Fortinet Document Library

Version:

Version:

Version:


Table of Contents

Administration Guide

Download PDF
Copy Link

FortiAI

FortiAI can be added to the Security Fabric so it appears in the topology views and the dashboard widgets.

To add FortiAI to the Security Fabric in the GUI:
  1. Enable the Security Fabric and configure the interface to allow other Security Fabric devices to join (see Configuring the root FortiGate and downstream FortiGates for more details).

  2. In FortiAI, configure the device to join the Security Fabric:
    1. Go to Security Fabric > Fabric Connectors and double-click the connector card.
    2. Click the toggle to Enable Security Fabric.
    3. Enter the FortiGate Root IP address and the FortiAI IP address.

    4. Click OK.
  3. Authorize the FortiAI in FortiOS:
    1. Go to Security Fabric > Fabric Connectors.
    2. In the topology tree, click the highlighted FortiAI serial number and select Authorize.

      The authorized device appears in the topology tree. Hover over the device name to view the tooltip.

      The Security Fabric widget on the dashboard also updates when the FortiAI is authorized.

  4. Go to Security Fabric > Physical Topology or Security Fabric > Logical Topology to view more information.

    Physical topology view:

    Logical topology view:

To add FortiAI to the Security Fabric in the CLI:
  1. Configure the interface to allow other Security Fabric devices to join:
    config system interface
        edit "port1"
            ...
            set allowaccess ping https ssh http fgfm fabric
            ...
        next
    end
  2. Enable the Security Fabric:
    config system csf
        set status enable
        set group-name "csf-b"
    end
  3. In FortiAI, configure the device to join the Security Fabric:
    config system csf
        set status enable
        set upstream-ip 172.18.64.122
        set managment-ip 172.18.64.114
    end
  4. Authorize the FortiAI in FortiOS:
    config system csf
        set status enable
        set group-name "csf-b"
        config trusted-list
            edit "FAIVMSTM21000000"
                set authorization-type certificate
                set certificate "*******************"
            next
        end
    end

FortiAI

FortiAI can be added to the Security Fabric so it appears in the topology views and the dashboard widgets.

To add FortiAI to the Security Fabric in the GUI:
  1. Enable the Security Fabric and configure the interface to allow other Security Fabric devices to join (see Configuring the root FortiGate and downstream FortiGates for more details).

  2. In FortiAI, configure the device to join the Security Fabric:
    1. Go to Security Fabric > Fabric Connectors and double-click the connector card.
    2. Click the toggle to Enable Security Fabric.
    3. Enter the FortiGate Root IP address and the FortiAI IP address.

    4. Click OK.
  3. Authorize the FortiAI in FortiOS:
    1. Go to Security Fabric > Fabric Connectors.
    2. In the topology tree, click the highlighted FortiAI serial number and select Authorize.

      The authorized device appears in the topology tree. Hover over the device name to view the tooltip.

      The Security Fabric widget on the dashboard also updates when the FortiAI is authorized.

  4. Go to Security Fabric > Physical Topology or Security Fabric > Logical Topology to view more information.

    Physical topology view:

    Logical topology view:

To add FortiAI to the Security Fabric in the CLI:
  1. Configure the interface to allow other Security Fabric devices to join:
    config system interface
        edit "port1"
            ...
            set allowaccess ping https ssh http fgfm fabric
            ...
        next
    end
  2. Enable the Security Fabric:
    config system csf
        set status enable
        set group-name "csf-b"
    end
  3. In FortiAI, configure the device to join the Security Fabric:
    config system csf
        set status enable
        set upstream-ip 172.18.64.122
        set managment-ip 172.18.64.114
    end
  4. Authorize the FortiAI in FortiOS:
    config system csf
        set status enable
        set group-name "csf-b"
        config trusted-list
            edit "FAIVMSTM21000000"
                set authorization-type certificate
                set certificate "*******************"
            next
        end
    end