Security Fabric connector integration with VMware NSX-V

You can use FortiManager to create Fabric connectors for VMware NSX-V, and then install the Fabric connectors to FortiOS.

The Fabric connectors in FortiManager define the type of connector and include information for FortiOS to communicate with and authenticate with the products. In some cases the FortiGate must communicate with products through the Fabric connector, and in other cases the FortiGate communicates directly with the products.

FortiOS works with the Fabric connector to communicate with VMware NSX-V.

For information about the Fabric connector, see the Fortinet Document Library.

You cannot import a policy package for the Fabric connector from FortiOS to FortiManager.

Following is an overview of creating Fabric connectors for VMware NSX-V using FortiManager:

1. Create a Fabric connector. See Creating a Fabric connector for VMware NSX-V.
2. Import address names from VMware NSX-V to the Fabric connector. See Importing address names to a Fabric connector. FortiManager imports the address names and converts them to dynamic firewall address objects. The objects do not include IP addresses and display in Firewall Objects > Addresses.
3. In the policy package in which you are creating the new policy, create an IPv4 policy and include the firewall address objects for VMware NSX-V. See Creating an IP address policy.
4. Install the policy package to FortiOS. See Installing a policy package.

   FortiGate communicates with VMware NSX-V to dynamically populate the firewall address objects with IP addresses.