FMG/FAZ Scheduled Backup to SFTP Server

FortiManager / FortiAnalyzer config example

Create a daily backup at 07 AM to the SFTP Server into the directory FMG

FortiManager config example

Create a daily backup at 06 AM to the SFTP Server 10.10.21.14 into the directory FMG

config system backup all-settings
    set status enable
    set server "10.10.21.14"
    set protocol sftp
    set user "svc_sftp_backups"
    set directory "FMG"
    set time "06:00:00"
    set passwd UseaSecurePwd!
    set week_days monday tuesday wednesday thursday friday saturday sunday
    end

FortiAnalyzer config example

config system backup all-settings
    set status enable
    set server "10.10.21.14"
    set protocol sftp
    set user "svc_sftp_backups"
    set directory "FAZ"
    set time "07:00:00"
    set passwd UseaSecurePwd!
    set week_days monday tuesday wednesday thursday friday saturday sunday
    end

SFTP Server example

As SFTP Server i’ve used Solarwinds SFTP Server

I’ve created a folder FMG for the FortiManager and a folder FAZ for the FortiAnalyzer Backup files.

I would recommend you to configure a sftp user for sftp login and allow only the required options (e.g.: file overwrite and delete shouldn’t be neccessary for a FortiManager Backup)

You may verify the config in this file: C:\ProgramData\SolarWinds\sftp_cfg.xml

If you should have issues uploading the backup files, you may check

That the Windows Firewall has an allow rule for the Service

and you may verify the log file for the sftp server

C:\ProgramData\SolarWinds\SftpServer.log

I would recommend you to use a service Account for the SFTP Server

I’ve configured modify permissions to the following folders and files for the service Account

C:\ProgramData\SolarWinds

C:\Program Files (x86)\SolarWinds\SFTP & SCP Server

C:\SFTP_Root

Verify that the service is configured to start automatically

If you should have issues, try to restart the service and check the Windows event Logs.

Don’t forget to clean up the folder regulary, that the disk won’t fill up, you should consider to put the SFTP root folder on a seperate disk.