Administration Guide

Setting up FortiManager
- Connecting to the GUI
  - FortiManager Setup wizard
  - Activating VM licenses
- Security considerations
- GUI overview
- FortiAnalyzer Features
  - Enable or disable FortiAnalyzer features
- Initial setup
- Restarting and shutting down
FortiManager Key Concepts
- Communication through protocols
- Configuration through Device Manager
- ADOMs and devices
- Operations
- Key features of the FortiManager system
Dashboard
- Customizing the dashboard
- System Information widget
- System Resources widget
- License Information widget
- Unit Operation widget
- Alert Messages Console widget
- Log Receive Monitor widget
- Insert Rate vs Receive Rate widget
- Log Insert Lag Time widget
- Receive Rate vs Forwarding Rate widget
- Disk I/O widget
- Device widgets
- Restart, shut down, or reset FortiManager
Device Manager
- ADOMs
- Device & Groups
- Scripts
- Provisioning Templates
- Firmware templates
- Monitors
- FortiMeter
- FortiGate chassis devices
  - Viewing chassis dashboard
Policy & Objects
- About policies
  - Policy theory
  - Global policy packages
- Policy workflow
  - Provisioning new devices
  - Day-to-day management of devices
- Feature visibility
- Managing policy packages
- Managing policies
- Using Policy Blocks
- Managing objects and dynamic objects
- ADOM revisions
SD-WAN Manager
- SD-WAN Network
  - SD-WAN Devices
  - SD-WAN Monitor
- SD-WAN Templates
- SD-WAN overlay orchestration
- SD-WAN rules
AP Manager
- Managed FortiAPs
- WiFi Maps
  - Google map
  - Floor map
- WiFi profiles and settings for central management
- WiFi profiles and settings for per-device management
  - Enabling FortiAP per-device management
  - Creating profiles
VPN Manager
- Overview
- Enabling central VPN management
- DDNS support
- VPN Setup Wizard supports device groups
- IPsec VPN
- SSL VPN
- VPN security policies
  - Defining policy addresses
  - Defining security policies
Fabric View
- Security Fabric Topology
- Security Rating
  - Viewing Security Fabric Ratings
  - Security Fabric score
- Fabric Connectors
  - Core Network Security
    - Creating FortiClient EMS connectors
- External Connectors
- Cloud Orchestration
FortiAI
- Enabling administrator access to FortiAI
- Using FortiAI
- FortiAI data privacy
- FortiAI tokens
- FortiAI example tasks
FortiGuard
- Device licenses
  - View licensing status
- Package management
- Query services
- Firmware images
- External resources
- Settings
- Enabling FDN third-party SSL validation and Anycast support
- Configuring devices to use the built-in FDS
  - Handling connection attempts from unauthorized devices
  - Configure a FortiManager without Internet connectivity to access a local FortiManager as FDS
- Configuring FortiGuard services
- Logging events related to FortiGuard services
  - Logging FortiGuard antivirus and IPS updates
  - Logging FortiGuard web or email filter events
- Restoring the URL or antispam database
FortiSwitch Manager
- Managed FortiSwitches
- FortiSwitch central management
  - Enabling FortiSwitch central management
  - FortiSwitch Templates
- FortiSwitch per-device management
Extender Manager
- Managed extenders
  - Managing FortiExtender devices
- Extender profiles
System Settings
- Logging Topology
- Network
- RAID Management
- Administrative Domains (ADOMs)
- Fabric Management
- Certificates
- Event Log
  - Event log filtering
- Task Monitor
- Mail Server
- Syslog Server
  - Send local logs to syslog server
- Meta Fields
- Device logs
  - Configuring rolling and uploading of logs using the GUI
  - Configuring rolling and uploading of logs using the CLI
- File Management
- Miscellaneous Settings
Administrators
- Trusted hosts
- Monitoring administrators
- Disconnecting administrators
- Managing administrator accounts
- Restricted administrators
- Administrator profiles
- Workspace
- Authentication
- Global administration settings
- Multi-factor authentication
  - Multi-factor authentication with FortiAuthenticator
    - Configuring FortiAuthenticator
    - Configuring FortiManager
  - Multi-factor authentication with FortiToken Cloud
High Availability
- Synchronizing the FortiManager configuration and HA heartbeat
- If the primary or a backup unit fails
- FortiManager HA cluster startup steps
- Configuring HA options
- Monitoring HA status
- Upgrading the FortiManager firmware for an operating cluster
Management Extensions
- FortiAIOps MEA
- FortiSigConverter MEA
- FortiSOAR MEA
- FortiWLM MEA
- Policy Analyzer MEA
- Universal Connector MEA
- Enabling management extension applications
  - CLI for management extensions
- Accessing management extension logs
- Checking for new versions and upgrading
Appendix A - Supported RFC Notes
Appendix B - Policy ID support
Appendix C - Re-establishing the FGFM tunnel after VM license migration
Appendix D - FortiManager Ansible Collection documentation
Appendix E - FortiAI token entitlements for FortiManager
Change Log

