Staff
February 4, 2016
Technical Note: FortiManager dynamic objects
- February 4, 2016
- 0 replies
- 4563 views
Description
Solution
If a dynamic object is modified directly on a managed FortiGate, the next time the configuration is imported, "Per-Device Mapping" will be enabled. It will also be mapped to the device that made the change.
This occurs by design as the FortiManager is taking a preventative measure by tagging it as dynamic and assigning the FortiGate to it.
This occurs by design as the FortiManager is taking a preventative measure by tagging it as dynamic and assigning the FortiGate to it.
Solution
When a device is managed by FortiManager it is recommended not to make changes directly on the device, but rather apply the changes via FortiManager.
User should have read only privileges. If the user needs more flexibility they should have their own ADOM, as to not impact other devices.
User should have read only privileges. If the user needs more flexibility they should have their own ADOM, as to not impact other devices.
