Security Fabric doubt

[kamarale]

Hello,

In the NSE guides Fortinet says that at a minimun you need 2 FortiGates and a Fortianalyzer.

We are deploying 1 Fortigate,1 Fortiproxy and 1 Fortianalyzer.

Being that fortiproxy is VERY similar to Fortigate in many aspects, Can I set up the Security Fabric with these 3 devices? Maybe selecting the Fortigate as the root device,and the proxy as a downstream device?

All verisions: 7.4

Thank you in advance.

Regards.

[johnathan]

Yup, FortiProxy would work fine as a downstream device in the Fabric. 

[pminarik]

You don't need two FortiGates to enable Security Fabric. All you truly need is one FortiGate to act as the fabric root, and a FortiAnalyzer as the central log storage for the fabric.That's it.

It's just that a fabric with only one FGT is sort of pointless. :)

[kamarale]

Hello,,Thank you for your replies!

Another doubt, we are going to deploy a Fortiauthenticator,FortiClient EMS and FortiSiem also.

I figure that in Fortianalyzer is best to use ADOM type of "Fabric". This is better that create individual ADOMs for the other Fortinet products right?

I mean the idea is that all these devices are going to be part of the security fabric.

Thank you!

Regards