What feature can network administrators use to segment network operations and the administration of managed FortiSwitch devices on FortiGate?

FortiGate multi-tenancy, achieved through the use of Virtual Domains (VDOMs), is the feature designed to segment a single FortiGate device into multiple, independent virtual firewalls. When VDOMs are enabled, a FortiLink interface can be assigned to a specific VDOM. This allows network administrators to manage a distinct group of FortiSwitch devices within that VDOM, complete with its own separate security policies, VLANs, and administrative access. This effectively partitions both the network operations and the administration of the managed FortiSwitch infrastructure, catering to multi-tenant environments.

B. Multi-chassis link aggregation trunk: This is a high-availability feature that provides link and device redundancy by bundling interfaces across two separate FortiSwitch units, not for segmenting administration.

C. FortiGate clustering protocol: This is a high-availability (HA) protocol (FGCP) used to cluster multiple FortiGate devices for redundancy and failover, not for administrative segmentation.

D. FortiLink split interface: This feature allows a single physical FortiGate interface to carry both FortiLink traffic and other types of network traffic, which is a port utilization feature, not an administrative segmentation method.

---

1. FortiSwitch Manager 7.6.0 Administration Guide, Managed FortiSwitch with VDOMs, Page 100.

The document states: "You can use virtual domains (VDOMs) to divide your managed FortiSwitch units into multiple logical groups. Each VDOM has its own FortiSwitch VLANs, FortiSwitch STP settings, and administrators." This directly supports the use of VDOMs (multi-tenancy) for segmenting administration and operations.

2. FortiOS 7.6.0 Administration Guide, Virtual Domains > Introduction to VDOMs, Page 2138.

The guide explains: "VDOMs divide a single FortiGate into multiple virtual devices that each operate as a separate FortiGate... Each VDOM has separate administrator accounts, security policies, routing tables, and other settings." This confirms that VDOMs are the core feature for multi-tenancy and administrative segmentation.