FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
ckarwei
Staff
Staff
Article Id 195000
Description
This article describes how to authorize unit on FortiAnalyzer root ADOM that is being managed by FortiManager.

Solution
1) After adding FortiAnalyzer on FortiManager root ADOM, the 'Managed by FortiManager' icon will appear on FortiAnalyzer root ADOM.
All unit changes have to be performed from FortiManager to avoid conflict.





2) It is not possible to manually authorize a unit on root ADOM.




3) Using the following commands, it is possible to temporary unlock the ADOM.
FAZ-VM64 # diagnose dvm adom unlock root

---Deleting DVM lock by remote FortiManager succeeded---
4) The 'Managed by FortiManager' icon will disappear, it is possible now to select the 'Authorize' button.




5) To lock the ADOM again, go to FortiManager -> Managed FortiAnalyzer and select 'Refresh Device'.



6) The 'Managed by FortiManager' icon will re-appear and it will not be possible able to make any changes on the root ADOM unit.

7) It is recommended to create a separate ADOM to manage FortiAnalyzer and avoid root ADOM being lock by FortiManager.


Contributors