Fortinet FortiManager 200G
Automation-Driven Centralized Management

Highlights:

Single Pane Automation and Orchestration

FortiManager provides insight into network traffic and threats through a single-pane-of-glass and offers enterprise-class features and sophisticated security management for unified, end-to-end protection to contain advanced threats. FortiManager also delivers the industry’s best scalability to manage up to 100,000 Fortinet devices. FortiManager, coupled with the FortiAnalyzer family of centralized logging and reporting appliances, provides a comprehensive and powerful centralized management solution for your organization.

Central Management of Network Infrastructure

FortiManager provides a rich set of tools to help network admins centrally manage Security Fabric devices such as firewalls, switches, wireless wan extenders, access points, and VPNs from a single console, including capabilities to facilitate simplified deployments, centralized provisioning, and connection monitoring for VPNs, APs, SD-WAN, and more.

Configuration and Settings Management

Collectively configure device settings, use the new enhanced provisioning templates to assign firmware and policy packages during approval, and advance CLI templates for improved management of a large number of devices. Automatic device configuration backups with revision control and change auditing make daily administrative tasks easy.

Management Extensions

FortiManager’s Management Extensions pane allows rapid expansion of the Single Pane to manage more Security Fabric products. The built-in engine runs containerized management extension applications (MEAs), pulled from FortiGuard. FortiManager’s management extensions include modules to allow use of the following:

SD-WAN Orchestrator for all configuration, management, and monitoring of FortiGates on your SD-WAN network.

FortiPortal for cloud-based security and log management, allowing Managed Security Service Providers to delegate controlled access to device configuration and analytics.

FortiWLM to monitor, operate, and administer wireless networks on FortiGates that are managed by FortiManager

FortiSigConverter to import network intrusion detection rules directly into FortiManager and convert them to Fortinet supported IPS signatures.

FortiAuthenticator for identity and access management, allowing admins to provide access to protected network assets, and track user activity and compliance with security policies.

SD-WAN Orchestration and Analytics

FortiManager offers powerful SD-WAN management capabilities using intuitive workflow and simplified provisioning at scale. Enhanced SD-WAN analytics to monitor application performance and bandwidth utilization per WAN link. Leverage application centric SD-WAN business policies to fine-tune traffic steering decisions based on performance SLA targets for each WAN provider. Provide flexible deployment options for SD-WAN orchestrator, an add-on to FortiManager.

API for Automation and Orchestration

RESTful API allows MSSPs/ large enterprises to create customized, branded web portals for policy and object administration. Automate common tasks such as provisioning FortiGates and configuring existing devices. Join Fortinet Developer Network (FNDN) to access exclusive articles, how-to content for automation and customization, community-built tools, scripts, and sample code.

Security Policy Management

A Per Policy Lock has been added to 6.4 which allows admins to control the policy change by implicitly locking a policy rule when a policy is changed. Group commonly used security policies in a policy block and insert as needed in different Policy Packages. The global policy feature allows companies such as telecom, MSSP, and SAAS providers to apply a header/footer policy at the ADOM level to all policy packages or select packages. Both the Policy and Objects views now include a revision history, providing an account of admins who have made changes, change date, summary, and a mandatory change notes field for capturing reason of the change.

Multi-Tenancy and Role-Based Administration

FortiManager equips admins with granular device and role-based administration for deploying zero-trust, multi-tenancy architecture to large enterprises with a hierarchical objects database to facilitate re-use of common configurations and serve multiple customers. ADOMs are used to manage independent security environments, each with its own security policies and configuration database, and the intuitive GUI makes it easy to view, create, clone, and manage ADOMs. The zero-touch deployment uses templates to provision devices for quick mass deployment, and also supports firmware version enforcement. Define global objects such as Firewall Objects, Policies and Security Profiles to share across multiple ADOMs. Granular permissions allow assigning ADOMs, devices and policies to users based on role and responsibilities. FortiManager’s new IPS admin is a restricted user role for performing only IPS related object configuration and install.

Integration and Security Fabric

FortiManager integrates with ITSM to mitigate security events, apply configuration changes and update policies, as well as seamless integration with FortiAnalyzer for in-depth discovery, analyses, prioritization, and reporting of network security events. Use fabric connectors to facilitate connections with third-party vendors like vCenter, pxGrid, Clearpass, OCI, ESXi, AWS, and others to share and exchange data. FortiManager’s workflow for audit and compliance enables review, approval, and auditing policy changes including automating processes for policy compliance, policy lifecycle management, and enforced workflow to reduce risk.

Network and Security Operations Visibility

Automated data exchanges between security (SOC) workflows and operational (NOC) workflows, creating a single, complete workflow that not only saves time, but also provides the capacity to complete additional incident response activities. FortiManager’s NOC-SOC delivers advanced data visualization to help analysts quickly connect dots and identify threats, simplifying how organizations deliver security and remediate breaches, data exfiltration, and compromised hosts.

Monitor and Report for Deep Visibility

Monitor health of FortiGate devices in the Device Manager, with resource usage and network monitors for status of DHCP, IPsec and SSL VPN, routing, traffic shapers, and more. Use Fabric View to check Security Fabric Ratings and configurations of FortiGate devices or groups. Access vital security and network statistics, as well as real-time monitoring and topology information to provide visibility into network and user activity. For more powerful analytics, combine with a FortiAnalyzer appliance or VM for additional data mining, statistical analyses, and graphical reporting capabilities.

FortiManager High Availability

FortiManager high availability (HA) provides enhanced reliability, data protection, redundancy, and operational performance to ensure agreed uptimes and availability. In the event that the operating FortiManager unit fails, a backup FortiManager (one primary and up to four secondary) unit can take the place of the failed unit, making sure that companies have seamless access to their devices and business-critical network operations.

Specifications:

¹ Each Virtual Domain (VDOM) operating on a physical or virtual device counts as one (1) licensed network device
* FGT 7000 Series is supported on all FMG models and does not require Chassis Management.

Documentation:

Download the Fortinet FortiManager Series Datasheet (PDF).