Configuring TOS for FortiManager Global Objects

Overview

From TOS 5.4, TOS supports provisioning objects on the Global ADOM in FortiManager. Instead of creating an object separately in each ADOM, you can create it once on the Global ADOM, and TOS automatically synchronizes newly created global objects to the targeted ADOMs.

You can create network objects, services, object groups, and FQDNs, in both IPv4 and IPv6.

Configure TOS to work with FortiManager Global Objects

When <Designer_SuggestGlobal_FortiManager> is enabled, Designer suggests creating new objects such as network objects, services, FQDNs only in the Global ADOM.

When disabled (the default) or not set, new objects are created in the ADOM.

1. Navigate to:

   https://<SecureTrack_IP>/securetrack/admin/stcgitest.htm

2. Navigate to Edit StConf > Fetch StConf.

3. In the StConf file, navigate to the <Designer_SuggestGlobal_FortiManager> section and set the <Designer_SuggestGlobal_FortiManager> value to true.

   <Designer_SuggestGlobal_FortiManager>
      <Designer_SuggestGlobal_FortiManager>true</Designer_SuggestGlobal_FortiManager>
      <!-- false= (default) Designer will use/create global objects; true=Designer will only use/create global objects -->
   </Designer_SuggestGlobal_FortiManager>

4. Click Submit New Conf.