Fortinet black logo

New Features

FortiManager connector relay to AWS will proxy all individual FortiGate requests

FortiManager connector relay to AWS will proxy all individual FortiGate requests

Note

This information is also available in the FortiManager 7.4 Administration Guide:

FortiManager connector relay to AWS will proxy all individual FortiGate requests.

This feature can only be configured using the CLI.

To configure the FortiManager connector relay to AWS:
  1. In the FortiGate CLI, create the proxy object:

    config system sdn-proxy<---- new object

    edit <sdn-proxy name>

    set type fortimanager

    set server <server address>

    set username <username">

    set password <password>

    next

    end

  2. In the FortiGate CLI, configure the SDN connector to use the proxy.

    config system sdn-connector

    edit "aws1"

    set proxy <sdn-proxy name><---- new property

    set use-metadata-iam disable

    set access-key <access>

    set secret-key <secret>

    set region "us-west-2"

    next

    end

  3. On the FortiManager, you can manage the SDN proxy daemon with the following commands in the CLI:
    • The sdnproxy daemon is able to restart by using the diagnose test application sdnproxyd <xx> command where xx is the level of debug.
    • The sdnproxy daemon shows debug logs using the diagose debug application sdnproxy <xx> command where xx is the level of debug.

FortiManager connector relay to AWS will proxy all individual FortiGate requests

Note

This information is also available in the FortiManager 7.4 Administration Guide:

FortiManager connector relay to AWS will proxy all individual FortiGate requests.

This feature can only be configured using the CLI.

To configure the FortiManager connector relay to AWS:
  1. In the FortiGate CLI, create the proxy object:

    config system sdn-proxy<---- new object

    edit <sdn-proxy name>

    set type fortimanager

    set server <server address>

    set username <username">

    set password <password>

    next

    end

  2. In the FortiGate CLI, configure the SDN connector to use the proxy.

    config system sdn-connector

    edit "aws1"

    set proxy <sdn-proxy name><---- new property

    set use-metadata-iam disable

    set access-key <access>

    set secret-key <secret>

    set region "us-west-2"

    next

    end

  3. On the FortiManager, you can manage the SDN proxy daemon with the following commands in the CLI:
    • The sdnproxy daemon is able to restart by using the diagnose test application sdnproxyd <xx> command where xx is the level of debug.
    • The sdnproxy daemon shows debug logs using the diagose debug application sdnproxy <xx> command where xx is the level of debug.