FortiManager

Why do you need centralized management?

The average enterprise has 50-500 network devices. Managing each separately means hours on routine tasks, inconsistent policies, and configuration errors. With distributed locations, the problem multiplies.

FortiManager is a centralized management platform for the entire Fortinet ecosystem. Manage up to 10,000+ devices from one console, deploy new locations in minutes with Zero-Touch Provisioning, and automate operations through API.

How does it work?

Centralized Policy Management

One platform for all policies:

• Centralized security policies
• Shared objects library
• Policy packages for device groups
• Change tracking and rollback

Zero-Touch Provisioning (ZTP)

Fast deployment of new devices:

• Device connects to network
• Automatically connects to FortiManager
• Downloads configuration and policies
• Ready to work in minutes

Administrative Domains (ADOM)

Multi-tenancy for MSP and enterprise:

• Logical separation of clients/units
• Per-tenant policies and objects
• Delegated administration
• Custom roles and permissions

Key Features

Device Management

• Device registration and inventory
• Firmware repository and upgrades
• Configuration backup
• Scheduled maintenance

Configuration Management

• CLI and GUI templates
• SD-WAN templates
• Security profiles
• Scripts and automation

Automation & API

• REST API for full management
• Ansible modules
• Terraform provider
• Python SDK

Compliance

• Configuration audit
• Change tracking
• Compliance reports
• Baseline comparison

Deployment Models

FortiManager-VM: Flexible deployment, 10-10,000+ devices

FortiManager Appliances: Hardware for enterprise (200G, 400G, 1000G, 3000G)

FortiManager Cloud: SaaS without infrastructure

Who is it for?

• Enterprises with multiple FortiGate requiring centralized management
• MSP and MSSP managing infrastructure for multiple clients
• Organizations deploying SD-WAN at scale
• IT teams seeking automation and DevOps

Benefits

For IT: Centralized management, ZTP, automation, less manual work

For security: Consistent policies, compliance tracking, audit trail

For business: Faster deployments, lower OPEX, scalability without additional resources

Specifications

Max devices	10,000+
Deployment	Appliance, VM, Cloud
Multi-tenant	ADOM
Automation	REST API, Ansible, Terraform

FAQ

How many devices can I manage? From 10 (VM) to 10,000+ (FMG-3000G). Cloud version without limits.

Does FortiManager only work with FortiGate? Mainly FortiGate, but also FortiSwitch, FortiAP, FortiExtender, and other Fabric products.

How does Zero-Touch Provisioning work? FortiGate registers automatically after connecting to network, downloads configuration from FortiManager.

Can I use it as MSP? Yes. ADOM (Administrative Domains) provides full client separation with delegated admin.

How does integration with FortiAnalyzer work? Unified console optionally. Shared ADOM, correlated visibility, policy-to-log correlation.

Is automation available? Yes. REST API, Ansible modules, Terraform provider, Python SDK for CI/CD.

How does firmware management work? Centralized repository, staged rollouts, scheduling, automatic rollback.

Do I need FortiManager for one FortiGate? No. Single FortiGate can be managed locally. FortiManager pays off from several devices.

How does licensing work? Per managed device. VM subscriptions and hardware appliances available.

How does support work? Fortinet 24/7 TAC. nFlo as partner offers deployment and training.