Analisis De Las Pruebas

What are VDOMs?

Virtual domains (VDOMs) divide a FortiGate security

gateway into two or more (up to 250) virtual FortiGate

devices, each operating as an independent FortiGate

security gateway. Each VDOM can provide completely

separate firewalling, routing, UTM, VPN, and next

generation firewall services. All traffic enters and leaves a

VDOM completely separated from traffic from other

VDOMs.

A multi-VDOM FortiGate unit can be centrally managed or

individual VDOM administrators can manage their own

VDOMs with no administrative access to other VDOMs.

Management traffic, including DNS lookups, FortiManager access, FortiAnalyzer access, Syslog logging, sending

alert emails, NTP, SNMP traps, and FortiGuard updates, are all handled from a separate management VDOM. If

required, logging and reporting can be configured per-VDOM, allowing individual VDOM administrators to record

and report on their VDOM’s activities.

Transparent mode and NAT/Route mode VDOMS can be added to a single FortiGate device allowing both options

on a network from a single platform. Traffic can also pass between VDOMs using inter-VDOM links. Inter-VDOM

links allow administrators to apply different types of content inspection and other controls to the same traffic in

different VDOMs. For example, traffic could be routed through a NAT/Route VDOM for routing following by a

Transparent mode VDOM for UTM filtering. Inter-VDOM link traffic can also be accelerated by NP4 network

processors available on many FortiGate models.

A reduced footprint

VDOMs are a green choice – they save space, energy, and money. With one FortiGate unit instead of ten or more,

you have a reduced footprint in the server room, use less energy, and generate less heat. This reduced footprint is

especially important for small companies renting co-located rack space in a shared data center.

The reduced footprint extends to lower management costs and reduced complexity. A multi-VDOM FortiGate

device can be kept up-to-date with the latest firmware and UTM signatures just as easily as a single FortiGa

...