Technical Tip: Moving devices and VDOMs between FortiManager ADOMs
Description
This article describes how to move Devices/VDOMs between FortiManager ADOMs.
Scope
FortiManager v7.x.
Solution
- Select 'All ADOMs' under System Settings.
- Create or edit the ADOM to which the FortiGate/VDOM is to be moved.
- (Optional) If workspace mode is enabled, it is necessary to lock the source and destination ADOM before proceeding (otherwise, the OK button will not show).
- Select the '+ Select Device' button to select the device that needs to be moved between ADOMs.
- Select 'OK'.
- Go to the ADOM where the device is moved to and import the policy for the objects and policies to be available in this ADOM.
- To move FortiGate VDOM from one ADOM to another, the 'ADOM mode' feature must be set to 'Advanced'.
Note:
If FortiGate uses VPN Manager in the old ADOM and now wants to move the FortiGate to another ADOM, the VPN database would not move to the new ADOM, and therefore could not manage the tunnel in the New ADOM. The new VPN Communities must be created and installed to make it work in the new ADOM.
If a FortiGate belongs to a Security Fabric group, FortiManager will only move the device when transferring it to another ADOM. The Security Fabric group does not move automatically. To ensure the group exists in the destination ADOM, it must be manually retrieved or recreated within FortiManager.
Related articles: