Choose management Vdom

It's not about good or bad. Whichever you made a management vdom, it has to have internet connectivity on the management vdom so that it can reach the FortiGuard services.

Toshi 

Hi @mulbzh ,

Technically, no difference, it's all up to you.

As @Toshi_Esumi  explained, being a management VDOM, the most important thing is to have an Internet connection in it to communicate with the FortiGuard servers for all services, including Licenses status, UTM (AV, Web Filtering, IPS, Application Control, and so on), etc.