Skip to main content
bascheew
bascheew
Visitor III
October 29, 2019
Question

SDN connectors and VDOMs

  • October 29, 2019
  • 4 replies
  • 3163 views

When using VDOMs, SDN connectors are not available to be created at the VDOM level, only the global level.  Can a connector configured at global can be scoped down to a specific VDOM?  As I see it, any tenant on the Fortigate can create dynamic addresses by sourcing the global connector which means that IP address info is leaked to VDOMS that are not authorized to read that information.  Thoughts?

      4 replies

      plink013
      plink013
      New Member
      February 28, 2022

      Be great if someone could provide some feedback on the above. As of 2022 this may be an issue for us as well. Any feedback is greatly appreciated.

      AndersV
      AndersV
      Visitor III
      September 10, 2024

      Hi, I would like to hear about this as well. Only able to create connection from global. Will this be supported in VDOM in the future?

      huonwu1
      huonwu1
      New Member
      September 10, 2024

      The only possible limitations I know of with large units used to be complexity of spreading load between various NP units and having to be careful about what ports you use. All the new big units just have an ISF so all ports link back in to all NP, issue resolved https://mobdro.bio/ .

      AndersV
      AndersV
      Visitor III
      September 10, 2024

      huonwu1: not sure I understand how this is related to this thread. The problem is that kubernetes (and other sdn connectors) is not available under security fabric > external connectors inside a VDOM.

      Terms & ConditionsAccessibility statement
      Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
      Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!