5.2.1.1 Ensure Security Fabric is Configured

Information

Ensure Root FortiGate is configured as security fabric root.

Without a root FortiGate configured, the security fabric is not functional and can not be leveraged.

Please note that this is only applicable if security fabric function within FortiGate is used.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Remediation through the GUI:

1. Go to "Security Fabric" -> Fabric Connectors and then select "Security Fabric Setup".
2. On the root FortiGate, set the status to enabled and the Security Fabric Role to "Serve as Fabric Root".
3. Configure FortiAnalyzer settings when prompted and define a Fabric name as well as interfaces that will "Allow other Security Fabric Devices to Join".

Impact:

Without Security Fabric enabled, visibility and management of traffic throughout an organization is decreased and individual FortiGate management becomes more intensive.

See Also

https://workbench.cisecurity.org/benchmarks/15284

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: FortiGate

Control ID: 62ef434086cf17ed763458ee22d2edeafd12069a7e3c2860f83436324b8247f4