Description
This article describes how disable/re-enable automatic synchronization of the FortiAnalyzer and FortiManager configurations, on downstream device, when Security Fabric has been configured.
Solution
In Security Fabric topology, central management configuration is done on the root/upstream unit and propagated to the downstream unit(s).
This article describes how disable/re-enable automatic synchronization of the FortiAnalyzer and FortiManager configurations, on downstream device, when Security Fabric has been configured.
Solution
In Security Fabric topology, central management configuration is done on the root/upstream unit and propagated to the downstream unit(s).
FortiGates need to override these settings, while keeping device in Security Fabric topology, this can be done via CLI using the below commands:
CLI:# config system csf*local -> Doesn't synchronize the configuration with the root FortiGate, and FortiGate must configure settings individually.
set configuration-sync local
end
Should FortiGate need re-enable the synchronization, the command is:
CLI:# config system csf*default -> Synchronizes the configuration for FortiAnalyzer, FortiSandbox, and Central Management to the root FortiGate
set configuration-sync default
end
Before disabling automatic synchronization:
After disabling automatic synchronization:
After disabling automatic synchronization:
