Security Fabric Physical topology

[Tutek]

Hello,

I have added to hub fortigate new two branch fortigates, is any way on hub device see this branches and it's connected local networks & devices in security fabric physical topology because now I don't see it?

[Mohamed_Gaber]

Have you done this? I was waiting for a reply to know.

[Tutek]

Hello,

I thing that security fabric has to be enabled on the root device to accomplish this, because I enable "Security Fabric Connection" options on both ends ipsec interfaces but this didn't help. Remote devices are not still visible on the root physical topology.

But on my main root Fortigate Security Fabric is disabled, I don't want to enable it because then I cannot decide what type of logging ipv4 poolicy have (all policies have type of logging "All").

[Mohamed_Gaber]

I believe you need phase 2 of the VPN to allow this traffic.

[Tutek]

why?

my phase-2 have selectors all to all.