Administration Guide

Setting up FortiManager
- Connecting to the GUI
  - FortiManager Setup wizard
  - Activating VM licenses
- Security considerations
- GUI overview
- FortiAnalyzer Features
  - Enable or disable FortiAnalyzer features
- Initial setup
- Restarting and shutting down
FortiManager Key Concepts
- Communication through protocols
- Configuration through Device Manager
- ADOMs and devices
- Operations
- Key features of the FortiManager system
Dashboard
- Customizing the dashboard
- System Information widget
- System Resources widget
- License Information widget
- Unit Operation widget
- Alert Messages Console widget
- Log Receive Monitor widget
- Insert Rate vs Receive Rate widget
- Log Insert Lag Time widget
- Receive Rate vs Forwarding Rate widget
- Disk I/O widget
- Device widgets
- Restart, shut down, or reset FortiManager
Device Manager
- ADOMs
- Device & Groups
- Scripts
- Provisioning Templates
- Firmware templates
- Monitors
- FortiMeter
- FortiGate chassis devices
  - Viewing chassis dashboard
Policy & Objects
- About policies
  - Policy theory
  - Global policy packages
- Policy workflow
  - Provisioning new devices
  - Day-to-day management of devices
- Feature visibility
- Managing policy packages
- Managing policies
- Using Policy Blocks
- Managing objects and dynamic objects
- ADOM revisions
AP Manager
- Managed FortiAPs
- WiFi Maps
  - Google map
  - Floor map
- WiFi profiles and settings for central management
- WiFi profiles and settings for per-device management
  - Enabling FortiAP per-device management
  - Creating profiles
VPN Manager
- Overview
- Enabling central VPN management
- DDNS support
- VPN Setup Wizard supports device groups
- IPsec VPN
- SSL VPN
- VPN security policies
  - Defining policy addresses
  - Defining security policies
Fabric View
- Security Fabric Topology
- Security Rating
  - Viewing Security Fabric Ratings
  - Security Fabric score
- Fabric Connectors
  - Core Network Security
    - Creating FortiClient EMS connectors
- External Connectors
- Cloud Orchestration
FortiGuard
- Device licenses
  - View licensing status
- Package management
- Query services
- Firmware images
- Download prioritization
  - Product download prioritization
  - Package download prioritization
- External resources
- Settings
- Enabling FDN third-party SSL validation and Anycast support
- Configuring devices to use the built-in FDS
- Configuring FortiGuard services
- Logging events related to FortiGuard services
  - Logging FortiGuard antivirus and IPS updates
  - Logging FortiGuard web or email filter events
- Restoring the URL or antispam database
FortiSwitch Manager
- Managed FortiSwitches
- FortiSwitch central management
  - Enabling FortiSwitch central management
  - FortiSwitch Templates
- FortiSwitch per-device management
Extender Manager
- Managed extenders
  - Managing FortiExtender devices
- Extender profiles
System Settings
- Logging Topology
- Network
- RAID Management
- Administrative Domains (ADOMs)
- Certificates
- Event Log
  - Event log filtering
- Task Monitor
- Mail Server
- Syslog Server
  - Send local logs to syslog server
- Meta Fields
- Device logs
  - Configuring rolling and uploading of logs using the GUI
  - Configuring rolling and uploading of logs using the CLI
- File Management
- Miscellaneous Settings
Administrators
- Trusted hosts
- Monitoring administrators
- Disconnecting administrators
- Managing administrator accounts
- Restricted administrators
- Administrator profiles
- Workspace
- Authentication
- Global administration settings
- Multi-factor authentication
  - Multi-factor authentication with FortiAuthenticator
    - Configuring FortiAuthenticator
    - Configuring FortiManager
  - Multi-factor authentication with FortiToken Cloud
High Availability
- Synchronizing the FortiManager configuration and HA heartbeat
- If the primary or a backup unit fails
- FortiManager HA cluster startup steps
- Configuring HA options
- Monitoring HA status
- Upgrading the FortiManager firmware for an operating cluster
Management Extensions
- FortiAIOps MEA
- FortiSigConverter MEA
- FortiSOAR MEA
- FortiWLM MEA
- Policy Analyzer MEA
- Universal Connector MEA
- Enabling management extension applications
  - CLI for management extensions
- Accessing management extension logs
- Checking for new versions and upgrading
Appendix A - Supported RFC Notes
Appendix B - Policy ID support
Appendix C - Re-establishing the FGFM tunnel after VM license migration
Appendix D - FortiManager Ansible Collection documentation
Change Log

Home FortiManager 7.4.5 Administration Guide

7.4.5

Using Fortinet recommended extender profiles

FortiManager includes factory default extender profiles recommended by Fortinet.

The Fortinet recommended profiles are based on Fortinet security best practices, and they are created based on the most relevant network topologies Fortinet sees with customer implementation. The configuration is validated by Fortinet field engineers and security experts.

The following Fortinet recommended extender profile is available:

Fortinet_Default_FEXT_Profile

You can use recommended profiles by activating them from the Extender Manager > Extender Profiles menu in FortiManager and then configuring them to meet your requirements.

To use Fortinet recommended extender profiles:

To use recommended FortiExtender templates:

The recommended Extender Profile is shown in Extender Manager > Extender Profiles on the FortiExtender Profile tab.
An extender profile can be created by activating the recommended FortiExtender profile.
1. Right-click on the recommended FortiExtender profile and click Activate.
2. Choose a model for the template.
3. Enter a name for the FortiExtender profile and configure the remaining settings as needed.
The created extender profile can be assigned to an extender, then the user can deploy the settings.
1. Right-click on a managed FortiExtender and click Assign Profiles.
2. Select the configured FortiExtender Profile, and click OK.