An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed…

In FortiManager, templates are used to enforce standardized configurations across multiple devices. When a template, such as a BGP template, is assigned to a FortiGate, the settings defined within that template take precedence over any manual, device-level configurations for the same feature. In this scenario, even though the administrator configured the BGP peer in the device-level database, the assigned BGP template's configuration was pushed during the installation. Since the new peer was not in the template, it was not applied to the FortiGate, resulting in the observed behavior.

A. A sanity check is used to verify database integrity. A corrupted database would likely cause installation failures or other widespread errors, not the silent omission of a specific setting.

C. The Install Wizard is the tool used for installation, but the choice of "Install device settings only" would not resolve the issue. The template's settings are considered part of the device settings and would still override the manual change.

D. A mismatch between the FortiGate firmware and the ADOM version typically generates warnings or causes the installation to fail. The question explicitly states the installation completed without any errors.

1. Fortinet FortiManager Administration Guide 7.2.3

Page 418

"Templates":

"Templates are used to provision and manage common device settings on managed devices... When you assign a template to a device

the settings in the template are applied to the device. If there is a conflict between the settings in the template and the settings on the device

the settings in the template take precedence." This directly supports the explanation that template settings override device-level settings.

2. Fortinet FortiManager Administration Guide 7.2.3

Page 420

"Creating a new template":

The guide details the creation of various templates

including CLI and BGP templates. It notes

"You can create templates to define specific configurations

such as BGP settings... and apply them to multiple devices." This confirms the existence and purpose of BGP templates.