Fabric Overlay Orchestrator (FortiOS 7.2.4)

FortiOS 7.2.4 and later includes a Fabric Overlay Orchestrator that simplifies deployments of SD-WAN regions where FortiManager is not required. Fabric Overlay Orchestrator is designed to provide an easy to configure, self-orchestrated SD-WAN overlay region setup inside a single Security Fabric architecture. The Fortinet Security Fabric forms the SD-WAN region and automatically connects authorized devices within the region.

Fabric Overlay Orchestrator is built into FortiOS, allowing devices inside the Security Fabric to automatically interconnect and self-form a new SD-WAN region. In just a few clicks, devices inside the Security Fabric may share telemetry data to self-orchestrate and interconnect with SD-WAN overlays, allowing seamless connectivity between remote devices, no matter where they are located. Fabric Overlay Orchestrator is initially designed to assist with smaller deployments, such as SMB and single hub environments, where FortiManager may not be required. Devices simply elect to join the SD-WAN region, and the fabric root device orchestrates the rest. One approach could be to deploy a FGT-VM in the datacenter or public cloud (for example, AWS, GCP, or Azure), and set up the FGT-VM as the fabric root, and then allow branch or site locations to quickly connect to the root device to join the fabric and build up an overlay VPN community with just a few simple clicks. Supported topologies are single hub and branch to branch connectivity.