Fortinet SD-WAN Compliance Auditor

FortiManager API: retrieve all SD-WAN rules, compare vs a golden YAML baseline, flag drift (wrong SLA target, priority, interface), produce an HTML report and optionally push the baseline.

FortiManager

FortiGate

Open in Generator Open in Platform

You're viewing a preview

The full script, parameters, and execution console are available with a free account.

Already have access? Sign in →

Capabilities

FortiManager JSON-RPC
Golden YAML baseline
Drift detection per rule
SLA target / priority / interface checks
HTML compliance report
Optional baseline push

Required inputs

Parameters the script accepts. Defaults shown; some are vendor- or context-gated.

Parameter	Type	Default	Notes
Golden baseline file baseline	string	baseline.yaml	—
FortiManager ADOM adom	string	root	—
Exit non-zero on drift fail_on_drift	bool	true	—

Hint 1 — Name your vendors and OS versions

Mention the exact platforms you run (FortiManager, FortiGate) so the generated sd-wan logic uses the right CLI/NETCONF syntax.

Hint 2 — State your real thresholds

Provide concrete values for Golden baseline file, FortiManager ADOM, Exit non-zero on drift instead of the defaults — they shape what counts as a fault.

Hint 3 — Prioritize the checks you need

This tool can fortiManager JSON-RPC and golden YAML baseline. Ask for the subset relevant to your incident to keep output focused.

Hint 4 — Describe your inventory format

Tell the assistant whether your device list is CSV, YAML, or JSON and which columns it has, so parsing matches your data.

Sample inventory schema

Authoritative shape of the device/policy data this script consumes.

baseline.yaml

yaml

Golden SD-WAN rule baseline

yaml

VOICE_PRIORITY:
  sla_target: ISP1
  priority: 1
BULK_BACKUP:

Expected output

Reference terminal output the script should produce — used as a stylistic and structural target.

terminal

[2026-06-12] INFO  FortiManager JSON-RPC login (ADOM root)...
  Retrieved 64 SD-WAN rules across 12 FortiGates
RULE              DEVICE        DRIFT
VOICE_PRIORITY    fg-mum-01     SLA target=ISP2 expected=ISP1 ←
BULK_BACKUP       fg-blr-03     priority=10 expected=20 ←
Summary: 62 compliant · 2 drift · report → fortinet_sdwan.html