Fabric Coverage
|
FortiAP Firmware Versions |
Non-FortiLink interfaces should not have multiple VLANs configured on them. |
|
FortiCare Support |
Appropriate devices should be registered with FortiCare and have valid support coverage. |
|
Anti-Spam |
Anti-Spam subscription should be valid. |
|
AntiVirus |
AntiVirus subscription should be valid. |
|
Firmware & General Updates |
Firmware & General Updates subscription should be valid. |
|
IPS |
IPS subscription should be valid. |
|
Outbreak Prevention |
Outbreak Prevention subscription should be valid. |
|
Web Filtering |
Web Filtering subscription should be valid. |
|
Third Party Router & NAT Devices |
No third-party router or NAT devices should be detected in the network. |
|
Unauthorized FortiAPs |
All discovered FortiAPs should be authorized or disabled. |
|
Advanced Threat Protection |
Suspicious files should be submitted to FortiSandbox appliance or FortiGate Cloud Sandbox for inspection. |
|
Compatible Firmware |
All devices in the Security Fabric should have compatible firmware versions. |
|
FortiSandbox |
All FortiGates in the Security Fabric can connect to their configured FortiSandbox. |
One best practice is not met due to the missing dependency of an additional subscription:
|
Security Rating |
Security Rating subscription should be valid. |