FortiManager can centralize policy and configuration only after it has a trusted management relationship with the FortiGate it is meant to control. Device registration is […]

FortiGate Cloud-Native Firewall (CNF) and FortiGate-VM both bring Fortinet security into public cloud, but they use different operating models. FortiGate-VM is a virtual appliance that […]

FortiGate security profiles are often enabled together, which can make their responsibilities blur during design and troubleshooting. Antivirus, intrusion prevention, and application control all inspect […]

Fortinet Single Sign-On (FSSO) lets a FortiGate make policy decisions using user and group identity learned from an external identity environment instead of prompting every […]

Source NAT and destination NAT solve opposite address-translation problems on FortiGate. SNAT changes the source identity of traffic as it leaves a network; DNAT changes […]

FortiGate troubleshooting becomes much faster when you stop treating every connectivity failure as a firewall-policy problem. A packet can fail before policy evaluation because it […]

FortiAnalyzer gives analysts several ways to look at security data. Log View exposes records directly. FortiView summarizes activity through dashboards and widgets. The SOC Dashboard […]

FortiAnalyzer reporting is built from layers. Logs provide the raw evidence. Datasets define which data is extracted from the database. Charts turn dataset results into […]

FortiGate firewall-policy problems are easiest to solve when you stop thinking of a policy as a single allow-or-deny line and instead trace the whole session […]

FortiGate Clustering Protocol high availability is designed to keep firewall services available when a member or monitored path fails. The cluster presents a unified security […]

Site-to-site IPsec troubleshooting becomes manageable when you separate tunnel establishment from traffic forwarding. Phase 1 creates the IKE security association between peers. Phase 2 creates […]

FortiGate SD-WAN is more than a bundle of internet links. It is a policy-driven forwarding system that combines available WAN members, measured path health, application […]

FortiOS supports two major inspection approaches in firewall policies: flow-based inspection and proxy-based inspection. Both can apply security controls to allowed traffic, but they process […]

Administrative domains, or ADOMs, are one of the most important FortiManager design concepts because they decide where devices, policy packages, objects, administrators, and operational responsibility […]

FortiManager separates centralized policy management from device-specific configuration. That separation is why a change can exist in Policy & Objects without immediately changing a FortiGate, […]