Number of managed FortiSwitch devices should not exceed 80% of the FortiGate's maximum capacity (table size).

Should enable strict tunnel mode to enforce switch controller to use cipher set in FortiOS.

Policies should not combine proxy and flow inspection modes.

All devices in the Security Fabric should have compatible firmware versions.