Technical Tip: FortiManagement Cloud switch region

Description

This article describes how to switch regions in the FortiManagement Cloud portal and how to move FortiGates between FortiManagement Cloud regions.

Scope

FortiGate, FortiManagement Cloud.

Solution

Go to FortiManagement Cloud. On the FortiManagement Cloud home page, the list of FortiGates added to the FortiManagement Cloud can be viewed under Assets -> Asset list.
On the top right of the portal, select the option 'Region' and choose the desired region from the dropdown. 

To move a FortiGate to a new FortiManagement Cloud region within the same FortiGate Cloud account:

1. Log out of FortiGate Cloud from the FortiGate GUI under System -> FortiGuard.

In v7.6 or later:

This causes FortiGate to show offline/inactive in the previous region.

2. Activate FortiGate Cloud from the FortiGate GUI and select the desired region. The email/password should match the master FortiCloud account.

If the 'Domain' dropdown selection shows only US, run the commands below to update the FortiGuard server update location:

Technical Tip: Only US domain is visible in FortiGate Cloud activation widget

config system fortiguard
    set update-server-location automatic
end

If the FortiManagement Cloud connection was previously migrated from a different FortiCloud account, it is not possible to activate FortiManagement Cloud from the FortiGate GUI. In this case, see the FortiGate Cloud CLI login steps in the article: Technical Tip: Migrate a FortiGate Cloud account to another one.

execute fortiguard-log login <account_email> <account_password> <GLOBAL | US | EUROPE>

The FortiGate will show 'Active' in the new region.

Notes:

1. Historical FortiGate logs are not moved between FortiManagement Cloud regions.

2. Migration of logs between different regions is not currently supported. The historical logs remain visible in the previous region; any new logs are visible in the new region.

3. The option to change the region on the FortiManagement Cloud may not be available, instead being grayed out:

This is because the FortiGate is not registered with the account that is used to log in to the FortiManagement Cloud. Only the master user will be able to switch the regions. If the sub-user wants to switch the region, the user has to log in with the IAM account, not with the regular email account. More information about the IAM account is found here: Adding IAM users.

Before changing the FortiManagement Cloud region, consider the following:

• Historical logs stored in the current region will not be migrated to the new region.

• Existing logs will remain available in the previous region, while new logs will be sent and stored in the new region.

• During the region change, the FortiGate may temporarily appear as Offline/Inactive in the previous region until activation in the new region is completed.

• Confirm that the correct FortiCloud account associated with the device is being used. The region change must be performed using an account with the appropriate master/IAM permissions.

Related articles:

• Technical Tip: FortiManagement Cloud Japan region

• Technical Tip: How to change FortiGate's server location for FortiManagement Cloud

• Technical Tip: Unable to see FortiGate on FortiManagement Cloud