| Solution |
In FortiManager, the primary difference between Quick Install and a 'Normal' install (via the Install Wizard) is the level of control and visibility admins have over the changes being pushed to the FortiGate devices.
- Quick Install.
Think of this as a 'fast-track' for small, known changes.
What it does: It immediately pushes changes made in the Device Manager (like interface settings, DNS, or system settings) to the FortiGate without launching a multi-step wizard.
Best for: Minor system adjustments where admins are 100% confident of the changes.
Key constraints:
- No Preview: Admins cannot see a 'diff' (difference) of what is about to change on the device.
- Limited Scope: It typically only installs Device Settings (the Device Database). It is not used for pushing new Policy Packages or firewall rules.
- Use Case: Best for minor, low-risk administrative changes where admins are certain of the outcome and want to bypass the multi-step wizard.
- Normal Install (Install Wizard).
This is the standard, safest way to deploy configurations.
What it does: It is a step-by-step process to validate, preview, and then execute the installation.
Scope: Offers two main options:
- Install Policy Package & Device Settings: Pushes both firewall rules and system settings (recommended for most updates).
- Install Device Settings Only: Similar to Quick Install, but with the added benefit of the wizard's verification steps.
- Best for: Pushing firewall policies, large configuration changes, or updating multiple devices at once.
Key features:
- Install Preview: Before hitting 'Go', admins can view the exact CLI commands that FortiManager is about to send to the FortiGate.
- Validation: It checks for object conflicts or errors before attempting the push.
- Policy & Settings: It allows choosing between installing 'Device Settings only' or 'Policy Package & Device Settings'.
Summary recommendation:
- Use Quick Install only for routine, low-risk system changes where admins don't need to verify the CLI output.
- Use the Install Wizard for all policy changes. Seeing the 'Install Preview' is the best way to prevent accidental outages caused by misconfigured objects or deleted rules.
|
