Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
paulagonzalez
New Contributor

Fortimanager: Question about replication of rules in vDOMs between different sites

Hello, everyone.
We've different sites with Fortigate 100F in HA. The different sites are connected via VPN, so they are visible to each other.
We're testing the evaluation version of Fortimanager to evaluate its functionalities.
Specifically, we would like to know if it is possible that, with a specific vDOM existing on both remote sites, Fortimanager is capable of replicating any new policy bidirectionally. In this way, the rules of that vDOM would be the same regardless of the site.
What we're looking for with this is that in the event of a catastrophe on one of the sites, it is easy to redirect traffic to the other site, with all the rules and policies that were needed on the downed site already existing.
We aren't clear if Fortimanager is capable of carrying out this requirement and if not, how could we carry it out? Through API?
Thanks in advance for the suggestions. All the best

3 REPLIES 3
Stephen_G
Moderator
Moderator

Hello paulagonzalez,

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

 

Thanks,

Stephen - Fortinet Community Team
Stephen_G
Moderator
Moderator

Hello paulagonzalez,

 

We are still trying to get you an answer or help. We'll get back to you with someone who has an answer to your query.

 

Kind regards,

Stephen - Fortinet Community Team
funkylicious
SuperUser
SuperUser

Hi,

From my experience, you can use FortiManager and create a single Policy Package that can be applied to both clusters in both sites under Installation Target ( preferably using a separate ADOM just for these devices/clusters ).

Using dynamic objects with Per device mapping and Normalized Interfaces, should accomplish this.

 

---------------------------
geek
---------------------------
---------------------------geek---------------------------
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors