Technical Note: FortiGate / FortiManager Communications Protocol Guide, v6.2

[Andy_G]

Description

The FortiGate / FortiManager Communications Protocol Guide, v6.2 is available as an attachment to this article.

Table of Contents

ChangeLog

Overview

Exceptions

Protocolcomponents

FGFM header
Keep-Alive messages

Customizing the Keep-Alive settings
FortiManager passive mode

FortiGate to FortiManager authentication

Tunneling

Tunnel setup details

Communication hardening

Protocol operation on FortiGate

Security concerns

Protocol operation on FortiManager

Topology scenarios

Scenario1: FortiGate has public IP address, FortiManager is behind NAT
Scenario2: FortiManager on a routable public IP address/FortiGate behind NAT
Scenario3: Both FortiManager and FortiGate have public IP addresses
Scenario4: Mixed topology
Scenario5: Both devices behind NAT

FGFM built-in recovery

Making changes to the FortiGate management IP address
FGFM recovery logic
Example