When operating in Multi VDOM mode, the FortiGate-7000E uses the Security Fabric for communication and synchronization among the FIMs and FPMs. By default, the Security Fabric is enabled. You can verify this from the GUI by going to Security Fabric > Settings and verifying that FortiGate Telemetry is enabled.
In addition to FortiGate telemetry being enabled, the default Security Fabric role is set to Serve as Fabric Root and the Fabric name is SLBC. When operating in Multi VDOM mode, the role and fabric name must not be changed.
You can also verify the default Security Fabric configuration from the CLI:
config system csf
set status enable
set upstream-ip 0.0.0.0
set upstream-port 8013
set group-name "SLBC"
set group-password <password>
set configuration-sync local
set management-ip <ip-address>
set management-port 44300
management-ip is set to the IP address of the mgmt interface.
While operating in Multi VDOM mode, you should not change the Security Fabric configuration from the CLI or the FortiGate Telemetry configuration from the GUI. And you cannot add the FortiGate-7000E to a Security Fabric. Multi VDOM mode also does not support the Security Rating feature.
The Security Rating feature is available in Split-Task VDOM mode.
You can go to Security Fabric > Settings > FortiGate Telemetry to enable and configure FortiAnalyzer logging.
Multi VDOM mode also supports all other configurations on the Security Fabric > Settings menu, including Central Management, Sandbox Inspection, Fabric Devices, and FortiClient Endpoint Management System (EMS). You can also view the Physical Topology and Local Topology and configure Automation and Fabric Connectors.