FortiGate/FortiManager Communications Protocol Guide

• Overview
• Protocol components
  • FGFM header
  • Keep-Alive messages
• FortiGate to FortiManager authentication
  • Tunneling
  • Communication hardening
• Protocol operation on FortiGate
  • Security concerns
• Protocol operation on FortiManager
• Topology scenarios
  • Scenario 1: FortiGate has public IP address, FortiManager is behind NAT
  • Scenario 2: FortiManager on a routable public IP address / FortiGate behind NAT
  • Scenario 3: Both FortiManager and FortiGate have public IP addresses
  • Scenario 4: Mixed topology
  • Scenario 5: Both devices behind NAT
• FGFM built-in recovery
  • Making changes to the FortiGate management IP address
  • FGFM recovery logic
  • Example
• Change Log