We placed a Fortimanager in IT network and a second Manager in DMZ.
Configuration of Fortigates should be done via manager in DMZ. For
updates we placed a fortimanager in IT segment with ability to cloud
connection. This works What is the right way t...