Skip to main content
rmehunro
Explorer
July 12, 2024
Solved

Managed fortiswitch >> third party Firewall

  • July 12, 2024
  • 2 replies
  • 1645 views

Hi (New to Fortinet )

I am hoping i can get some feedback regarding a project that i am currently working on,

 

In our data center, we are replacing the switches with a managed fortiswiches 2048s. The firewall is a 3rd party appliance and will not be replaced at this moment.

 

Proposed topology

 

topology.PNG

 I would like to manage the switches via the firewall as the controller. is this even possible?  Is this a best practice? are there any potential issue with routing/config that i should be aware of ?

 

Thanks in advance!

Best answer by rmehunro

Thank you

2 replies

amrit
Staff & Editor
Staff & Editor
July 13, 2024

 If you want to manage the fortiswitch via fortigate you can use this document :https://docs.fortinet.com/document/fortiswitch/7.4.4/fortilink-guide/173260/configuring-fortilink and it is the best practice as well for fortiswitches but if the firewall is not fortigate then I don't think you can manage it via a non-Fortinet vendor

rmehunro
rmehunroAuthorAnswer
Explorer
July 15, 2024

Thank you

ede_pfau
SuperUser
SuperUser
July 14, 2024

What @amrit is really telling you is, you need a FGT as a switch controller as this software is not embedded in 3rd party firewalls of any other vendor, AND yes, the way you have depicted a FortiLink connection to your switches from your FGT (be it local or remote) will allow you to manage the FortiSwitches.

You will have to find out if/how a FortiLink connection is made over a routed connection, if this is really the case in your setup.

Best practice? Nope, but why not. If your FGT is remote, there might be a way.

rmehunro
rmehunroAuthor
Explorer
July 15, 2024

Thanks!