(Optional) Adding security profiles to the Security Fabric
Security Fabric allows you to distribute security profiles to different FortiGates in your network, which can lessen the workload of each device and avoid creating bottlenecks. For example, you can implement antivirus scanning on External while the ISFW FortiGates apply application control and web filtering.
This results in distributed processing between the FortiGates in the Security Fabric, which reduces the load on each one. It also allows you to customize the web filtering and application control for the specific needs of the Accounting network as other internal networks may have different application control and web filtering requirements.
This configuration might result in threats getting through External so you should very closely limit access to the network connections between the FortiGates in the network.
- On External, go to Policy & Objects > IPv4 Policy and edit the policy allowing traffic from Accounting to the Internet.
Under Security Profiles, enable AntiVirus and select the default profile.
Do the same for the policy allowing traffic from Marketing to the Internet.
- On Accounting, go to Policy & Objects > IPv4 Policy and edit the policy allowing traffic from the Accounting network to the Internet.
Under Security Profiles, enable Web Filter and Application Control, and select the default profiles for both.
Repeat this step for both Marketing and Sales.
