FortiGate configs,
written the way you would.
A quiet workspace for the people who actually maintain firewalls. Fill a short checklist — get clean, paste-ready FortiOS CLI in the right order. No marketplace. No model guessing. No detour.
- WizardIPsec S2S
- Local subnet10.10.0.0/24
- Remote gw203.0.113.42
- IKE version2
- ProposalAES-256 / SHA-256
- PolicyLAN → BRANCH
config vpn ipsec phase1-interface
edit "HQ-to-BRANCH"
set interface "wan1"
set ike-version 2
set proposal aes256-sha256
set remote-gw 203.0.113.42
next
end
config firewall policy
edit 0
set name "LAN → BRANCH"
set action accept
next
endMost firewall work
isn't the interesting part.
You already know what the policy should look like. The slow part is hunting through an old ticket, an internal wiki, and three confusingly named runbooks just to remember the exact CLI order.
ConfigWing skips that. Pick the wizard, answer a handful of fields, and get a clean block of FortiOS you can read top-to-bottom, paste in full, and explain to whoever owns the change window.
Built by network engineers who got tired of doing the boring half of the job twice.
Three things we refuse to compromise on.
Real FortiOS, not a guess
Every wizard is hand-written from configs that run in production. No model hallucinations, no `set magic-flag enable` surprises.
Your library stays yours
Saved interfaces, address objects and IP ranges live in your workspace. Never shared, never used to train anything.
Deterministic by design
Same checklist, same CLI — every time. Diff-friendly output that survives a code review and an audit.
From blank tab to paste-ready, in under a minute.
No onboarding tour. No mandatory tutorial. Open the wizard, answer the fields, copy the output.
- 01
Pick a wizard
IPsec, SSL VPN, firewall policy, VLAN, SD-WAN, hardening — ten of the tasks you actually run every week.
- 02
Fill the checklist
Plain fields, sensible defaults, your saved interfaces and IP ranges already in the dropdowns.
- 03
Paste into the box
Production-grade FortiOS CLI in the right order. Review the diff, paste, done.
The tasks you actually run.
No fluff, no half-finished modules. Vote on what comes next from inside the app.
- 01Site-to-Site IPsec
- 02SSL VPN
- 03Firewall policy
- 04VLAN + Interface
- 05VIP / Port forward
- 06SD-WAN
- 07DHCP server
- 08HA cluster
- 09Static route
- 10Hardening
“Half my job was finding the right CLI snippet from last quarter. Now it's three fields and a paste.”