Skip to main content
kamarale
New Member
Nov 11, 2024 4:06 PM UTC
Question

Security Fabric doubt

Hello,

In the NSE guides Fortinet says that at a minimun you need 2 FortiGates and a Fortianalyzer.

We are deploying 1 Fortigate,1 Fortiproxy and 1 Fortianalyzer.

Being that fortiproxy is VERY similar to Fortigate in many aspects, Can I set up the Security Fabric with these 3 devices? Maybe selecting the Fortigate as the root device,and the proxy as a downstream device?

All verisions: 7.4

 

Thank you in advance.

Regards.

 

3 replies

johnathan
Staff
Staff
Nov 11, 2024 10:41 PM UTC

Yup, FortiProxy would work fine as a downstream device in the Fabric. 

Never trust a computer you can't throw out a window.
pminarik
Staff
Staff
Nov 12, 2024 9:32 AM UTC

You don't need two FortiGates to enable Security Fabric. All you truly need is one FortiGate to act as the fabric root, and a FortiAnalyzer as the central log storage for the fabric.That's it.

 

It's just that a fabric with only one FGT is sort of pointless. :)

kamarale
kamaraleAuthor
New Member
Nov 12, 2024 6:51 PM UTC

Hello,,Thank you for your replies!

Another doubt, we are going to deploy a Fortiauthenticator,FortiClient EMS and FortiSiem also.

I figure that in Fortianalyzer is best to use ADOM type of "Fabric". This is better that create individual ADOMs for the other Fortinet products right?

I mean the idea is that all these devices are going to be part of the security fabric.

 

Thank you!

Regards

Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024