Technical Tip: Understanding Quick Install and Install Wizard in FortiManager

In FortiManager, the primary difference between Quick Install and a 'Normal' install (via the Install Wizard) is the level of control and visibility admins have over the changes being pushed to the FortiGate devices.

1. Quick Install.

Think of this as a 'fast-track' for small, known changes.

What it does: It immediately pushes changes made in the Device Manager (like interface settings, DNS, or system settings) to the FortiGate without launching a multi-step wizard.

Best for: Minor system adjustments where admins are 100% confident of the changes.

Key constraints:

• No Preview: Admins cannot see a 'diff' (difference) of what is about to change on the device.
• Limited Scope: It typically only installs Device Settings (the Device Database). It is not used for pushing new Policy Packages or firewall rules.
• Use Case: Best for minor, low-risk administrative changes where admins are certain of the outcome and want to bypass the multi-step wizard.

2. Normal Install (Install Wizard).

This is the standard, safest way to deploy configurations.

What it does: It is a step-by-step process to validate, preview, and then execute the installation.

Scope: Offers two main options:

• Install Policy Package & Device Settings: Pushes both firewall rules and system settings (recommended for most updates).

• Install Device Settings Only: Similar to Quick Install, but with the added benefit of the wizard's verification steps.

• Best for: Pushing firewall policies, large configuration changes, or updating multiple devices at once.

Key features:

• Install Preview: Before hitting 'Go', admins can view the exact CLI commands that FortiManager is about to send to the FortiGate.
• Validation: It checks for object conflicts or errors before attempting the push.
• Policy & Settings: It allows choosing between installing 'Device Settings only' or 'Policy Package & Device Settings'.

Summary recommendation:

• Use Quick Install only for routine, low-risk system changes where admins don't need to verify the CLI output.
• Use the Install Wizard for all policy changes. Seeing the 'Install Preview' is the best way to prevent accidental outages caused by misconfigured objects or deleted rules.