Configuring FortiManager Cloud service
This cloud-based SaaS management service is available through FortiManager. This service is included in FortiCloud accounts with a FortiManager Cloud account level subscription (ALCI).
Configuring a per-device license
Once the FortiGate has acquired a contract named FortiManager Cloud, FortiCloud creates a cloud-based FortiManager instance under the user account. You can launch the portal for the cloud-based FortiManager from FortiCloud, and its URL starts with the User ID.
You can use a FortiGate with a contract for FortiManager Cloud to configure central management by using the FQDN of fortimanager.forticloud.com. A FortiGate-FortiManager tunnel is established between FortiGate and the FortiManager instance.
After the tunnel is established, you can execute FortiManager functions from the cloud-based FortiManager portal.
To configure FortiManager Cloud central management:
- Enable FortiManager Cloud:
- Go to Security Fabric > Fabric Connectors and double-click the FortiManager card.
- For Status, click Enable.
- For Type, click FortiManager Cloud.
- Click OK.
The FortiManager Cloud button can only be selected if you have a FortiManager Cloud product entitlement.
- In the FortiManager Cloud instance, go to Device Manager and authorize the FortiGate. See Authorizing devices for more information.
When using FortiGate to enable FortiManager Cloud, the FortiGate appears as an unauthorized device.
After authorizing the FortiGate, it becomes a managed device.
In FortiOS, the Security Fabric > Fabric Connectors page now displays green arrow in the FortiManager card because FortiManager Cloud is registered.
Diagnostics
To verify the contract information:
# diagnose test update info contract
...
System contracts:
...
Account contracts:
FMGC,Thu Dec 2 16:00:00 2021
...
To verify the FortiManager Cloud instance has launched and the FortiGate is registered:
# diagnose fdsm central-mgmt-status Connection status: Up Registration status: Registered