Scenario 2: FortiManager on a routable public IP address / FortiGate behind NAT
In this scenario, the FortiGate administrator must configure the IP address (or hostname) of the FortiManager on the FortiGate or via a virtual IP address mapped to the FortiGate unit. After this is configured, the FortiGate will automatically attempt to connect to the FortiManager because it is directly routable. Once the connection is active, authentication will be attempted and if successful, the FortiGate and FortiManager can begin communication. After this occurs, the FortiGate will show up on the FortiManager as an unregistered device. Once the FortiManager administrator registers the FortiGate, the FortiManager can begin performing management functions.