Connecting Multiple FAC's to Fortigate Security Fabric
Setting up 2 FAC's in a Cluster. L3 HA configuration. When connecting to the security fabric on the Fortigate, do we create a new fabric connector for each FAC or do we add the 2nd FAC with their IP's as if we are connecting 2 DC Agents to the external FSSO connector.
Last time I checked, the fabric connection only provided some utilization stats (something ± like the User Inventory and Authentication Activity widgets from FAC GUI's Dashboard), so the fabric connection does not seem to be used much. While the user cound should be equal between the two, the activity may differ (since both FACs process RADIUS/etc. authentication requests independently), so it would make sense to add both, if FortiOS permits it. (not sure)
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.