Introduction
Managing logs, reports, and files efficiently is crucial to ensure that your network security infrastructure is running optimally. FortiManager offers an auto-delete feature that automates the deletion of outdated logs, reports, archived files, and quarantined files. This blog post guides you through configuring these auto-delete policies to maintain clean and efficient system storage.
Purpose of Auto-Delete Configuration
FortiManager’s auto-delete feature serves the purpose of minimizing manual intervention in the data retention process and supports the overall system performance by freeing up storage space that could otherwise compromise operational efficiency. It helps in keeping your FortiManager organized and functional by routinely clearing unnecessary data.
How to Configure Auto-Delete Policies
The auto-delete configuration in FortiManager involves setting up automatic deletion policies for the following components:
- DLP Archives: dlp-files-auto-deletion
- Quarantined Files: quarantine-files-auto-deletion
- Device Logs: log-auto-deletion
- Reports: report-auto-deletion
Each configuration section allows you to specify retention policies and schedule automatic deletion tasks.
Configuration Syntax
To configure the auto-delete settings, use the following command structure on the FortiManager CLI:
config system auto-delete
config dlp-files-auto-deletion
set retention {days | weeks | months}
set runat
set status {enable | disable}
set value
end
config quarantine-files-auto-deletion
set retention {days | weeks | months}
set runat
set status {enable | disable}
set value
end
config log-auto-deletion
set retention {days | weeks | months}
set runat
set status {enable | disable}
set value
end
config report-auto-deletion
set retention {days | weeks | months}
set runat
set status {enable | disable}
set value
end
end
Understanding Configuration Options
- Retention: Specifies the time frame for retaining files, which can be in days, weeks, or months. The default setting is days.
- Runat: This sets the hour at which the auto-deletion task will run (0 – 23). The default value is 0.
- Status: Enables or disables the auto-delete functionality. By default, it is disabled.
- Value: Defines the period for automatic deletion according to the retention setting. The default is 0.
Conclusion
By configuring auto-delete policies in FortiManager, administrators can ensure that their systems run efficiently, without the clutter of redundant data. Setting up these policies not only aids in compliance with data retention rules but also preserves valuable storage resources. Use this guide to streamline your data management process with ease.
For further details, refer to the detailed CLI reference guide on Fortinet’s official page.