Home FortiManager 7.6.1 Administration Guide

7.6.1

System templates

The Device Manager > Provisioning Templates > System Templates pane allows you to create and manage device profiles. A system template is a subset of a model device configuration. Each device or device group can be linked with a system template. When linked, the selected settings come from the template and not from the Device Manager database.

By default, there is one generic default profile defined. System templates are managed in a similar manner to policy packages. You can use the context menus to create new device profiles. You can configure the settings in each section or import settings from a specific device.

Fields that support metadata variables are identified with the following magnifying glass icon . See ADOM-level metadata variables..

Go to Device Manager > Provisioning Templates > System Templates to configure system templates.

Some settings may not be available in all ADOM versions.

To import settings from a device, click More > Import and select the device.

Enable a section to expose the settings. The following sections and settings are available:

Widget	Description
DNS	DNS includes the following settings: Primary DNS Server Secondary DNS Server Local Domain Name Interface Selected Method Advanced Options
NTP Server	NTP Server includes the following settings: Synchronize with NTP Server Sync Interval Interface Server mode Source IP Advanced Options You can select to use the FortiGuard server or specify one or more other servers.
Alert Email	Alert Email includes the following settings: SMTP Server Authentication
Admin Settings	Admin Settings includes the following settings: HTTP Port HTTPS Port SSH Port SSH v1 compatibility Idle Timeout Enable SCP Host Name Time Zone Geographic Coordinate
SNMP	SNMP v1/v2 and SNMP v3 settings. In the toolbar, you can select to create, edit, or delete the record. To create a new SNMP, click Create New and specify the community name, hosts, queries, traps, and SNMP events.
Replacement Messages	You can customize replacement messages. Click Import to select a device and the objects to import.
FortiGuard	Enable Enable Auto Firmware Upgrade to enable FortiGate automatic firmware patch upgrades. Optionally specify the upgrade schedule. Enable Enable FortiGuard Security Updates to retrieve updates from FortiGuard servers or from this FortiManager. You can define multiple servers and specify Update, Rating, or Updates and Rating. You can also select Include Worldwide FortiGuard Servers.
Log Settings	Select Send Logs to FortiAnalyzer Cloud, Send Logs to FortiAnalyzer/FortiManager, and/or Send Logs to Syslog. If selected, enter the requisite information for the option.
Interface	Zone and interface settings. In the toolbar, you can select to create, edit, or delete the record. By default the Interface widget is hidden. From the Toggle Widgets menu, select Interface to display the Interface widget. To create a new interface, click Create New and specify an action and identify what models will receive the action.

You can create, edit, or delete templates. Select System Templates in the tree to display the Create New, Edit, Delete, and Import options in the content pane. You can also select the devices or device groups to be associated with the template by selecting Assign to Devices/Groups.