Despite not seemingly being able to set the API key from the CLI
manually, it is possible to set the API key to the same as one generated
by another FortiGate if you push it via CLI script from a FortiManager.
Example script: config system api-user e...
That really depends on what you want to block, monitor and protect
against. At least the default AntiVirus and App Control is a good idea.
I would also suggest making a Web Filter profile that (at least)
monitors what you want to monitor. Applying th...
@huutrung07 You won't see the Cisco MAC or ARP Tables on your Fortigate
with this setup. You say you've set up the Cisco as a layer 3 router not
a layer 2 switch. None of the MAC information will be passed to the
Fortigate in a routed environment. S.