Technical Tip: Installing FortiManager KVM on EVE-NG and connecting it to FortiGate KVM's Security Fabric

Pre-Requisites:

• VMware Workstation running EVE-NG: https://www.eve-ng.net/index.php/download/
• FortiGate KVM in EVE-NG: Technical Tip: How to install FortiGate KVM in EVE-NG
• FortiManager License.
• FortiGate is registered on FortiCloud.

Additionally, in this lab setup, FortiManager is registered to FortiCloud and FortiManager is licensed and has internet connectivity:

1. Download FortiManager KVM images from support portal. It would also be helpful to countercheck the compatibility with the FortiGate.
   https://support.fortinet.com -> Support -> Firmware Download -> select 'FortiManager' as the product -> Download -> v7.00 -> v7.2 -> v7.2.0 -> FMG_VM64_KVM-v7.2.0.F-build1157-FORTINET.out.kvm.zip.
2. Utilize WinSCP to create a new folder under /opt/unetlab/addons/qemu/ and upload the zip file. The folder's naming format should follow 'fortinet-'. In the example, fortinet-FMG-v7.2.0-build1124 is used, and 'fortinet-FMG-v7.2.0-build1124' was uploaded to the folder.

3. CD into the folder using VMware Console, change the file's name to virtioa.qcow2, create a second hard drive called virtiob.qcow2 (100GB is given in this example) and fix the permissions using the following commands:

root@eve-ng: cd /opt/unetlab/addons/qemu/fortinet-FMG-v7.2.0-build1124

root@eve-ng:/opt/unetlab/addons/qemu/fortinet-FMG-v7.2.0-build1124# mv fortios.qcow2 virtioa.qcow2

root@eve-ng:/opt/unetlab/addons/qemu/fortinet-FMG-v7.2.0-build1124# /opt/qemu/bin/qemu-img create -f qcow2 virtiob.qcow2 100G

root@eve-ng:/opt/unetlab/addons/qemu/fortinet-FMG-v7.2.0-build1124# /opt/unetlab/wrappers/unl_wrapper -a fixpermissions

4. Deploy FortiManager to the EVE-NG lab as follows:
   Make sure to select the correct image and input the required RAM, or the VM may not start.
   See: KVM-minimum-system-requirements

5. Deploy the FortiGate and connect cables to FortiManager.

6. After turning on both devices, connect to FortiManager through PuTTY. Initially, to log in, the credentials for the username are 'admin' and no password.
7. On FortiManager, set an IP on the interface within the same subnet as FortiGate.

8. On FortiGate, set an IP on the interface and enable 'fgfm'.

9. On the FortiGate, navigate to Security Fabric -> Fabric Connectors -> FortiManager, and set FortiManager's IP address. Or in FortiManager, navigate to Device Manager -> Add Device,  and set the FortiGate IP address. Authorize the device either in FortiGate or FortiManager.

In FortiGate:

Or in FortiManager:

10. In FortiManager, the FortiGate is online and synchronized, and in FortiGate, the connection is up and registered.