AWS Firewall Manager integration

FortiGate CNF is integrated with AWS Firewall Manager.

All FortiGate CNF adminstration can be done through the FortiGate CNF console, but you can optionally perform the following actions through the AWS Firewall Manager console:

• Create FortiGate CNF instances.

• Apply policy sets to instances.

  If you create an instance in Firewall Manager, you must apply the policy set through Firewall Manager after creating the policy set in the FortiGate CNF console.

  You must create and configure policies and policy sets in the FortiGate CNF console. They cannot be configured in AWS Firewall Manager. See Configuration.

  In the CNF Instances table, the Managed by column indicates whether the instance is created through AWS Firewall Manager or directly in the FortiGate CNF console. If you created the instance through AWS Firewall Manager, then the Configure Policy Set tab is disabled and you must use AWS Firewall Manager to apply the policy set.

For more information about managing FortiGate CNF instances with AWS Firewall Manager, see Using AWS Firewall Manager.