Fortigate / Fortimanger PoC

Question

Hi,I started with some small Forti PoC (all virtual on ESX) with the goal to check out, if the whole Forti-Universe is an option for replacing Cisco ASA/Firepower (yes really) and PaloAlto environment.To describe every requirement would be way to much, but I got some small questions maybe someone with Forti expirience can help with.Do I understand it correctly that the Fortigate VM doesn't support ACLs ?On which interface does the Fortigate VM try to connect to the FortiManager (Tried with port1 - management, doesn't seem to work - FortiManager management IP is in the same subnet)?Are there any known problems with Forti VMs on ESXi when using VMWare functionality (VMotion etc.)?Do I really want to host a FortiManager cluster on premise or is the FortiManager Cloud some serios option (espacially for larger scale ~ 500 devices)?Thank you.

abarushka · Answer

Hello,

Do I understand it correctly that the Fortigate VM doesn't support ACLs ?

FortiGate VM doesn't support ACL. It is not supported, but generally it is not required. Could you please elaborate what you are trying to achieve?

https://docs.fortinet.com/document/fortigate/6.4.0/parallel-path-processing-life-of-a-packet/909348/access-control-list-acl

On which interface does the Fortigate VM try to connect to the FortiManager (Tried with port1 - management, doesn't seem to work - FortiManager management IP is in the same subnet)?

Could you please check whether FMG-Access is enabled under interface (FortiGate side)?

Are there any known problems with Forti VMs on ESXi when using VMWare functionality (VMotion etc.)?

VMotion is supported. Please find the details by following the link below:

https://docs.fortinet.com/document/fortigate-private-cloud/7.4.0/vmware-esxi-administration-guide/50163/vmotion-in-a-vmware-esxi-environment