Optimizing the FortiSwitch network
Starting in FortiOS 6.4.2 with FortiSwitchOS 6.4.2, you can check your FortiSwitch network and get recommendations on how to optimize it. If you agree with the configuration recommendations, you can accept them, and they are automatically applied.
Starting in FortiOS 7.0.8, a new test checks the FortiSwitchOS version on the managed switches. If the FortiSwitchOS version is 7.0.0 or higher, FortiOS recommends using the strict tunnel mode, which enforces the use of strong encryption. If the managed switches are running an older firmware version, FortiOS recommends upgrading to FortiSwitchOS 7.0.0 or higher.
To set the tunnel mode to strict in FortiOS:
config switch-controller system
set tunnel-mode strict
end
NOTE: The Security Rating feature is available only when VDOMs are disabled.
To optimize your FortiSwitch network:
- Go to Security Fabric > Security Rating.
- Select Run Now (under Report Details in the right pane) to generate the Security Rating report.
- Select the Optimization section.
- Under Failed, select + next to each item to see more details in the right pane.
- If you agree with a suggestion in the Recommendations section, select Apply for the change to be made.
