IoT query service support 7.2.1

When FortiManager acts as a management update server to managed FortiGates for the Internet of Things (IoT) Device Identification service, FortiManager sends the IoT collection reports from FortiGate to FortiGuard Distribution Server (FDS).

When FortiManager acts as an FDS in closed networks, you can use the following network design modes: cascade mode or air gap mode. For FortiManager devices in cascade mode that are managing FortiGates with the IoT Device Identification service, you must set service-type to iot-collect on the downstream FortiManager devices to enable them to send the IoT collection reports from FortiGates to the upstream FortiManager device to send to FDS.

For more information about the network design modes in closed networks, see the FortiManager Best Practices Guide. For information about using the built-in FDS available with FortiManager, see the FortiManager 7.2 Administration Guide.

To enable sending of IoT collection reports to FDS:

1. Enable IoT services for query and collect:

   config fmupdate service
       set query-iot enable
   end
   

2. If you are using FortiManager devices in cascade mode in a closed network, set the service-type to iot-collect on downstream FortiManager devices:

   config fmupdate web-spam fgd-setting
       config server-override
           set status enable
               config servlist
                   edit 1
                           ......
                           set service-type iot-collect
                       next
                   end
           end
   end