FortiAnalyzer ADOMs Question

FAZ ADOMs are different from FMG ADOMs, for FAZ you can put all FGTs in a single ADOM, even if they have different versions, other ADOM must be created if you have other device types, e.g.: FML, FCT, ... etc

Useful only in a multi-tenant scenario IMHO.

When you need to isolate FAZ access to diferent customers, ADOMs helps you.

Hey kinporsch,

as AEK and abelio mentioned, FortiAnalyzer ADOMs are only really relevant for the following scenarios:

- different Fortinet products

-> you would have different ADOMs for FortiGate, FortiMail, FortiAuthenticator, etc

- multi-tenancy

-> if you offer a FortiAnalyzer to multiple of your own customers, you can use ADOMs to separate your customers from each other and ensure they only have access to their own ADOM and logs, and not to devices/logs/reports from other customers

In addition, if you have very large environments, ADOMs can help with organizining.

For example, if you have several thousand FortiGates scattered around the globe you might want to bundle them in ADOMs geographically to maintain some kind of organization; at some point reports spanning that many FortiGates would become very difficult to read.