Skip to main content
hasan101
New Member
January 2, 2023
Question

How do you utilize FortiManager ?

  • January 2, 2023
  • 1 reply
  • 1000 views

As the Title says,

 

How do you guys use Fortimanager to manage your customers Fortigates ?

Do you seperate the Customers in different Adoms or just throw everything in one Bucket ?

What about Pros / Cons ?

 

Thanks

1 reply

Toshi_Esumi
SuperUser
SuperUser
January 2, 2023

It depends on what features of the FMG you're planning to use, like Policy Package, etc. If you're planning to use policy packages to use common objects shared with multiple policies on multiple FortiGates so that you need to change only at one place for all of them, you need to keep it in your mind that each ADOM has one big object database shared by all devices in it.

For example, if you have "cloud_service" address or address group object, all devices using it in a policy package (or even mulitiple) shares the same address, unless you define it as a dynamic objects and configure different addresses per device.

Although it's not impossible without it but it's probably a good idea, and very common, separating customers by ADOM to avoid conflicts and confusions.

 

I can't think of any cons using ADOM at this moment.

 

Toshi

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.