Fortinet FortiManager Virtual Appliances
Centralized Management for Fortinet Security Networks

Overview:

FortiManager virtual appliances offer the same powerful management features as FortiManager hardware-based appliances, with the addition of a stackable license model that enables easy growth with your network environment. Fortinet virtual appliances allow you to deploy a mix of hardware and virtual appliances, operating together and managed from a common centralized FortiManager platform.

FortiManager Virtual Appliance Features & Benefits:

• Support for an unlimited* number of appliances or virtual domains (VDOMs) and 120,000 FortiClient agents from a single appliance for efficient management of any size deployment
• Offers centralized configuration, policy-based provisioning, update management and end-to-end network monitoring for your Fortinet installation
• You can further simplify management of your network security by grouping devices and agents into geographic or functional administrative domains (ADOMs)
• Easily manage VPN policy and configuration while leveraging FortiManager virtual appliances as a local distribution point for software and policy updates
• Reduce your administrative burden and operational costs with fast device and agent provisioning, detailed revision tracking, and thorough auditing capabilities
• Seamless integration with FortiAnalyzer appliances delivers in-depth discovery, analysis, prioritization and reporting of network security events

Key Features & Benefits
Integrated FortiAnalyzer Logging	This allows for a tighter integration and correlation of events and policies. A consolidated platform allows customers to more easily deploy Fortinet management products.
Hierarchical Objects Database	Facilitates reuse of common configurations across the organization in both local and global ADOM levels.
Automated Device Provisioning / Centralized Policy Configuration	Reduces cost of deploying new FortiGate or FortiClient installations and maintains policies across all managed assets.
Role-Based Administration	Enables distributed administration, an important requirement for larger organizations.
Policy/Device Auditing	Allows you to prove compliance, and track any deviations from the required security policy.
In-view Policy Object Editing	Faster rulebase editing without opening new windows or changing context.
Device Profiles	Aids in mass provisioning of managed devices.

* Limited in software to 10,000 devices.

Highlights:

Administrative Domains (ADOMs) and Global Policy

Enables a primary administrator to create groups of devices for other administrators to monitor and manage

• Administrators can manage devices in their geographic location or business division
• Multiple FortiGate virtual domains (VDOMs) can be divided among multiple ADOMs
• Granular permissions allow assigning ADOMs and policies to particular users
• Administrators can only access devices or VDOMs assigned to them
• Create device configuration templates to quickly configure a new Fortinet appliance
• Within each ADOM, there is a common database of objects shared by all devices and policy packages allowing users to reuse similar configurations among a group of managed assets
• Global Policy capabilities are available on all FortiManager hardware models and virtual machines

JSON and XML (Web Services) APIs

• JSON API — Allows MSSPs/large enterprises to create customized, branded web portals for policy and object administration
• XML API — Enables administrators to automate common tasks such as provisioning new FortiGates and configuring existing devices

Locally Hosted Security Content

Hosting security content locally allows the administrator greater control over security content updates and provides improved response time for rating databases. Includes support for:

• Antivirus definition updates
• Intrusion Prevention updates
• Vulnerability and Compliance Management updates
• Web Filtering (select systems)
• Antispam (select systems)

Command and Control

• Manage devices and endpoint agents individually or as logical groups
• Discover new devices automatically
• Create, deploy, and monitor virtual private networks
• Delegate control to other users with distributed administration features
• Audit configuration changes to ensure compliance

Monitor, Analyze and Report

• Access vital security and network statistics
• Real-time monitoring and integrated basic reporting provide visibility into network and user activity.
• For more powerful analytics, combine with a FortiAnalyzer appliance for additional data mining and graphical reporting capabilities

FortiManager Supported Devices

• FortiGate and FortiCarrier Consolidated Security Appliances
• FortiAP Wireless Access Points
• FortiMail Messaging Security Systems
• FortiWeb Web Application Security
• FortiAnalyzer Reporting and Analysis Appliances
• FortiSwitch Switching Platforms
• FortiSandbox Advanced Threat Protection Appliances

Specifications:

	FMG-VM-Base	FMG-VM-10-UG	FMG-VM-100-UG	FMG-VM-1000-UG	FMG-VM-5000-UG	FMG-VM-U-UG
Capacity Specification
Devices/VDOMs (Maximum)1	10	+10	+100	+1,000	+5,000	Unlimited2
Storage Capacity3	2,500	2,500	10,000	25,000	120,000	120,000
GB/Day of Logs3	10/10	10/10	10/10	50/50	200/200	500/1000
Virtual Machine
Hypervisors Supported	VMware ESX/ESXi 4.0/4.1/5.0/5.1/5.5/6.0, Microsoft Hyper-V 2008 R2/2012/2012 R2, Citrix XenServer 6.0+, Open Source Xen 4.1+, KVM, Amazon Web Services (AWS), Microsoft Azure
vCPU Support (Minimum / Maximum)	1 / Unlimited
Network Interface Support (Minimum / Maximum)	1 / 4
Storage Support (Minimum / Maximum)	80 GB / 16 TB
Memory Support (Minimum / Maximum)	1 GB / 4 GB for 32-bit and 2 GB / Unlimited for 64-bit
High Availability Support	Yes
	FMG-VM-Base	FMG-VM-10-UG	FMG-VM-100-UG	FMG-VM-1000-UG	FMG-VM-5000-UG	FMG-VM-U-UG
Locally Hosted Security Content
Antivirus	Yes	Yes	Yes	Yes	Yes	Yes
Intrusion Prevention	Yes	Yes	Yes	Yes	Yes	Yes
Vulnerability Management	Yes	Yes	Yes	Yes	Yes	Yes
Web Filtering	Yes	Yes	Yes	Yes	Yes	Yes
Antispam Databases	Yes	Yes	Yes	Yes	Yes	Yes
Locally Hosted Security Content
Chassis Management	No	No	No	Yes	Yes	Yes
Global Policies	Yes	Yes	Yes	Yes	Yes	Yes

¹ Each Virtual Domain (VDOM) operating on a physical or virtual device counts as one (1) licensed network device
² Limited in software to 10,000 devices/VDOMs
³ Storage Capacity and GB/Day of Logs are not stackable. These values represent the maximum available with purchased license.

Services:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiManager Series Datasheet (PDF).