Administration Guide

• Setting up FortiManager
  • Connecting to the GUI
    • FortiManager Setup wizard
    • Activating VM licenses
  • Security considerations
    • Restricting GUI access by trusted host
    • Other security considerations
  • GUI overview
    • Panes
    • Color themes
    • Side menu open or closed
    • Switching between ADOMs
    • Using the right-click menu
    • Avatars
    • Showing and hiding passwords
  • FortiAnalyzer Features
    • Enable or disable FortiAnalyzer features
  • Initial setup
  • Restarting and shutting down
• FortiManager Key Concepts
  • Communication through protocols
    • FortiGuard
    • Device Manager
    • FortiAnalyzer features
  • Configuration through Device Manager
    • Direct device database editing
    • Indirect device database editing
    • Model devices
  • ADOMs and devices
    • Global ADOM layer
    • ADOM and policy layer
    • Device Manager layer
  • Operations
    • Install device settings only
    • Quick install (device db)
    • Install policy package
    • Re-install policy
    • Import configuration
    • Retrieve configuration
    • Auto-update and auto-retrieve
    • Auto-backup
    • Refresh
    • Revert
  • Key features of the FortiManager system
    • Security Fabric
    • Configuration revision control and tracking
    • Centralized management
    • Administrative domains
    • Local FortiGuard service provisioning
    • Firmware management
    • Scripting
    • Logging and reporting
    • Fortinet device life cycle management
• Device Manager
  • ADOMs
  • Device & Groups
    • Add devices
      • Adding online devices using Discover mode
      • How Security Fabric authorization works
      • Adding online devices using Discover mode and legacy login
      • Adding offline model devices
      • Adding a model FortiGate HA cluster
      • Adding FortiSOAR devices
      • Adding a Security Fabric group
      • Authorizing devices
      • Hiding unauthorized devices
      • Setting unauthorized device options
      • Importing detected devices
      • Importing and exporting device lists
      • Configuring the management address
      • Verifying devices with private data encryption enabled
      • Example of adding an offline device by pre-shared key
      • Example of adding an offline device by serial number
      • Example of adding an offline device by using device template
    • Add FortiAnalyzer
      • Adding FortiAnalyzer devices with the wizard
      • Viewing policy rules
    • Add VDOM
      • Adding a split-task VDOM
      • Adding a multi VDOM
    • Device groups
      • Default device groups
      • Adding custom device groups
      • Managing device groups
    • Table view
      • Using the quick status bar
      • Viewing managed devices
      • Viewing configuration status
      • Viewing policy package status
      • Editing device information
      • Setting values for required meta fields
      • Customizing columns
      • Displaying Security Fabric topology
      • Refreshing a device
      • Using device group tree menus
    • Ring view
      • Using the Monitors dashboard
      • Customizing the Monitors dashboard
    • Map view
      • Positioning devices on the map
      • Viewing device details
      • Viewing problematic devices
    • Folder view
      • Creating folders
      • Nesting folders
      • Moving devices between folders
      • Moving folders
    • Import Configuration wizard
      • Importing policies and objects
      • Importing AP profiles and FortiSwitch templates
    • Install wizard
      • Installing policy packages and device settings
      • Install device settings only
      • Out-of-Sync device
      • Viewing a policy package diff
      • Firewall policy reordering on first installation
      • Installing the device database
    • Firmware upgrade
      • Viewing installed firmware versions
      • Upgrading firmware
      • Upgrading multiple firmware images on FortiGate
      • Upgrading firmware downloaded from FortiGuard
    • Device database (DB)
      • Displaying the device database
      • Choosing display options for devices
      • Using the CLI console for managed devices
    • Device DB - Dashboard
      • Summary dashboard
      • Creating custom system dashboards
    • Device DB - configuration management
      • Checking device configuration status
      • Viewing configuration revision history
      • Viewing configuration settings on FortiGate
      • Adding a tag to configuration versions
      • Downloading a configuration file
      • Importing a configuration file
      • Comparing different configuration files
      • Reverting to another configuration file
    • Device DB - System Interface
      • Device zones
    • Device DB - System Virtual Domain
      • Enabling virtual domains
      • Viewing virtual domains
      • Creating virtual domains
