Introducing the FortiGate Dependency Finder, a Python script that iterates across multiple FortiGate firewalls and uses the REST API to find policies related to specific IP addresses from a list.
This tool achieves exact policy matches that are also better and more accurate than the FortiGate Search box.
Features
Prerequisites
Usage
Contributing
Discover FortiGate policies associated with provided IP addresses. Identify address groups, interfaces, and policies related to IP addresses. Validate IPv4 addresses for correctness and relevance. Output results in a CSV file for easy analysis.
Before using the FortiGate Policy Dependency Finder, make sure you have the following prerequisites in place:
Python 3.x installed.
A FortiGate device with enabled API access.
An inventory YAML file (inventory.yml) containing FortiGate device information.
An IP list CSV file (IP_LIST.csv) with IP addresses to analyze.
Make sure you have the inventory.yml and IP_LIST.csv files prepared with relevant information.
Run the script:
python fortigate_policy_finder.pyContributions are welcome! If you find a bug or have an enhancement in mind, feel free to open an issue or submit a pull request.