Fortinet black logo

What’s new

6.4.0
Copy Link
Copy Doc ID fbeac8d4-7dc4-11ea-9384-00505692583a:226277
Download PDF

What’s new

This section identifies new features available with SD-WAN Orchestrator MEA 6.4.0 Beta 2.

For information about what's new in FortiManager 6.4.0, see the FortiManager 6.4.0 New Features Guide.

FortiManager ADOM support

SD-WAN Orchestrator MEA supports FortiManager ADOMs.

Devices, Regions, Profiles, and other share-resources can be added to and managed in multiple ADOMs. Global routing, topology management, and business rules will be also generated automatically or managed manually per ADOM.

Support for FortiOS 6.4.0

In addition to supporting FortiGate units running FortiOS 6.2.2 and 6.2.3, SD-WAN Orchestrator MEA also supports FortiGate units running FortiOS 6.4.0.

Support for FortiSwitch and FortiAP configurations

SD-WAN Orchestrator MEA generates switch templates and VLANs as well as AP profiles and SSIDs according to the LAN > Switch/AP setting in the profile in SD-WAN Orchestrator MEA. The settings are then pushed to the FortiSwitch Manager and AP Manager modules in FortiManager.

However switch and AP objects, such as LLDP profiles and WIDS profiles, are pulled from the FortiSwitch Manager and AP Manager modules in FortiManager.

Support for hardware switches on some low-end platforms

SD-WAN Orchestrator MEA supports hardware switches for some low-end platforms, such as FortiGate 60E/140E. You can manage LAN ports separately or add them as members to the hard_switch interface.

Support for adding model and unauthorized devices directly in SD-WAN Orchestrator MEA

"Provide more flexible ways to add FortiGates devices to SDWAN Orchestrator management:

You can use the following methods to add FortiGate devices to SD-WAN Orchestrator MEA:

  • Add unauthorized devices available in FortiManager to SD-WAN Orchestrator MEA
  • Add model devices to SD-WAN Orchestrator MEA by using the serial number, and the device is also automatically added to FortiManager

SLA monitoring optimization

The GUI pages have been optimized for SLA monitoring and SLA history statistics for devices.

Import configurations from deployed FortiGate units

You can keep the current FortiGate device configuration (including WAN/LAN, DHCP server, static routing, hostname) when you add the device to SD-WAN Orchestrator MEA by selecting the RETRIEVE_CONFIG option.

If you select the RETRIEVE_CONFIG option, SD-WAN Orchestrator MEA retrieves the configuration from the FortiGate device when the device is online for the first time, and automatically enables and overrides the WAN and LAN settings in the profile.

Improved usability for working with FortiManager policy packages

SD-WAN Orchestrator MEA provides the following usability improvements when working with FortiManager policy packages:

  • After deploying a configuration, SD-WAN Orchestrator MEA creates the dynamic interfaces for generated tunnel interfaces to improve the usability of policy configuration. The dynamic interfaces use the per-device interface mapping, which can be used in policies.
  • SD-WAN Orchestrator MEA creates a policy block in FortiManager named SDWAN_Overlay_PB that includes three policy entries. The policies allow the SLA detection in overlay links used by business rules.

Back up and restore FortiManager or SD-WAN Orchestrator MEA configuration

You can use either the FortiManager or SD-WAN Orchestrator MEA GUI to back up and restore SD-WAN Orchestrator MEA configuration.

If ADOMs and devices have not been removed or changed in FortiManager, or the administrator only wants to back up and restore the SD-WAN Orchestrator MEA configuration rather than other changes in FortiManager, the administrator can back up or restore Orchestrator configuration only.

Restore a FortiManager backup configuration file to help recover all previous configuration in FortiManager, including the configuration for SD-WAN Orchestrator MEA, regardless of whether ADOMs or devices have been changed or removed from SD-WAN Orchestrator MEA or FortiManager.

Other optimization on SD-WAN Orchestrator MEA

SD-WAN Orchestrator MEA includes the following additional optimizations:

  • Optimize the steps of creating profile, device, Internet service, and other objects
  • Optimize the manual installation mechanism
  • Optimize the dynamic installation mechanism
  • Shrink the image size of SD-WAN Orchestrator MEA
  • Optimize the database for SD-WAN Orchestrator MEA
  • Add Shorcut Overlay statistics for ADVPN in the Monitor > Devices > Link pane
  • Add the policy package status from FortiManager to the Configuration>Device pane

What’s new

This section identifies new features available with SD-WAN Orchestrator MEA 6.4.0 Beta 2.

