Technical Tip: How to install Virtual Server changes to FortiGates operating in Central NAT mode using FortiManager

[lingky88]

Description	This article describes how the user can use FortiManager to install Virtual Server changes to their managed FortiGates operating in Central NAT mode using FortiManager.
Scope	FortiManager.
Solution	On the FortiGate, the central NAT setting is enabled. On the FortiManager, the policy package has Central NAT enabled. Create the Virtual Server on FortiManager -> Policy & Objects -> Object Configurations -> Firewall Objects -> Virtual Servers. When FortiGate operates in central NAT mode, it is not required to apply a VIP/Virtual Server onto a firewall policy. Hence, when trying to install, the Install Preview does not show the Virtual Server/VIP configuration being installed. It is mandatory to import the Virtual Server/VIP configured under Policy & Objects -> Select the Policy Package -> Central DNAT setting of the Policy Package in FortiManager for the change to be installed. Install the policy package again and we are now able to see the Virtual Server configuration that we had created in the Install Preview.