Metrics Library

This will return "disabled" or "enabled". We have it enabled for our standard and use this to monitor the devices for it. SystemGlobal."pre-login-banner"

It will return "diable" or "enable" SystemGlobal."post-login-banner"

Simple query to pull AP's and their Serial number for asset tracking WiFiAPs[].join( : , [to_string(name), to_string(serial)])

Shows APs and their IPv4 addresses. WiFiAPs[].join( : , [to_string(name), to_string(local_ipv4_addr)])

Find AP's and their Ethernet MAC.helpful to identify CDP/LLDP neighbours or using MAC tables to find which AP is connected to which port. WiFiAPs[].join( : , [to_string(name), to_string(board_mac)])

Returns the firmware name for a Fortinet FortiGate device Firmware.current.name

By default this is disabled, but if it gets enabled, we get an alert. SystemGlobal."wimax-4g-usb"

Looks at the object "Type" contains tunnel in the instance interfaces Interfaces[?type.contains(@, tunnel )][name, status]

This metric displays the TLS Cypher enforced for admin sessions to the Fortigate Firewall. Fortinet reccomends using TLS 1.3 since admin https sessions are always started in a browser. SystemGlobal."admin-https-ssl-versions"

This metric checks to see if the FortiGate to FortiManager (FGFM) protocol is being used on any interfaces and then lists the interface name if it is. Interfaces[?allowaccess.contains ( @, fgfm )].name