Fortinet black logo

Handbook

FortiManager

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:110148
Download PDF

FortiManager

When you add a FortiManager to the root FortiGate in the Security Fabric, it automatically synchronizes with any connected Security Fabric devices that are downstream. To add FortiManager to the Security Fabric, you must configure central management on the root FortiGate. Once you configure these settings, the root FortiGate pushes them to the other FortiGate devices in the Security Fabric. The FortiManager must have Internet access.

The following steps also ensure that the FortiGate can receive antivirus and IPS updates and allow remote management through the FortiManager system or FortiCloud service. The FortiManager device provides remote management of a FortiGate over TCP port 541. You must enable the FortiGate management option so the FortiGate can accept management updates to firmware and FortiGuard services.

Registering a FortiGate ensures that it receives updates to FortiGuard services. It also gives you access to technical support. To register the FortiGate, visit the Fortinet Support website.

To add a FortiManager to the root FortiGate - GUI:
  1. On the root FortiGate, go to Security Fabric > Settings.
  2. Enable Central Management.
  3. In the Type field, select FortiManager.
  4. Enter the IP/Domain Name for the FortiManager.
  5. Select Apply.
  6. On the FortiManager, go to Device Manager. The FortiGate devices in the Security Fabric are listed as Unregistered Devices.
  7. Select the FortiGate devices, then select +Add.
  8. Select OK.
To configure the FortiGate - CLI:

config system central-management

set type fortimanager

set fmg {<IP_address> | <FQDN_address>}

end

Related Videos

sidebar video

Fortinet Security Fabric 6.0.0 Series - Part 4: Connectors

  • 1,339 views
  • 5 years ago

FortiManager

When you add a FortiManager to the root FortiGate in the Security Fabric, it automatically synchronizes with any connected Security Fabric devices that are downstream. To add FortiManager to the Security Fabric, you must configure central management on the root FortiGate. Once you configure these settings, the root FortiGate pushes them to the other FortiGate devices in the Security Fabric. The FortiManager must have Internet access.

The following steps also ensure that the FortiGate can receive antivirus and IPS updates and allow remote management through the FortiManager system or FortiCloud service. The FortiManager device provides remote management of a FortiGate over TCP port 541. You must enable the FortiGate management option so the FortiGate can accept management updates to firmware and FortiGuard services.

Registering a FortiGate ensures that it receives updates to FortiGuard services. It also gives you access to technical support. To register the FortiGate, visit the Fortinet Support website.

To add a FortiManager to the root FortiGate - GUI:
  1. On the root FortiGate, go to Security Fabric > Settings.
  2. Enable Central Management.
  3. In the Type field, select FortiManager.
  4. Enter the IP/Domain Name for the FortiManager.
  5. Select Apply.
  6. On the FortiManager, go to Device Manager. The FortiGate devices in the Security Fabric are listed as Unregistered Devices.
  7. Select the FortiGate devices, then select +Add.
  8. Select OK.
To configure the FortiGate - CLI:

config system central-management

set type fortimanager

set fmg {<IP_address> | <FQDN_address>}

end