Added support for 7.0

ntc_templates/templates/fortinet_get_system_status.textfsm

@@ -9,6 +9,8 @@
 # CLUSTER MODE: AP
 # VDOMS       : ENABLED
 #
+# 2022-11-27: Update for 7.0 by Klaus
+#
 Value Required HOSTNAME (\S+)
 Value VERSION (.*)
 Value SIGNATURE (.*)
@@ -39,12 +41,15 @@ Value BRANCH_POINT (\S+)
 Value RELEASE_VERSION_INFORMATION (\S+)
 Value FORTIOS_X86_64 (\S+)
 Value SYSTEM_TIME (.*)
+Value AV_AI_ML_MODEL (.+)
+Value LAST_REBOOT_REASON (.+)
 
 Start
   ^Version:\s+${VERSION}
   ^Firmware Signature:\s+${SIGNATURE}
   ^Virus-DB:\s+${VIRUS_DB}
   ^Extended\s+DB:\s+${EXTENDED_DB}
+  ^AV\s+AI/ML\s+Model:\s+${AV_AI_ML_MODEL}
   ^Extreme\s+DB:\s+${EXTREME_DB}
   ^IPS-DB:\s+${IPS_DB}
   ^IPS-ETDB:\s+${IPS_ETDB}
@@ -70,7 +75,7 @@ Start
   ^Branch\s+point:\s+${BRANCH_POINT}
   ^Release\s+Version\s+Information:\s+${RELEASE_VERSION_INFORMATION}
   ^FortiOS\s+x86-64:\s+${FORTIOS_X86_64}
-  ^System\s+time:\s+${SYSTEM_TIME} -> Record
+  ^System\s+time:\s+${SYSTEM_TIME}
+  ^Last\s+reboot\s+reason:\s+${LAST_REBOOT_REASON}
   ^\s*$$
   ^. -> Error
-

tests/fortinet/get_system_status/fortinet_get_system_status.yml

@@ -30,3 +30,5 @@ parsed_sample:
     release_version_information: "GA"
     fortios_x86_64: "Yes"
     system_time: "Fri Jan 10 23:10:02 2020"
+    av_ai_ml_model: ""
+    last_reboot_reason: ""

tests/fortinet/get_system_status/fortinet_get_system_status_6.2.yml

@@ -30,3 +30,5 @@ parsed_sample:
     release_version_information: "GA"
     fortios_x86_64: "Yes"
     system_time: "Fri Jan  8 13:22:01 2021"
+    av_ai_ml_model: ""
+    last_reboot_reason: ""

tests/fortinet/get_system_status/fortinet_get_system_status_7.0.raw

@@ -0,0 +1,27 @@
+Version: FortiGate-60F v7.0.7,build0367,221005 (GA.F)
+Firmware Signature: certified
+Virus-DB: 90.02571(2022-05-23 20:26)
+Extended DB: 90.02571(2022-05-23 20:26)
+AV AI/ML Model: 2.05720(2022-05-23 11:45)
+IPS-DB: 22.00446(2022-11-24 01:49)
+IPS-ETDB: 0.00000(2001-01-01 00:00)
+APP-DB: 22.00444(2022-11-22 02:49)
+INDUSTRIAL-DB: 6.00741(2015-12-01 02:30)
+IPS Malicious URL Database: 4.00542(2022-11-26 11:33)
+Serial-Number: FGT60xxxxxxxxxxx
+BIOS version: 05000009
+System Part-Number: P24286-03
+Log hard disk: Not available
+Hostname: fw1
+Private Encryption: Disable
+Operation Mode: NAT
+Current virtual domain: root
+Max number of virtual domains: 10
+Virtual domains status: 1 in NAT mode, 0 in TP mode
+Virtual domain configuration: disable
+FIPS-CC mode: disable
+Current HA mode: standalone
+Branch point: 0367
+Release Version Information: GA
+System time: Sun Nov 27 00:26:34 2022
+Last reboot reason: warm reboot

tests/fortinet/get_system_status/fortinet_get_system_status_7.0.yml

@@ -0,0 +1,34 @@
+---
+parsed_sample:
+  - hostname: "fw1"
+    version: "FortiGate-60F v7.0.7,build0367,221005 (GA.F)"
+    signature: "certified"
+    virus_db: "90.02571(2022-05-23 20:26)"
+    extended_db: "90.02571(2022-05-23 20:26)"
+    extreme_db: ""
+    ips_db: "22.00446(2022-11-24 01:49)"
+    ips_etdb: "0.00000(2001-01-01 00:00)"
+    app_db: "22.00444(2022-11-22 02:49)"
+    industrial_db: "6.00741(2015-12-01 02:30)"
+    serial_number: "FGT60xxxxxxxxxxx"
+    ips_malicious_url_database: "4.00542(2022-11-26 11:33)"
+    botnet_db: ""
+    bios_version: "05000009"
+    system_part_number: "P24286-03"
+    log_hard_disk: "Not"
+    private_encryption: "Disable"
+    operation_mode: "NAT"
+    current_virtual_domain: "root"
+    max_number_of_virtual_domains: "10"
+    virtual_domains_status: "1 in NAT mode, 0 in TP mode"
+    virtual_domain_configuration: "disable"
+    fips_cc_mode: "disable"
+    current_ha_mode: "standalone"
+    cluster_uptime: ""
+    cluster_state_change_time: ""
+    branch_point: "0367"
+    release_version_information: "GA"
+    fortios_x86_64: ""
+    system_time: "Sun Nov 27 00:26:34 2022"
+    last_reboot_reason: "warm reboot"
+    av_ai_ml_model: "2.05720(2022-05-23 11:45)"