Management extension applications
The following section describes supported models and minimum system requirements for management extension applications (MEA) in FortiManager7.0.3.
|
FortiManager uses port TCP/443 or TCP/4443 to connect to the Fortinet registry and download MEAs. Ensure that the port is also open on any upstream FortiGates. For more information about incoming and outgoing ports, see the FortiManager 7.0 Ports Guide. |
Supported models for MEA
You can use any of the following FortiManager models as a host for management extension applications:
| FortiManager |
FMG-3000F, FMG-3000G, FMG-3700F, FMG-3700G, and FMG-3900E. |
| FortiManager VM |
FMG_DOCKER, FMG-VM64, FMG-VM64-AWS, FMG-VM64-Azure, FMG-VM64-GCP, FMG-VM64-HV (including Hyper-V 2016, 2019), FMG-VM64-KVM, FMG-VM64-OPC, FMG-VM64-XEN (for both Citrix and Open Source Xen). |
Minimum system requirements
By default FortiManager VMs use the following system resource settings:
- 4 vCPU
- 8 GB RAM
- 500 GB disk space
Starting with FortiManager 7.0.0, RAM and CPU is capped at 50% for MEAs. (Use the config system docker command to view the setting.) If FortiManager has 8 CPUs and 16 GB RAM, then only 4 CPUs and 8 GB RAM are available to MEAs by default, and the 4 CPUs and 8 GB RAM are used for all enabled MEAs.
Some management extension applications have minimum system requirements that require you to increase system resources. The following table identifies the minimum requirements for each MEA as well as the recommended system resources to function well in a production environment.
MEA minimum system requirements apply only to the individual MEA and do not take into consideration any system requirements for resource-sensitive FortiManager features or multiple, enabled MEAs. If you are using multiple MEAs, you must increase the system resources to meet the cumulative need of each MEA.
|
Management Extension Application |
Minimum system requirements |
Recommended system resources for production* |
|---|---|---|
|
FortiAIOps |
|
No change |
|
FortiAuthenticator |
|
No change |
|
FortiPortal |
|
No change |
|
FortiSigConverter |
|
No change |
|
FortiSOAR |
|
|
|
Policy Analyzer |
|
No change |
| SD-WAN Orchestrator |
|
|
|
Universal Connector |
|
No change |
| Wireless Manager (FortiWLM) |
|
No change |
*The numbers in the Recommended system resources for production column are a combination of the default system resource settings for FortiManager plus the minimum system requirements for the MEA.