Security Fabric connector integration with OpenStack

You can use FortiManager to create Fabric connectors for OpenStack, and then install the Fabric connectors to FortiOS.

The Fabric connectors in FortiManager define the type of connector and include information for FortiOS to communicate with and authenticate with the products. In some cases the FortiGate must communicate with products through the Fabric connector, and in other cases the FortiGate communicates directly with the products.

FortiOS works with the Fabric connector to communicate with OpenStack.

For information about the Fabric connector, see the Fortinet Document Library.

You cannot import a policy package for the Fabric connector from FortiOS to FortiManager.

Following is an overview of creating Fabric connectors for OpenStack using FortiManager:

1. Create a Fabric connector. See Creating a Fabric connector for OpenStack.
2. Import address names from OpenStack to the Fabric connector. See Importing address names to a Fabric connector. FortiManager imports the address names and converts them to dynamic firewall address objects. The objects do not include IP addresses and display in Firewall Objects > Addresses.
3. In the policy package in which you are creating the new policy, create an IPv4 policy and include the firewall address objects for OpenStack. See Creating an IP address policy.
4. Install the policy package to FortiOS. See Installing a policy package.

   FortiGate communicates with OpenStack to dynamically populate the firewall address objects with IP addresses.