Virtual Domains

Virtual Domains (VDOMs) are used to divide a FortiGate into two or more virtual units that function independently. VDOMs can provide separate security policies and, in NAT mode, completely separate configurations for routing and VPN services for each connected network.

Multiple VDOMs can be created and managed as independent units in multi-VDOM mode.

The number of FortiGate units is dependent on the FortiGate series and many FortiGate models support purchasing a license key to increase the maximum number. For example, 200 to 400 series FortiGates support 25 VDOMs while 500 to 900 series FortiGates support 50 VDOMs. Some exceptions may apply.

The following topics provide an overview of VDOM concepts, topologies, best practices, and the general configurations involved when working with multi-VDOM mode:

• VDOM overview

• General configurations

• Configuring global profiles

• Backing up and restoring configurations in multi-VDOM mode

The following topics provide examples of configuring VDOMs:

• Inter-VDOM routing configuration example: Internet access

• Inter-VDOM routing configuration example: Partial-mesh VDOMs