FortiNDR (on-premise)
On-premise where solution process and store data on customer’s network. Supports Netflow and OT deployments.
cysaw
Staff
Staff
Article Id 338235
Description

This article describes how to deploy the FortiNDR in the Center and Sensor modes.

Scope

FortiNDR.

Solution
  1. The deployment (Standalone, Center, and Sensor) is determined by the firmware image used during the deployment.
  2. It is possible to download the firmware image for Standalone, Center, and Sensor mode from the Fortinet support portal.
  3. The below is for FortiNDR hardware devices.
                                                  
    cysaw_0-1725239998080.png

     

  4. The below is for the VM platform.
                                           
cysaw_1-1725239998083.png

 

  1. It is possible to use the TFTP method to reload the firmware image of the FortiNDR3500F if it is by default running in Standalone mode.
  2. Configure the basic network configuration in the FortiNDR so it is possible to get access to the GUI.
  3. The dashboard for the Center mode FortiNDR will be tagged as Center.
                                                               
    cysaw_2-1725239998093.png

     

  4. The dashboard for the Sensor mode FortiNDR will be tagged as Sensor.
                                                              
    cysaw_3-1725239998106.png