent {var-string}
        set server-identity-check [none|basic|...]
        set proxy {string}
        set proxy-port {integer}
        set proxy-username {string}
        set proxy-password {password}
        set refresh-rate {integer}
        set source-ip {ipv4-address}
        set interface-select-method [auto|sdwan|...]
        set interface {string}
    next
end

config system external-resource

Parameter

Description

Type

Size

Default

name

External resource name.

string

Maximum length: 35

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

status

Enable/disable user resource.

option

-

enable

Option

Description

enable

Enable user resource.

disable

Disable user resource.

type

User resource type.

option

-

category

Option

Description

category

FortiGuard category.

address

Firewall IP address.

domain

Domain Name.

malware

Malware hash.

url

URL List.

update-method

External resource update method.

option

-

feed

Option

Description

feed

FortiGate unit will pull update from the external resource.

push

External Resource update is pushed to the FortiGate unit through the FortiGate unit's RESTAPI/CLI.

category

User resource category.

integer

Minimum value: 192 Maximum value: 221

0

username

HTTP basic authentication user name.

string

Maximum length: 64

password

HTTP basic authentication password.

password

Not Specified

comments

Comment.

var-string

Maximum length: 255

resource

URI of external resource.

string

Maximum length: 511

user-agent

HTTP User-Agent header.

var-string

Maximum length: 255

server-identity-check

Certificate verification option.

option

-

none

Option

Description

none

No certificate verification.

basic

Check server certifcate only.

full

Check server certificate and verify the domain matches in the server certificate.

proxy

Proxy server host(ip or domain name).

string

Maximum length: 255

proxy-port

Port number that the proxy server expects to receive HTTP sessions on.

integer

Minimum value: 1 Maximum value: 65535

8080

proxy-username

HTTP proxy basic authentication user name.

string

Maximum length: 64

proxy-password

HTTP proxy basic authentication password.

password

Not Specified

refresh-rate

Time interval to refresh external resource.

integer

Minimum value: 1 Maximum value: 43200

5

source-ip

Source IPv4 address used to communicate with server.

ipv4-address

Not Specified

0.0.0.0

interface-select-method

Specify how to select outgoing interface to reach server.

option

-

auto

Option

Description

auto

Set outgoing interface automatically.

sdwan

Set outgoing interface by SD-WAN or policy routing rules.

specify

Set outgoing interface manually.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

config system external-resource

Configure external resource.

config system external-resource
    Description: Configure external resource.
    edit <name>
        set uuid {uuid}
        set status [enable|disable]
        set type [category|address|...]
        set update-method [feed|push]
        set category {integer}
        set username {string}
        set password {password}
        set comments {var-string}
        set resource {string}
        set user-agent {var-string}
        set server-identity-check [none|basic|...]
        set proxy {string}
        set proxy-port {integer}
        set proxy-username {string}
        set proxy-password {password}
        set refresh-rate {integer}
        set source-ip {ipv4-address}
        set interface-select-method [auto|sdwan|...]
        set interface {string}
    next
end

config system external-resource

Parameter

Description

Type

Size

Default

name

External resource name.

string

Maximum length: 35

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

status

Enable/disable user resource.

option

-

enable

Option

Description

enable

Enable user resource.

disable

Disable user resource.

type

User resource type.

option

-

category

Option

Description

category

FortiGuard category.

address

Firewall IP address.

domain

Domain Name.

malware

Malware hash.

url

URL List.

update-method

External resource update method.

option

-

feed

Option

Description

feed

FortiGate unit will pull update from the external resource.

push

External Resource update is pushed to the FortiGate unit through the FortiGate unit's RESTAPI/CLI.

category

User resource category.

integer

Minimum value: 192 Maximum value: 221

0

username

HTTP basic authentication user name.

string

Maximum length: 64

password

HTTP basic authentication password.

password

Not Specified

comments

Comment.

var-string

Maximum length: 255

resource

URI of external resource.

string

Maximum length: 511

user-agent

HTTP User-Agent header.

var-string

Maximum length: 255

server-identity-check

Certificate verification option.

option

-

none

Option

Description

none

No certificate verification.

basic

Check server certifcate only.

full

Check server certificate and verify the domain matches in the server certificate.

proxy

Proxy server host(ip or domain name).

string

Maximum length: 255

proxy-port

Port number that the proxy server expects to receive HTTP sessions on.

integer

Minimum value: 1 Maximum value: 65535

8080

proxy-username

HTTP proxy basic authentication user name.

string

Maximum length: 64

proxy-password

HTTP proxy basic authentication password.

password

Not Specified

refresh-rate

Time interval to refresh external resource.

integer

Minimum value: 1 Maximum value: 43200

5

source-ip

Source IPv4 address used to communicate with server.

ipv4-address

Not Specified

0.0.0.0

interface-select-method

Specify how to select outgoing interface to reach server.

option

-

auto

Option

Description

auto

Set outgoing interface automatically.

sdwan

Set outgoing interface by SD-WAN or policy routing rules.

specify

Set outgoing interface manually.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15