Technical Tip: FortiManager timers and keepalive with FortiGate units

Description

This article describes timers related to the FGFM protocol which the FortiManager uses to manage FortiGates.

Scope

FortiManager.

If the FGFM connection (port 541) is broken between the FortiGate and the FortiManager then the FortiGate's connectivity is reported as down.

FGFM timers can be configured as follows:

config system dm
    set fgfm-sock-timeout <sec_int>
    set fgfm_keepalive_itvl <sec_int>
end

fgfm-sock-timeout <sec_int> The maximum FortiManager/FortiGate communication socket idle time. The interval can be from 90 to 1800 seconds. 360 by default.

fgfm_keepalive_itvl <sec_int> The interval at which the FortiManager will send a keepalive signal to a FortiGate unit to keep the FortiManager/FortiGate communication protocol active. The interval can be from 30 to 600 seconds. 120 by default.