CONFIGSENTRY / ENGINEER REPORT EXAMPLE
FortiGate configuration review
Appliance: Example-FortiGate-A · Scope: example root VDOM · Audit: 15 January 2026, 10:30 UTC
Illustrative managed audit after a configuration-change event. Read-only analysis; no firewall change was deployed by ConfigSentry.
Changes since previous audit
Compared with the eligible managed audit for the same example appliance on 8 January 2026. The prior posture was 72%. New and resolved classifications require the rule to have been evaluated in both audits; skipped or absent checks are not treated as resolved.
| Finding and scope | Severity | Previous | Current | Workflow |
|---|---|---|---|---|
| Administrator MFA enabled Global / example administrator | Critical | Passed | New failure | Open · Owner: Security Operations · Due: 22 January 2026 |
| Restrict management access sources Global / administrative interface | High | Failed | Resolved | Resolved 15 January 2026 |
| Log accepted firewall policy traffic root VDOM / example policy 42 | High | Failed | Still failing | Acknowledged · Owner: Network Team |
| Review broad service exposure root VDOM / example policy 17 | High | Failed | Still failing | Accepted risk · Review due: 1 February 2026 |
Finding requiring action
Critical Administrator MFA enabled — the illustrative newly added administrator is missing MFA. Confirm whether the account is required, enable an approved MFA method, and rerun the audit. The finding is scoped to that administrator; it does not imply that every administrator is affected.
Notification example: one new Critical risk alert was sent for this failure episode after the change-triggered audit. An unchanged failure on the next audit would not generate another new-failure alert.
Evidence handling: this public example intentionally omits raw configuration lines, secrets, serial numbers, account IDs and live network addresses.
How to use this report
- Review new Critical and High failures first.
- Assign an owner and due date to open findings.
- Use the comparison to confirm whether work resolved the same finding.
- Retain the Executive report for a concise management view.