Fortinet black logo

FortiLAN Cloud User Guide

Key Concepts

Key Concepts

This section describes the key concepts related to using FortiLAN Cloud.

FortiAP

FortiLAN Cloud centralizes the life-cycle management of your standalone FortiAP deployment with a simple, intuitive, and easy-to-use cloud interface that is accessible from anywhere at any time. With FortiLAN Cloud, you can deploy, configure, and manage your FortiAP devices. FortiLAN Cloud also offers enhanced visibility, monitoring, reporting, and analytics features for your FortiAP devices. FortiLAN Cloud also supports the FortiAP-S and FortiAP-U series which combine the elements of universal threat protection (UTP) protection at the network edge.

If you are interested in cloud management of FortiAP devices that are already connected to FortiGate devices, then use FortiGate Cloud, not FortiLAN Cloud.

FortiSwitch

FortiLAN Cloud provides management as a service (MaaS) for secure switching infrastructure deployed with FortiSwitch devices. It provides a centralized discovery, visibility, and configuration management solution without the need of on-premise hardware, software, or management overhead. FortiLAN Cloud manages FortiSwitch devices in standalone mode.

REST API

REST (REpresentational State Transfer) is a modern, scalable (but not high performance) client-server based RPC technique using existing HTTP protocol methods (such as GET, POST, PUT, DELETE) on server resources (identified by URLs) and transferring the resources in either XML / JSON / HTML representation. FortiLAN Cloud REST API provides functions similar to its GUI functions, both configuration and monitoring are supported over REST API. The FortiLAN Cloud REST APIs are integrated with FortiCloud IAM users, you can use REST APIs as a local user or an IAM user.

FortiLAN Cloud Account Inventory

The FortiAP device deployment and registration is supported via the FortiLAN Cloud GUI, REST APIs, and FortiCloud account inventory (https://support.fortinet.com/). FortiLAN Cloud periodically synchronizes the FortiAPs with FortiCloud, to import registered devices and remove un-registered devices. The FortiAPs registered in your account in FortiCloud automatically appear in the Inventory Devices tab.

Note: If an account has no FortiAP device in any FortiLAN Cloud domain, then manual synchronization is required at least once. Click the refresh icon at top right corner of the Devices page.

FortiLAN Cloud SKUs

For license ordering details such as stock keeping unit (SKU) codes, see the FortiLAN Cloud Data Sheet.

Note

FortiAP-S and F-Series or later FortiAP-U family access points communicate with FortiCare/FortiGuard service to get UTP updates (for AV, IPS engine and database) when its FortiGuard subscription is valid.

Regions

Data centers are located in Canada, Germany, Japan, and the US for better performance and GDPR compliance for international customers. FortiLAN Cloud includes the Global, Europe, US, and Japan regions.

You can migrate FortiSwitch data from Canada to the Europe or Japan data centers (existing FortiSwitch data is stored in the Canada data center.) All new activations of FortiLAN Cloud in Europe and Japan, will have data in the Europe and Japan data centers, respectively. When you log into the FortiLAN Cloud GUI, you are prompted to request migration, click Request for Migration. A notification email is sent before the actual data migration is performed.

Languages

FortiLAN Cloud supports the user interface in English and Japanese, Spanish and Portuguese languages.

  • If the browser language is one of the supported languages and is different from the configured account language, then the user interface is available in the browser language. For example, if the account is configured to use Spanish but the browser language is English, then the user interface is available in English.

  • If the browser language is NOT one of the supported languages, then the user interface is available in the account configured language. For example, if the account is configured to use Spanish but the browser language is Mandarin, then the user interface is available in Spanish.

Network Port Numbers

The following table lists the network port numbers used by FortiLAN Cloud.

Purpose

Protocol

Port number

Customer UI and API access

HTTPS

TCP/443

FortiAP initial discovery

HTTPS

TCP/443

FortiAP CAPWAP (configuration, event logs, and statistics)

CAPWAP

UDP/5246, UDP/5247

FortiAP UTP logs

TCP/514

FortiAP firmware download

HTTPS

TCP/8443

FortiAP FortiGuard services (FortiAP-S/FortAP-U series)

UDP/53, UDP/8888

FortiAP to FortiPresence

UDP/4013

FortiSwitch

TCP/443

Key Concepts

This section describes the key concepts related to using FortiLAN Cloud.

