FortiManager provisioning templates offer a scalable way to manage device configurations. A template group is a container that can hold various types of templates, including a System Template for device-level settings and an SD-WAN Template for SD-WAN rules and members, allowing for comprehensive device setup. Within a template group, multiple CLI templates can be included. These are applied sequentially in the order they are listed, from top to bottom, ensuring a predictable configuration outcome. A CLI template group is flexible and can contain both static CLI scripts (for fixed commands) and dynamic Jinja scripts (for programmatic and variable-based configurations), which are the two types of CLI templates available.

B: There is no officially documented limit of only three IPsec tunnel templates per template group. The platform allows for more, subject to system capabilities.

E: A CLI template can be a CLI script or a Jinja script. FortiManager uses the Jinja2 templating engine, not Perl, for dynamic script creation.

1. FortiManager Administration Guide 7.4

Version 7.4.1

Page 419

"Template groups": "A template group is a collection of provisioning templates that you can create and assign to a managed device or a device group... You can add the following provisioning templates to a template group: System Template

SD-WAN Template..." This supports option A.

2. FortiManager Administration Guide 7.4

Version 7.4.1

Page 441

"CLI templates": "When you add multiple CLI templates to a template group

the templates are applied to the managed device in order from top to bottom." This supports option C.

3. FortiManager Administration Guide 7.4

Version 7.4.1

Page 441

"CLI templates": "CLI templates can be either a CLI script or a Jinja script." This statement confirms the two types of CLI templates

refuting option E's mention of "Perl script" and supporting the premise of option D that a group can contain both types.

4. FortiManager Administration Guide 7.4

Version 7.4.1

Page 441

"CLI template groups": "You can add multiple CLI templates and Jinja scripts to a CLI template group." This directly supports option D.