Fortigate configuration prior to onboarding

Hello

On the FG interface that will connect to FMG, enable https, ssh and FMG-access.

As far as I remember it is recommended to manage the FG (from FMG) from an interface other than mgmt interface. I guess because sometimes in HA mode mgmt interface is configured as dedicate interface.

Hello limchee,

You can refer link below:

https://community.fortinet.com/t5/FortiManager/Technical-Tip-How-to-register-a-FortiGate-to-a-FortiManager-from/ta-p/201747

I don't think you need https access on the FGT.

Also I'd recommend to make sure that FMG-access is enabled only on one interface. I had issues when there was more then one interface with FMG-access enabled.