For information about what's new in FortiManager 6.4.0, see the FortiManager 6.4.0 New Features Guide.

FortiManager ADOM support

SD-WAN Orchestrator MEA supports FortiManager ADOMs.

Devices, Regions, Profiles, and other share-resources can be added to and managed in multiple ADOMs. Global routing, topology management, and business rules will be also generated automatically or managed manually per ADOM.

Support for FortiOS 6.4.0

In addition to supporting FortiGate units running FortiOS 6.2.2 and 6.2.3, SD-WAN Orchestrator MEA also supports FortiGate units running FortiOS 6.4.0.

Support for FortiSwitch and FortiAP configurations

SD-WAN Orchestrator MEA generates switch templates and VLANs as well as AP profiles and SSIDs according to the LAN > Switch/AP setting in the profile in SD-WAN Orchestrator MEA. The settings are then pushed to the FortiSwitch Manager and AP Manager modules in FortiManager.

However switch and AP objects, such as LLDP profiles and WIDS profiles, are pulled from the FortiSwitch Manager and AP Manager modules in FortiManager.

Support for hardware switches on some low-end platforms

SD-WAN Orchestrator MEA supports hardware switches for some low-end platforms, such as FortiGate 60E/140E. You can manage LAN ports separately or add them as members to the hard_switch interface.

Support for adding model and unauthorized devices directly in SD-WAN Orchestrator MEA

"Provide more flexible ways to add FortiGates devices to SDWAN Orchestrator management:

You can use the following methods to add FortiGate devices to SD-WAN Orchestrator MEA:

  • Add unauthorized devices available in FortiManager to SD-WAN Orchestrator MEA
  • Add model devices to SD-WAN Orchestrator MEA by using the serial number, and the device is also automatically added to FortiManager

SLA monitoring optimization

The GUI pages have been optimized for SLA monitoring and SLA history statistics for devices.

Import configurations from deployed FortiGate units

You can keep the current FortiGate device configuration (including WAN/LAN, DHCP server, static routing, hostname) when you add the device to SD-WAN Orchestrator MEA by selecting the RETRIEVE_CONFIG option.

If you select the RETRIEVE_CONFIG option, SD-WAN Orchestrator MEA retrieves the configuration from the FortiGate device when the device is online for the first time, and automatically enables and overrides the WAN and LAN settings in the profile.

Improved usability for working with FortiManager policy packages

SD-WAN Orchestrator MEA provides the following usability improvements when working with FortiManager policy packages:

  • After deploying a configuration, SD-WAN Orchestrator MEA creates the dynamic interfaces for generated tunnel interfaces to improve the usability of policy configuration. The dynamic interfaces use the per-device interface mapping, which can be used in policies.
  • SD-WAN Orchestrator MEA creates a policy block in FortiManager named SDWAN_Overlay_PB that includes three policy entries. The policies allow the SLA detection in overlay links used by business rules.

Back up and restore FortiManager or SD-WAN Orchestrator MEA configuration

You can use either the FortiManager or SD-WAN Orchestrator MEA GUI to back up and restore SD-WAN Orchestrator MEA configuration.

If ADOMs and devices have not been removed or changed in FortiManager, or the administrator only wants to back up and restore the SD-WAN Orchestrator MEA configuration rather than other changes in FortiManager, the administrator can back up or restore Orchestrator configuration only.

Restore a FortiManager backup configuration file to help recover all previous configuration in FortiManager, including the configuration for SD-WAN Orchestrator MEA, regardless of whether ADOMs or devices have been changed or removed from SD-WAN Orchestrator MEA or FortiManager.

Other optimization on SD-WAN Orchestrator MEA

SD-WAN Orchestrator MEA includes the following additional optimizations:

  • Optimize the steps of creating profile, device, Internet service, and other objects
  • Optimize the manual installation mechanism
  • Optimize the dynamic installation mechanism
  • Shrink the image size of SD-WAN Orchestrator MEA
  • Optimize the database for SD-WAN Orchestrator MEA
  • Add Shorcut Overlay statistics for ADVPN in the Monitor > Devices > Link pane
  • Add the policy package status from FortiManager to the Configuration>Device pane