Is it possible to manage fortigate from multiple fortimanager?

[mmorcali]

Hi,

I want to manage fortigate from multiple fortimanager. On the central management settings screen we can add second fortimanager ip address. 

But when I add a second fortimanager, do the fortigate config settings sync in both fortimanagers? Does the config change I make in one fortimanager also sync in the other fortimanager?

If so, we want to manage from two fortimanagers and not lose config when one of them fails.

Best Regards

[porinha2]

And I'll check pricing and a evaluation VM from our supplier. It's weird that they couldn't come up with this on the spot.

[hbac · Accepted solution]

Hi @mmorcali,

Yes, it is possible to manage FortiGate devices from multiple FortiManager instances. You can form a Fabric of FortiManager. You can refer to https://docs.fortinet.com/document/fortimanager/7.6.0/new-features/25342/fabric-of-fortimanager

Regards, 

[mmorcali]

hi @hbac 

The doc looks like it could be useful to me. Thanks a lot

Best Regards

[ollivia3456]

No, a FortiGate device cannot be managed by multiple FortiManagers simultaneously. Each FortiGate can only be registered to one FortiManager at a time to avoid configuration conflicts. However, you can manually export configuration files from one FortiManager and import them into another if needed. For complex setups, consider consolidating management under a single FortiManager for better control and consistency.

[mmorcali]

The document mentions that two different manager ip could be set. There is also a setting on the gui to enter different ip's.

[Domainesia]

Yes, it is possible to manage a FortiGate from multiple FortiManagers by setting up FortiManager HA (High Availability). In this setup, configurations sync automatically between the primary and secondary FortiManagers, ensuring no loss if one fails.

[mmorcali]

Hi @Domainesia 

Can fortimanagers in different locations and different networks work in ha mode?