Converting FortiGate NGFW managed by FortiManager to a FortiSASE SPA hub
If FortiManager is managing your FortiGate next generation firewall deployment, follow either step here to configure your FortiGate device as a hub only:
- SD-WAN Overlay Templates for new region deployments using FortiManager 7.2.0 and later with the Single Hub topology selected and with Auto-Discovery VPN (ADVPN) enabled
- FortiManager Recommended SD-WAN IPSec + BGP Templates using FortiManager 7.0.3 and later with Hub device templates and with Auto-Discovery VPN (ADVPN) enabled
FortiManager 7.0.3 and later includes default BGP and IPsec templates with recommendations that are designed to help you configure SD-WAN overlays in a hub and spoke topology. The templates are based on Fortinet's best practice recommendations.
FortiManager 7.2.0 and later includes an SD-WAN overlay template with a wizard to automate and simplify the process using Fortinet's recommended IPsec and BGP templates. The SD-WAN overlay template also makes use of an SD-WAN template which allows configuration of SD-WAN rules and performance SLAs on branch devices.