Newbie - Unable to add devices to FortiManager

[Coldfirex]

I am trying to add our first Fortigate units to a Fortimanager. From the documentation it looks like I just need to plug in the IP, name, password, etc for it to show up. I keep getting the error " Failed to update device information" though. I read a post that said SSH and HTTPS need to be opened on the FG side. If so, how does this need to be configured? Thanks! Alan

[#2]

On FG: System/Network/Internal ....enable Administrative Access via HTTP and SSH You also need to Enable Central Management (System/Admin/Central Managment) /Jesper

[Coldfirex]

Thanks for the help Jesper. That got me a little farther. I assumed you meant the WAN interface instead of the Internal right? Do any firewall policies need to be created for this to fully work? It seems to fail to fully retrieve all the data (though it now will actually list a device). What would I do in the case where I already have HTTPS access on the wan port being redirected internally to a server?

[red_adair]

you only need to open SSH on the Interface where FortiManager is accessing the Device. Realtime-Monitor (in case you want to use) also needs SNMP. If you have restricted the Admin-Hosts IP you have to include FortiManagers IP as well. Basically FortiManager logs into FortiGate by SSH and shoot in commands. -R.

[Coldfirex]

Thanks red.adair. So HTTPS isnt needed at all then? What about my other 2 questions (any firewall policies needed and if the port is forwarded internally already to a server)?

[Coldfirex]

Anyone?