Using FMG 5.4.0 you can use the CLI command "execute fmpolicy copy-adom-object" to copy objects into the global database / global ADOM.
You can use ? at any point to figure out the syntax, but here is an example of me copying a firewall address object named 'ergotherego' into the Global Database:
execute fmpolicy copy-adom-object 2004 140 ergotherego 2007 3
2004 = ID of the source ADOM
140 = ID code of the object type (in this case, firewall address)
ergotherego = name of the object in question
2007 = ID of the firewall device in my source ADOM
3 = ID of the firewall VDOM on the firewall
In 5.4.0 it appears using this command you can only copy into the Global Database. You have to specify source device and VDOM in case the object is device-level (and not ADOM-level).
In 5.4.1 apparently the command is "execute fmpolicy clone-adom-object" and that does enable you to select the destination ADOM. See attached image which uses 5.4.1 (I don't have access to a 5.4.1 system).
Note: The source/destination ADOM must be the same version.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.