add timoute och export av fg config
This commit is contained in:
16
README.md
16
README.md
@@ -79,6 +79,13 @@ Audit a FortiGate policy export:
|
||||
fgai audit-policies --config exports/fortigate.conf
|
||||
```
|
||||
|
||||
Or fetch policies through the FortiGate API and audit that JSON:
|
||||
|
||||
```bash
|
||||
fgai fetch-policies --output exports/policies.json
|
||||
fgai audit-policies --config exports/policies.json --llm --llm-timeout 300
|
||||
```
|
||||
|
||||
Find block candidates without changing the firewall:
|
||||
|
||||
```bash
|
||||
@@ -97,7 +104,13 @@ Optional local LLM summary through Ollama:
|
||||
|
||||
```bash
|
||||
ollama pull llama3.3
|
||||
fgai analyze-logs --logs logs/fg_syslog.jsonl --llm
|
||||
fgai analyze-logs --logs logs/fg_syslog.jsonl --llm --llm-timeout 300
|
||||
```
|
||||
|
||||
For slower machines or large models:
|
||||
|
||||
```bash
|
||||
OLLAMA_MODEL=llama3.1 OLLAMA_TIMEOUT=300 fgai analyze-logs --logs logs/fg_syslog.jsonl --llm
|
||||
```
|
||||
|
||||
## FortiGate Inputs
|
||||
@@ -126,6 +139,7 @@ end
|
||||
- `FGAI_ALLOWLIST`: comma-separated IPs/CIDRs never to block.
|
||||
- `OLLAMA_HOST`: defaults to `http://127.0.0.1:11434`.
|
||||
- `OLLAMA_MODEL`: defaults to `llama3.3`.
|
||||
- `OLLAMA_TIMEOUT`: Ollama request timeout in seconds, defaults to `180`.
|
||||
|
||||
## Safety Model
|
||||
|
||||
|
||||
Reference in New Issue
Block a user