      • Configuring inter-VDOM routing
      • Deleting a virtual domain
      • Editing resource limits
    • Device DB - System SD-WAN
      • SD-WAN per-device management
      • SD-WAN zones and interface members
      • IPsec VPN Wizard
      • Performance SLA
      • SD-WAN rules
      • BGP Neighbors
      • Duplication
    • Device DB - System HA
    • Device DB - Router BGP
    • Device DB - CLI Configurations
    • Device maintenance
      • Deleting a device
      • Replacing a managed device
  • Scripts
    • Enabling scripts
    • Configuring scripts
      • Run a script
      • Add a script
      • Edit a script
      • Clone a script
      • Delete a script
      • Export a script
      • Import a script
      • Schedule a script
    • CLI script group
    • Script syntax
    • Script history
    • Script samples
      • CLI scripts
      • Tcl scripts
      • Use Tcl script to access FortiManager’s device database or ADOM database
  • Provisioning Templates
    • Template groups
      • Creating template groups
      • Assigning template groups
      • Editing template groups
      • Deleting template groups
    • System templates
      • Assigning system templates to devices and device groups
      • Allowing system template overrides
      • Previewing interface actions
      • Overriding system template settings
      • Using meta field variables
    • IPsec tunnel templates
      • Creating new meta fields
      • Assigning values to meta field variables
      • Using IPsec Fortinet recommended template
      • Creating new IPsec VPN templates
      • Assigning IPsec VPN template to devices and device groups
      • Installing IPsec VPN configuration and firewall policies to devices
      • Verifying IPsec VPN tunnel status
      • Verifying IPsec template configuration status
      • Un-assigning IPsec templates
      • Recommended IPsec templates
    • SD-WAN templates
      • SD-WAN templates
      • Zones and interface members
      • Performance SLA
      • SD-WAN rules
      • Neighbors
      • Duplication
      • Assign SD-WAN templates to devices and device groups
    • Static route templates
    • BGP templates
      • Recommended BGP templates
    • Certificate templates
    • Threat Weight templates
    • CLI templates
      • Adding CLI templates
      • Editing CLI templates
      • Deleting CLI templates
      • Assigning CLI templates to managed devices
      • Importing CLI templates
      • Cloning CLI templates
      • Exporting CLI templates
      • CLI template groups
    • NSX-T service templates
  • Firmware templates
    • Creating firmware templates
    • Editing firmware templates
    • Deleting firmware templates
    • Assigning firmware templates to devices
    • Previewing upgrades
    • Reviewing upgrade history
    • Upgrading devices now
  • Monitors
    • SD-WAN Monitor
      • Map View
      • Table View
      • Enabling SD-WAN monitoring history
    • VPN Monitor
    • Device Inventory
  • FortiMeter
    • FortiOS VMs
    • FortiWeb VMs
    • Overview
    • Points
    • Authorizing metered VMs
      • Authorizing FortiOS VMs
      • Authorizing FortiWeb VMs
    • Monitoring VMs
  • FortiGate chassis devices
    • Viewing chassis dashboard
• Policy & Objects
  • About policies
    • Policy theory
    • Global policy packages
  • Policy workflow
    • Provisioning new devices
    • Day-to-day management of devices
  • Display options
  • Managing policy packages
    • Create new policy packages
    • Create new policy package folders
    • Edit a policy package or folder
    • Clone a policy package
    • Remove a policy package or folder
    • Assign a global policy package
    • Install a policy package
    • Reinstall a policy package
    • Schedule a policy package install
    • Export a policy package
    • Policy package installation targets
    • Perform a policy consistency check
    • View logs related to a policy rule
    • Find and replace objects
  • Managing policies
    • Column options
    • Policy search and filter
    • Policy hit count
    • Policy Lookup
    • Creating policies
    • Editing policies
      • Object selector
      • Drag and drop objects
      • Install policies only to specific devices
      • Configuring policy details
    • Creating Policy Blocks
    • IP policies
    • Create New Firewall Policy
    • Create New Security Policy
    • Virtual wire pair policy
    • NAT policies
    • Proxy policy
    • Central SNAT
    • Central DNAT
    • DoS policies
    • Interface policies
    • Multicast policy
    • Local in policies
    • Traffic shaping policy
    • Zero Trust Network Access (ZTNA) rules
    • Hyperscale policies
    • FortiProxy firewall policy
    • FortiProxy Proxy Auto-Configuration (PAC) Policy
  • Managing objects and dynamic objects
    • Create a new object
      • Color code an object