FortiSIEM FSM-2200G: Switching from 1G to 25G Port

[gauravpawar]

The customer is planning to deploy the FortiSIEM All-in-One Hardware Appliance (FSM-2200G). (Fortisiem version 7.3.2) They would like to know if there would be any issues in the future if they initially use a 1Gbps network port and later switch to a 25Gbps port. Would this change cause any compatibility or configuration problems with the appliance?

@Anthony_E  @Secusaurus could you please help ?

[Anthony_E]

Hi,

I am sure Christian will be the man :p ( As usual ^^)

Regards,

[Secusaurus]

@Anthony_E  xD

@gauravpawar:

I have no experience in the hardware FSM, I only deal with VMs. So, I can only guess. You might want to talk to your Fortinet partner/SE for clarification.

However, I don't see an issue in switching the physical layer lateron.

On many switches or firewalls, changing port speeds might need a reboot or at least flapping the interface. But changing the SFP obviously causes the port to go down as well ;)

Some devices bundle ports on the network chips, so you would need to consider which port you use exactly, but we are talking about higher speeds than 25 Gbps for this behavior.

In case your idea is to use e.g. port1 now and switch to port5 lateron, you will need to re-configure the ip settings in the backend then (meaning on the shell. Since changing IPs will bring down the SSH connection, you will probably prefer the console here (is there a console on FSM hardware?)). Usually, a 25 Gbps slot supports 1 Gbps as well, so I would propose to already use the 25 Gbps port for the 1 Gbps SFPs, so that you only need to change the physics for the migration.

Best,

Christian