Product Pillars
Network Security
Network Security
NOC & SOC Management
Enterprise Networking
Business Communications
Zero Trust Access
ZTNA
SASE
Identity
Cloud Security
Hybrid Cloud Security
Cloud Native Protection
Web Application / API Protection
SAAS Security
Security Operations
SOC Platform
Advanced Threat Protection
Endpoint Security
Best Practices
Solution Hubs
Curated links by solution
Cloud
Popular Solutions
4-D Resources
Define, Design, Deploy, Demo
Hardware Guides
Product A-Z

Version:

7.2.0
7.0.0
6.4.0

Version:

6.2.0
6.0.0
5.6.0

Table of Contents

Best Practices

6.2.0
7.2.0
7.0.0
6.4.0
6.2.0
6.0.0
5.6.0
Download PDF
Copy Link

ADOM Design

Enable ADOMs to support logs other than FortiGate logs (including Syslog and FortiClient EMS). You do not need to separate ADOMs by FortiOS versions.

In version 5.4.x, the following applies to version 5.4.4 and higher. In version 5.6.x, it applies to version 5.6.1 and higher:

When creating, editing, or viewing ADOMs, the version is displayed only if FortiManager features are enabled.

If your devices have a mix of high-volume and low-volume log rates, put high-volume log rate devices in one ADOM and low-volume log rate devices in another ADOM. This helps prevent quota enforcement from adversely affecting the low-volume log devices. For best practices about setting quotas for ADOMs, see Allocate quota and set log retention policy.

For more information, see the FortiAnalyzer Administration Guide.

ADOM considerations

A large number of ADOMs can significantly increase the size of configuration files which increases backup and restore time. Do not create more ADOMs than your business needs.

ADOM Design

Enable ADOMs to support logs other than FortiGate logs (including Syslog and FortiClient EMS). You do not need to separate ADOMs by FortiOS versions.

In version 5.4.x, the following applies to version 5.4.4 and higher. In version 5.6.x, it applies to version 5.6.1 and higher:

When creating, editing, or viewing ADOMs, the version is displayed only if FortiManager features are enabled.

If your devices have a mix of high-volume and low-volume log rates, put high-volume log rate devices in one ADOM and low-volume log rate devices in another ADOM. This helps prevent quota enforcement from adversely affecting the low-volume log devices. For best practices about setting quotas for ADOMs, see Allocate quota and set log retention policy.

For more information, see the FortiAnalyzer Administration Guide.

ADOM considerations

A large number of ADOMs can significantly increase the size of configuration files which increases backup and restore time. Do not create more ADOMs than your business needs.