Loading

×Sorry to interrupt
Uncaught ReferenceError: addCTracking is not defined
throws at https://kb.vmware.com/resource/KM_TealiumTrackingJS?v=0.5:100:1

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

Fortinet FortiGate-VMX 5.6.3, VMware vSphere v5.5/6.0/6.5, VMware NSX v6.2.4, 6.3.0 (52304)

Last Updated: 1/27/2018Categories: InformationalTotal Views: 3516Language:
English

Subscribe to get an email
newsletter with new updates

Please provide article feedback:

Purpose

Fortinet FortiGate-VMX is Fortinet’s next generation security virtual appliance. Building upon our popular FortiGate-VM offering, we added integration for VMware’s NSX API.

This article provides information about Fortinet FortiGate-VMX’s NSX integration with VMware environments.  Specific versioning and other requirements can be seen below.

Disclaimer: The partner product referenced in this article is a software module that is developed and supported by a partner. Use of this product is also governed by the end user license agreement of the partner. You must obtain from the partner the application, support, and licensing for using this product.

For more information, see Fortinet Products and Datasheet .

Resolution

Fortinet FortiGate-VMX

Fortinet FortiGate-VMX is a Virtual Appliance Solution for VMware environments that provides purpose-built integration for VMware’s Software-Defined Data Center (SDDC), interoperability with vSphere and NSX. FortiGate-VMX provides visibility into Virtualized Network traffic in the vSphere hypervisor through direct API-level integration, and management orchestration to secure workloads in dynamic software-defined networks and infrastructure without protection and compliance gaps.

Fortinet FortiGate-VMX is based on the latest version of Fortinet’s FortiOS; a security-hardened, purpose-built operating system.

Fortinet designed and built FortiOS v5.6.3 to deliver the advanced protection and performance that standalone products simply cannot match.  The services work together as a system to provide better visibility and mitigation of the latest network and application threats, stopping attacks before damage can occur.

Supported software

Fortinet FortiGate-VMX v5.6.3

VMware vSphere v5.5/6.0/6.5

VMware NSX v6.2.4, 6.3.0

For more information on the additional supported software, see the VMware Compatibility Guide.

NetX library version
5.5.0-2107100

Basic Troubleshooting steps:

Certain port are required for communication between the FortiGate-VMX Service Manager and FortiGate-VMX Security Nodes through the “sync” interface:  700, 703 & 720 – these are for our cluster protocol, configuration synchronization and traffic such as license registration and log traffic.

More information on deployed FortiGate-VMX Security Nodes:  The FortiGate-VMX Service Manager shows how many Security Nodes are deployed and how many licenses are located in the centralized repository.

You may also log into the FortiGate-VMX Service Manager and use the command line widget to gain more information about deployed FortiGate-VMX Security Nodes. There is a detailed set of instructions available CLI commands located in https://docs.fortinet.com/d/fortigate-fortios-5.6-cli-reference.

Command option can be seen by typing "?" For example, exce nsx ? group  NSX Security Group Management. instance  NSX instance management. service   NSX service management.

To show current settings, run:

Config global

exec nsx group list - Show list of groups/clusters and VMX instances that belong to them.

exec nsx instance list - Show detailed running status of all VMX instances.

exec nsx service status/get - Show the status of NSX service and its ID.

The FortiGate-VMX Service Manager requires an Internet connection to validate its license and receive updates from the FortiGuard Distribution Network (FDN).  Besides locating this status in the Web UI, you may also open the console and run the following command to see license status as well as all stats of the system:

get system status

To force a license validation from the FortiGate-VMX Service Manager to FDN, you can run the following command:

config global exec update-now

To collect logs on the FortiGate-VMX Service Manager, run:

config global

diag debug enable/disable - Enable/disable debugging output.

diag debug application <name> <level> - Start debugging the named application with the specificed debug level.

diag debug flow trace start/stop Start/stop - Start/stop packet trace debugging information for allowed/dropped traffic by rules.

For more detail, please refer to http://kb.fortinet.com and search by keywords.

To check network connectivitiy and run ping on SVM or VMX:

config vdom
edit ns/nsx/root
exec ping <host>

Collecting NetX logs from SVM / VMX:

config vdom

exec log filter category 1 - Here "1" means event log.

exec log filter category <Enter> - Shows the list of category numbers/names.

exec log display - Display the log.

Show all rules on the specified VDOM:

config vdom
edit ns/nsx/root
show

Connection settings to NSX service. Username, password, VMX image URL, etc. can be seen.

(Enter the SDN config mode first and then running show will denote the same result as running show from the global mode)

show system sdn-connector
config global
config system sdn-connector
config global
edit nsx
show/get

Exist from a mode / save and exit:

end

Upgrade Path:

Please refer to: http://cookbook.fortinet.com/sysadmins-notebook/supported-upgrade-paths-fortios/3/

"FortiOS" is applicable to "FortiGate" products including FortiGate-VMX.

Support information:

Customer satisfaction is Fortinet's number one priority. Fortinet’s FortiCare support offerings provide global support for all Fortinet products and deliver best-in-class support services. With FortiCare support, customers can be assured that their Fortinet security products are performing optimally and protecting their corporate assets.

FortiCare 24X7 Comprehensive Support

Customers who need round-the-clock access to mission critical support services will find that 24x7 Comprehensive Support meets their requirements. In addition to online ticket access and online chat, 24x7 includes telephone support at any time day or night.

FortiCare Premium Services

FortiCare Premium Services provide an additional level of personalized support designed for customers with mission critical networks. FortiCare Premium Services feature an experienced Technical Account Manager who is the primary point of contact for all support-related issues.

Documentation:

General product documentation link: http://docs.fortinet.com.

Contact information:

Technical Support.

General Contact Information.

Download Site.

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
English

Attachments

Additional Resources

KB
•
VMware NSX-T Data Center 2.2.x の製品提供 (52462)

Result 1 of 1

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware NSX for vSphere

Related Versions:

Take Our Survey

Support Assistant