All Fortinet devices included in a Security Fabric can be placed into a Security Fabric ADOM, allowing for fast data processing and log correlation. Fabric ADOMs enable combined results to be presented in the Device Manager, Log View, SOC, Incidents & Events and Reports panes.
In a Fabric ADOM:
- Device Manager: View and add all Fortinet devices in the Security Fabric to the Fabric ADOM, including FortiGate, FortiSandbox, FortiMail, FortiDDoS, and FortiClient EMS.
- Log View: View logs from all Security Fabric devices.
- SOC: FortiDDoS and FortiClient EMS widgets are available.
- Incidents & Events: Predefined event handlers for FortiGate, FortiSandbox, FortiMail, and FortiWeb ADOMs are available, and triggered events are displayed for all device types.
- Reports: View predefined reports, templates, datasets, and charts for all device types. Charts from all device types can be inserted into a single report.
- In FortiAnalyzer, go to System Settings > All ADOMs.
- Select Create New.
- Configure the settings for the new Fabric ADOM and select Fabric as the type.
See Creating ADOMs for more information on the individual settings.
- Select OK to create the ADOM.
The Fabric ADOM is listed under the Security Fabric section of All ADOMs.