Split-task VDOM mode

In split-task VDOM mode, the FortiGate has two VDOMs: the management VDOM (root) and the traffic VDOM (FG-traffic).

The management VDOM is used to manage the FortiGate, and cannot be used to process traffic.

The following GUI sections are available when in the management VDOM:

  • The Status dashboard
  • Security Fabric topology and settings (read-only, except for HTTP Service settings)
  • Interface and static route configuration
  • FortiClient configuration
  • Replacement messages
  • Certificates
  • System events
  • Log and email alert settings
  • Threat weight definitions

The traffic VDOM provides separate security policies, and is used to process all network traffic.

The following GUI sections are available when in the traffic VDOM:

  • The Status, Top Usage LAN/DMZ, and Security dashboards
  • Security Fabric topology, settings (read-only, except for HTTP Service settings), and External Connectors (Endpoint/Identity connectors only)
  • FortiView
  • Interface configuration
  • Packet capture
  • SD-WAN, SD-WAN Rules, and Performance SLA
  • Static and policy routes
  • RIP, OSPF, BGP, and Multicast
  • Replacement messages