Skip to main content
Glama
rstierli

FortiManager MCP Server

by rstierli

update_device_sslvpn_settings

Update SSL-VPN settings on a managed FortiManager device, changing only the fields you provide for port, authentication, certificates, DNS, timeouts, and TLS version.

Instructions

Update the SSL-VPN (Agentless VPN) settings object in a device's device DB.

Only provided fields change -- see get_device_sslvpn_settings for the current state to base a partial update on.

Args: device: Managed device name status: Enable/disable SSL-VPN: "disable" or "enable" port: SSL-VPN access port (1-65535) source_interface: Source interface names of incoming traffic default_portal: Default web portal name (see update_device_sslvpn_web_portal) servercert: Server certificate name to present to clients idle_timeout: Idle timeout in seconds before disconnect auth_timeout: Authentication timeout in seconds (1-259200, 0 = no timeout) dns_server1: Primary DNS server handed to clients dns_server2: Secondary DNS server handed to clients reqclientcert: Require client certificates: "disable" or "enable" https_redirect: Redirect port 80 to the SSL-VPN port: "disable" or "enable" ssl_min_proto_ver: Minimum TLS version: "tls1-0", "tls1-1", "tls1-2" or "tls1-3" vdom: VDOM the settings apply to (default "root")

Returns: Update result

Input Schema

NameRequiredDescriptionDefault
portNo
vdomNoroot
deviceYes
statusNo
servercertNo
dns_server1No
dns_server2No
auth_timeoutNo
idle_timeoutNo
reqclientcertNo
default_portalNo
https_redirectNo
source_interfaceNo
ssl_min_proto_verNo

Output Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv1.12.0

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It usefully discloses that only provided fields change, documents allowed values and ranges, and notes the default VDOM, but it does not mention permissions, whether changes take effect immediately, commit requirements, or reversibility.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core action and partial-update rule, followed by a necessary parameter list for a 14-parameter tool. The only minor waste is the redundant "Returns: Update result" line, since an output schema exists.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex mutation tool with no annotations, the description covers the parameters, partial-update semantics, and related objects well enough for correct invocation. It is slightly incomplete on operational preconditions such as whether referenced certificates or portals must already exist and whether a commit/install step is required.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate fully, and it does: every parameter is documented with meaning, allowed values, ranges, defaults, or related-tool references. This is substantially more informative than the bare schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: updating the SSL-VPN settings object in a device's device DB. It distinguishes itself from sibling tools by referencing get_device_sslvpn_settings for current state and update_device_sslvpn_web_portal for the related portal object.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It clearly explains the partial-update behavior and directs the agent to get_device_sslvpn_settings before updating. It does not explicitly state when to use this versus update_device_sslvpn_web_portal, but the cross-reference for default_portal provides useful routing context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools