You must use FortiManager to standardize the deployment of the same FortiGate model across multiple branches with consistent interface roles and policy packages.
In this scenario, what is the recommended best practice for interface assignment?
A.
Create interfaces using CLI scripts and use those interfaces in FortiGate policy packages.
B.
Enable metadata variables to use dynamic configurations on the standard interfaces of FortiManager.
C.
Create normalized interface mappings per platform to automatically map device-level interfaces based on the FortiGate model and interface name.
D.
Use the Install On feature in the policy package to automatically assign the interfaces across branches.
Comprehensive and Detailed 100 to 150 words of Explanation From Secure Networking Architect Study Guides topics:
FortiManager normalized interfaces are specifically designed for sharing policy packages across multiple FortiGate devices whose physical interface names or layouts may differ. The FortiManager 7.6 guide states that interfaces can be mapped per device, per platform, or by both methods. Default normalized interfaces already include per-platform mapping rules covering FortiGate models.
For a deployment using the same FortiGate model with consistent interface roles, a per-platform normalized-interface mapping is therefore the appropriate scalable design. When FortiManager installs the policy package, it translates the normalized interface into the corresponding physical interface on each target FortiGate. CLI scripts are unnecessary for normal policy interface assignment. Metadata variables provide device-specific values but are not the primary mechanism for policy interface mapping. The Install On setting controls policy installation targets; it does not perform interface-role mapping.
================
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit