Skip to main content
jrobetoy
New Member
January 19, 2024
Question

FortiManager: Safe to enable the ADOM feature in production?

  • January 19, 2024
  • 3 replies
  • 2826 views

Good Morning,

 

I am learning and putting a plan together to create and apply global policies, and understand i will need to use ADOMs to do that, and they are disabled by default. Our FortiManager (7.4.1) is currently managing all of our production Fortigates. When i make the change, will the production Fortigates be affected at all?

 

Thanks,

Jesse

 

 

 

https://docs.fortinet.com/document/fortimanager/7.4.1/administration-guide/208717/enabling-and-disabling-the-adom-feature

 

By default, ADOMs are disabled. Enabling and configuring ADOMs can only be done by super user administrators.

When ADOMs are enabled, the Device Manager, Policy & Objects, AP Manager, and VPN Manager panes are displayed per ADOM. If FortiAnalyzer features are enabled, the FortiView, Log View, Incidents & Events, and Reports panes are also displayed per ADOM. You select the ADOM you need to work in when you log into the FortiManager unit. Switching between ADOMs.

To enable the ADOM feature:
Log in to the FortiManager as a super user administrator.
Go to Dashboard.
In the System Information widget, toggle the Administrative Domain switch to ON.
You will be automatically logged out of the FortiManager and returned to the log in screen.

 

 

 

 

3 replies

AEK
SuperUser
SuperUser
January 19, 2024

Hello Jesse

As per my experience with FMG, it never changes anything on your FGT unless you push a configuration.

Enabling ADOMs will not push anything to your FGT.

 

Edit: take a backup before enabling ADOMs, just in case.

AEK
vraev
Staff
Staff
January 22, 2024

Hi @jrobetoy ,

 

After the ADOM is enabled the current users will be logged out and then they can login again.

So its good to make it before or after the working hours.

 

Note: Although this activity itself does not delete any logs from the device, we always recommend to keep a regular backup of the logs/reports/configuration before proceeding with any such activities.
https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-Backup-and-restore-of-FortiAnalyzer-settings-logs/ta-p/191972

asrour
Staff
Staff
January 24, 2024

Hello @jrobetoy 

you can download a trial FMG vm and a FGT vm images from the support portal.

FMG will allow you to add 3 devices.

you can do your testing there before applying to prod FMG 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.