FortiDeploy is a product built into FortiGate Cloud for zero-touch provisioning when devices are deployed locally or remotely. FortiDeploy provides automatic connection of FortiGates to be managed by FortiGate Cloud or a FortiManager.
At time of purchase, you can order a FortiDeploy SKU in addition to your FortiGate Cloud subscription.
When you visit the FortiGate Cloud portal and enter the FortiDeploy bulk key, you see a list of serial numbers from the order that contained the FortiDeploy SKU. After you confirm that the devices are connected, you can perform basic configuration on the devices remotely, such as sending a FortiManager IP address to all remote FortiGates, so that the FortiManager can manage them remotely.
FortiDeploy support starts the moment you send an email to firstname.lastname@example.org. You can also contact email@example.com if you have already purchased a FortiGate Cloud subscription and want to purchase FortiDeploy to add to your existing subscription.
FortiDeploy requires a FortiGate model that supports the zero-touch provisioning (autojoin) feature. FortiGate/FortiWiFi/POE desktop and 1U models up to 900D support the zero touch provisioning feature. The FortiDeploy server can push FortiManager settings to devices that fulfill this requirement. It is recommended for trained personnel to handle larger deployments. FortiDeploy is available for devices running FortiOS 5.2.2 and later.
From FortiOS 5.2.3 and later, the
auto-join-forticloud option is enabled by default. It must be enabled for FortiDeploy to function correctly. You can ensure that the option is enabled by running the following commands:
config system fortiguard
set auto-join-forticloud enable
After changing this setting, restart the device and ensure that the device is sending traffic to FortiGate Cloud to verify that you have configured it correctly.
If your device is connected to FortiGate Cloud but not cloud-managed, ensure that central management is set to FortiGuard:
config system central-management
set type fortiguard
Reboot the device, log into FortiGate Cloud, and see if you can manage the device.
The default address of the internal or LAN interface is the 192.168.1.0/24 subnet. IP conflicts can occur with departmentalization devices. You can unset each device's default IP address:
config system interface
config system interface
You can change the web-based management interface's internal interface IP address in Network > Interfaces.