Fortianalyzer - Multi tenants

Forum|Forum|11 years ago
September 30, 2014
9 replies
14117 views

Hi there Is it possible to setup the Fortianalyzer for multiple tenants ? Any information/advice on how to do this ? thanks ggntt

Christopher_McMullan

Staff

If you enable ADOM mode, then you can use the Standard User administrative profile template to only allow access to specific ADOMs. That would allow tenant access to the FAZ without granting access to global settings or other ADOMs.

ggnttAuthor

New Member

Hi Chris Thanks for that. We enabled the ADOM mode, but its still not clear how to create multiple profiles to access devices specific to the users Any additional info would be great, ggntt

neonbit

New Member

As an example, if you wanted to create an ADOM for customer1 that would allow them to login to the FortiAnalyzer and create/run their own reports and have read access to FortiView you would do the following three steps: 1. Create customer1 ADOM, and put the customer1-firewall into the ADOM Goto System Settings > All ADOMS and click ' Create New' Enter customer1 for the name and move the customer1-fgt to the right hand side. Click ' Ok' to save

Jh16259.jpg

neonbit

New Member

2. Create customer1 administrator profile Goto System Settings > Admin > Profile and click " Create New' Enter customer1-profile for the name and select read-write/read access for this specific customer Click ' Ok' to save

Db83903.jpg

neonbit

New Member

3. Create customer1-admin login Goto System Settings > Admin > Administrator and click ' Create New' Enter customer1-admin for the name, and select the login type (if local, enter their password) Change Administrative Domain to ' Specify' Select customer1 for the ADOM Click ' Ok' to save Now when customer1 logs in with their ' customer1-admin' credentials, they will only be able to see the reports and FortiView for their own firewall. p.s: Sorry for the three posts.. I couldn' t' figure out howto embed three pictures in the one post.

Sq46636.jpg

ggnttAuthor

New Member

Thank you so much for your replies I appreciate the screen shots. I am currently on the trial version. Unfortunately there is no ADOM option like there is on yours. Very strange Please see attached

Ay73443.jpg

ggnttAuthor

New Member

neonbit I figured that out, had to enable administrative domain from the system information widget on the dashboard. Now trying to get a remote FG to communicate with the analazyer. The FAZ is behind our own FG FW. But I saw where you can set a token, looks like they might create their own tunnel ?

jpborg

New Member

Hello,

Did you manage to get the FAZ behind your FortiGate firewall to communicate with a remote FortiGate? I am currently looking for a solution to this.