Skip to main content
rajamanickam
Explorer II
February 22, 2022
Solved

Fortimanager as Fortiguard server - SDWAN 6.4.7

  • February 22, 2022
  • 2 replies
  • 2188 views

Hi, What are the benefits of having Fortimanager to act as Fortiguard server for all the Fortigates which are in SDWAN fabric? . Fortimanager will be one of the DC LAN IP which has reachablity to all the branch Fortigate over SDWAN Fabric.

 

My observation

1 This will ensure that all database updates will happen locally within the fabric from Fortimanager to all Fortigates.

2 Not each fortigate needed internet connectivity..

3 Just ensure Fortimanager alone can speak with Fortiguard to get all the signature, database updates. Once this is done, it can push to rest of the device

4 It can also avoid impact to Webfiltering/Email filtering service, since any high latency from Fortigate to Fortigaurd webfilter service can cause "A rating error occured"

 

These are my observations, whether I am correct or any other benefits I have missed. Or anyother caveats in this setup.

Best answer by oarslan

Hello,

 

You're correct with observations. Please refer link below for more info :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-setup-FortiGate-to-get-updates-from/ta-p/193776

2 replies

oarslan
Staff
oarslanAnswer
Staff
February 23, 2022

Hello,

 

You're correct with observations. Please refer link below for more info :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-setup-FortiGate-to-get-updates-from/ta-p/193776

rajamanickam
Explorer II
February 23, 2022

Thank you for your reply

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!