What is required to authorize a FortiGate on FortiAnalyzer using Fabric authorization?

Fabric authorization is a process where an administrator explicitly approves a FortiGate's request to connect to FortiAnalyzer. To perform this action, the administrator must first log in to the FortiAnalyzer's graphical user interface (GUI). This login requires a valid username and password, which are the FortiAnalyzer credentials. Once authenticated, the administrator can navigate to the Device Manager, locate the unauthorized FortiGate, and authorize it. Therefore, possessing valid FortiAnalyzer credentials is a fundamental prerequisite to perform the authorization.

A. A FortiGate ADOM: An ADOM is the administrative domain where a device is placed after it has been successfully authorized, not a requirement for the authorization action itself.

B. The FortiGate serial number: The FortiGate automatically sends its serial number to the FortiAnalyzer for identification. The administrator uses this to identify the device but does not provide it as a credential to authorize.

C. A pre-shared key: A pre-shared key is used for a different, manual method of adding a device and is not part of the standard Security Fabric discovery and authorization workflow.

1. FortiAnalyzer Administration Guide 7.4.0

Page 100

Section: "Authorizing devices". This section details the procedure for authorizing a device from the Unauthorized Devices list within the Device Manager. The entire process is performed by an administrator logged into the FortiAnalyzer GUI

which inherently requires valid credentials.

2. FortiAnalyzer Administration Guide 7.4.0

Page 99

Section: "Adding devices". This section outlines that when a device is configured to send logs

it appears in the Unauthorized Devices list

and "You can then authorize the device". This "You" refers to the authenticated administrator operating the FortiAnalyzer.