FortiAP

FortiLAN Cloud centralizes the life-cycle management of your standalone FortiAP deployment with a simple, intuitive, and easy-to-use cloud interface that is accessible from anywhere at any time. With FortiLAN Cloud, you can deploy, configure, and manage your FortiAP devices. FortiLAN Cloud also offers enhanced visibility, monitoring, reporting, and analytics features for your FortiAP devices. FortiLAN Cloud also supports the FortiAP-S and FortiAP-U series which combine the elements of universal threat protection (UTP) protection at the network edge.

If you are interested in cloud management of FortiAP devices that are already connected to FortiGate devices, then use FortiGate Cloud, not FortiLAN Cloud.

FortiSwitch

FortiLAN Cloud provides management as a service (MaaS) for secure switching infrastructure deployed with FortiSwitch devices. It provides a centralized discovery, visibility, and configuration management solution without the need of on-premise hardware, software, or management overhead. FortiLAN Cloud manages FortiSwitch devices in standalone mode.

REST API

REST (REpresentational State Transfer) is a modern, scalable (but not high performance) client-server based RPC technique using existing HTTP protocol methods (such as GET, POST, PUT, DELETE) on server resources (identified by URLs) and transferring the resources in either XML / JSON / HTML representation. FortiLAN Cloud REST API provides functions similar to its GUI functions, both configuration and monitoring are supported over REST API. The FortiLAN Cloud REST APIs are integrated with FortiCloud IAM users, you can use REST APIs as a local user or an IAM user.

FortiLAN Cloud Account Inventory

The FortiAP device deployment and registration is supported via the FortiLAN Cloud GUI, REST APIs, and FortiCloud account inventory (https://support.fortinet.com/). FortiLAN Cloud periodically synchronizes the FortiAPs with FortiCloud, to import registered devices and remove un-registered devices. The FortiAPs registered in your account in FortiCloud automatically appear in the Inventory Devices tab.

Note: If an account has no FortiAP device in any FortiLAN Cloud domain, then manual synchronization is required at least once. Click the refresh icon at top right corner of the Devices page.

FortiLAN Cloud SKUs

For license ordering details such as stock keeping unit (SKU) codes, see the FortiLAN Cloud Data Sheet.

Note

FortiAP-S and F-Series or later FortiAP-U family access points communicate with FortiCare/FortiGuard service to get UTP updates (for AV, IPS engine and database) when its FortiGuard subscription is valid.

Regions

Data centers are located in Canada, Germany, Japan, and the US for better performance and GDPR compliance for international customers. FortiLAN Cloud includes the Global, Europe, US, and Japan regions.

You can migrate FortiSwitch data from Canada to the Europe or Japan data centers (existing FortiSwitch data is stored in the Canada data center.) All new activations of FortiLAN Cloud in Europe and Japan, will have data in the Europe and Japan data centers, respectively. When you log into the FortiLAN Cloud GUI, you are prompted to request migration, click Request for Migration. A notification email is sent before the actual data migration is performed.

Languages

FortiLAN Cloud supports the user interface in English and Japanese, Spanish and Portuguese languages.

  • If the browser language is one of the supported languages and is different from the configured account language, then the user interface is available in the browser language. For example, if the account is configured to use Spanish but the browser language is English, then the user interface is available in English.

  • If the browser language is NOT one of the supported languages, then the user interface is available in the account configured language. For example, if the account is configured to use Spanish but the browser language is Mandarin, then the user interface is available in Spanish.

Network Port Numbers

The following table lists the network port numbers used by FortiLAN Cloud.

Purpose

Protocol

Port number

Customer UI and API access

HTTPS

TCP/443

FortiAP initial discovery

HTTPS

TCP/443

FortiAP CAPWAP (configuration, event logs, and statistics)

CAPWAP

UDP/5246, UDP/5247

FortiAP UTP logs

TCP/514

FortiAP firmware download

HTTPS

TCP/8443

FortiAP FortiGuard services (FortiAP-S/FortAP-U series)

UDP/53, UDP/8888

FortiAP to FortiPresence

UDP/4013

FortiSwitch

TCP/443