Generate FortiGate policy CLI from Excel or CSV.

Audit the firewall matrix first, compare the existing configuration when available, then generate a review-ready delta and rollback.

Creating FortiGate policies from a spreadsheet is easy to automate badly. A matrix usually describes sources, destinations, protocols, ports and interfaces, while a FortiGate configuration requires address objects, service objects, policy references, safe policy IDs and deployment order. DeepCodeAgent turns that translation into a reviewable workflow instead of blindly pasting spreadsheet values into CLI.

Use the tool

Generate FortiGate policies from your matrix

Upload an XLSX/CSV matrix, review validation findings and generate FortiGate CLI locally in your browser.

Open DeepCodeAgent

What the FortiGate policy generator does

1. Validate the matrix

Check IPv4/CIDR values, ports, protocol, interfaces, actions, duplicate rows and broad access patterns before configuration is generated.

2. Build FortiGate objects

Create the supported firewall address and custom service objects required by the matrix, using safe generated names.

3. Generate policies

Create review-ready firewall policy CLI with interfaces, source, destination, action, schedule, service and logging for the current beta scope.

Compare the matrix with an existing FortiGate configuration

Optionally load a supported plain-text FortiOS .conf. DeepCodeAgent can reuse matching address and custom-service objects, flag generated-name conflicts, avoid selected equivalent policies and allocate free policy IDs from the imported configuration.

Excel / CSV matrix→Audit→Existing config comparison→Delta CLI→Rollback

Why generate a delta instead of a full configuration?

A delta is easier to review because it focuses on the requested change. When an imported configuration contains a semantically matching address or service object, the current beta can reference that existing object instead of generating another one. The rollback contains only the policy IDs and supported objects created by that generated delta.

Current FortiOS scope

The beta targets the tested FortiOS 7.4/7.6 workflow shown in the application and generates supported IPv4 address objects, TCP/UDP/SCTP custom services and IPv4 firewall policies. NAT, security profiles, VDOM context, zones, groups, VIPs, IPv6 and policy-order semantics still require administrator review.

Example input

Name: Allow_HTTPS_App Source: 10.10.10.0/24 Destination: 172.16.20.10 Protocol: TCP Port: 443 Src Interface: LAN Dst Interface: DMZ Action: ACCEPT

FortiGate Policy Generator