Administration Guide

• Setting up FortiManager
  • Connecting to the GUI
    • FortiManager Setup wizard
    • Activating VM licenses
  • Security considerations
    • Restricting GUI access by trusted host
    • Trusted platform module support
    • Other security considerations
  • GUI overview
    • Panes
    • Color themes
    • Side menu open or closed
    • Switching between ADOMs
    • Using the right-click menu
    • Avatars
    • Showing and hiding passwords
    • Google Map integration
  • FortiAnalyzer Features
    • Enable or disable FortiAnalyzer features
  • Initial setup
  • Restarting and shutting down
• FortiManager Key Concepts
  • Communication through protocols
    • FortiGuard
    • Device Manager
    • FortiAnalyzer features
  • Configuration through Device Manager
    • Direct device database editing
    • Indirect device database editing
    • Model devices
    • Zero-touch and low-touch provisioning
  • ADOMs and devices
    • Global ADOM layer
    • ADOM and policy layer
    • Device Manager layer
  • Operations
    • Install device settings only
    • Quick install (device db)
    • Install policy package
    • Re-install policy
    • Import configuration
    • Retrieve configuration
    • Auto-update and auto-retrieve
    • Auto-backup
    • Refresh
    • Revert
    • Sequence of operations for installation to managed devices
  • Key features of the FortiManager system
    • Security Fabric
    • Configuration revision control and tracking
    • Centralized management
    • Administrative domains
    • Local FortiGuard service provisioning
    • Firmware management
    • Scripting
    • Logging and reporting
    • Fortinet device life cycle management
• Device Manager
  • ADOMs
  • Device & Groups
    • Add devices
      • Adding online devices using Discover mode
      • How Security Fabric authorization works
      • Adding online devices using Discover mode and legacy login
      • Adding offline model devices
      • Adding a model FortiGate HA cluster
      • Import model devices from a CSV file
      • Adding FortiSOAR devices
      • Adding a Security Fabric group
      • Authorizing devices
      • Hiding unauthorized devices
      • Setting unauthorized device options
      • Importing detected devices
      • Importing and exporting device lists
      • Configuring the management address
      • Verifying devices with private data encryption enabled
      • Using device blueprints for model devices
      • Example of adding an offline device by pre-shared key
      • Example of adding an offline device by serial number
      • Example of adding an offline device by using device template
      • Adding FortiGate CNF device
    • Add FortiAnalyzer or FortiAnalyzer BigData
      • Adding FortiAnalyzer devices using the wizard
      • Viewing policy rules
    • Add VDOM
      • Adding a split-task VDOM
      • Adding a multi VDOM
    • Device groups
      • Default device groups
      • Adding custom device groups
      • Managing device groups
    • Table view
      • Using the quick status bar
      • Viewing managed devices
      • Viewing configuration status
      • Viewing policy package status
      • Editing device information
      • Setting values for required meta fields
      • Customizing columns
      • Displaying Security Fabric topology
      • Refreshing a device
      • Using device group tree menus
      • Installing VM licenses
    • Ring view
      • Using a Monitor dashboard
      • Customizing a Monitor dashboard
    • Map view
      • Positioning devices on the map
      • Viewing device details
      • Viewing problematic devices
    • Folder view
      • Creating folders
      • Nesting folders
      • Moving devices between folders
      • Moving folders
    • Import Configuration wizard
      • Importing policies and objects
      • Importing AP profiles and FortiSwitch templates
    • Install wizard
      • Installing policy packages and device settings
      • Install device settings only
      • Out-of-Sync device
      • Viewing a policy package diff
      • Firewall policy reordering on first installation
      • Installing the device database
    • Firmware upgrade
      • Viewing installed firmware versions
      • Upgrading firmware
      • Upgrading multiple firmware images on FortiGate
      • Upgrading firmware downloaded from FortiGuard
    • Device database (DB)
      • Displaying the device database
      • Choosing display options for devices
      • Using the CLI console for managed devices
    • Device DB - Dashboard
      • Summary dashboard
      • Creating custom system dashboards
      • Copying custom system dashboards
    • Device DB - configuration management
      • Checking device configuration status
      • Viewing configuration revision history
      • Viewing configuration settings on FortiGate
      • Adding a tag to configuration versions
      • Downloading a configuration file
      • Importing a configuration file
      • Comparing different configuration files
      • Reverting to another configuration file
    • Device DB - Network Interface
      • Device zones
      • Interface packet capture
    • Device DB - System Virtual Domain
      • Enabling virtual domains
      • Viewing virtual domains
      • Creating virtual domains
      • Configuring inter-VDOM routing
      • Deleting a virtual domain
      • Editing resource limits
    • Device DB - System SD-WAN
      • SD-WAN per-device management
      • SD-WAN zones and interface members
      • IPsec VPN Wizard
      • Performance SLA
      • SD-WAN rules
      • BGP Neighbors
      • Duplication
    • Device DB - System HA
    • Device DB - Router BGP
    • Device DB - CLI Configurations
    • Device maintenance
      • Deleting a device
      • Replacing a managed device
    • Managing FortiGate HA clusters
      • Configuring model HA cluster members
      • FortiManager supports FortiGate auto-scale clusters
      • How FortiGate VDOM exceptions interact with FortiManager
  • Scripts
    • Enabling scripts
    • Configuring scripts
      • Run a script
      • Add a script
      • Edit a script
      • Clone a script
      • Delete a script
      • Export a script
      • Import a script
      • Schedule a script
    • CLI script group
    • Script syntax
    • Script history
    • Script samples
      • CLI scripts
      • Tcl scripts
      • Use Tcl script to access FortiManager’s device database or ADOM database
  • Provisioning Templates
    • Template groups
      • Creating template groups
      • Assigning template groups
      • Editing template groups
      • Deleting template groups
    • Fabric authorization templates
    • System templates
      • Assigning system templates to devices and device groups
      • Previewing interface actions
      • Using meta field variables
    • IPsec tunnel templates