Number of interfaces: maximum 3, was unlimited. Currently (FortiOS 7.2.1), though, there is no actual enforcement of this limit - I configured BGP and few static routes, 6 all in all, and it worked without any issue. This means severe limiting of dynamic protocols labs like OSPF/BGP. Number of routes: the limit is also 3, while was unlimited before. The units will now be added and receive their updates from FortiManager.įor information about adding devices, go to the FortiManager Document Library -> FortiManager Administration Guide -> Firewall Devices -> Adding Devices.Security Rules: the limit is 3, instead of 5. Select Discover, and then follow the prompts to configure the device settings.

Go to Device Manager -> Device & Groups. When ADOMs are enabled, the below process must be carried out from within the ADOM for the unit to be assigned. If it is already done, wait for the authorisation process to timeout continue with the below process. WARNING: Do not authorise the FortiGates from the Unregistered Devices list as the connection process will stall. Otherwise, to use FortiManager as a FortiGuard proxy, the solution is as follows:ġ) Configure central management settings:Ģ) Upload the license using TFTP (not applicable if a hardware bundle is present):ģ) Complete the central management configuration:Ĥ) Open up the necessary port for FortiManager to service FortiGate:ĥ) Add units to the FortiManager unit using the discover wizard.Īs a result of the CLI commands entered on the FortiGate, the unit is displayed on the FortiManager GUI in the Unregistered unites list located in the Device Manager window for the root ADOM. To operate FortiGate and FortiManager in a closed network with no internet connection for either unit then follow this document: If the FortiGate does not have an internet connection, FortiManager can act as a FortiGuard proxy to validate licences.įortiManager itself still requires an internet connection and the FortiGates will need a connection to the FortiManager. Licenses are uploaded from public FortiGuard servers to the FortiGate, therefore, the FortiGate needs to have an internet connection. This article describes the procedure to apply the FortiGate firewall licenses offline.

Fortigate vm license key