FortiCloud v1.15.

1
Frequently Asked Questions
FortiCloud v1.15.1 Frequently Asked Questions
May 10, 2013
32-1144-185514-20130510
Copyright 2012 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, and FortiGuard, are
registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks
of Fortinet. All other product or company names may be trademarks of their respective owners.
Performance metrics contained herein were attained in internal lab tests under ideal conditions,
and performance may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any binding commitment
by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the
extent Fortinet enters a binding written contract, signed by Fortinets General Counsel, with a
purchaser that expressly warrants that the identified product will perform according to the
performance metrics herein. For absolute clarity, any such warranty will be limited to
performance in the same ideal conditions as in Fortinets internal lab tests. Fortinet disclaims in
full any guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise
this publication without notice, and the most current version of the publication shall be
applicable.
Technical Documentation docs.fortinet.com
Knowledge Base kb.fortinet.com
Customer Service & Support support.fortinet.com
Training Services training.fortinet.com
FortiGuard fortiguard.com
Document Feedback techdocs@fortinet.com
Fortinet Technologies Inc. Page 2 FortiCloud Getting Started Guide
What is FortiCloud?
FortiCloud (formerly known as FAMS) is a hosted security management and log retention
service for FortiGate and FortiWiFi devices. It gives you centralized reporting, traffic
analysis, configuration management and log retention without the need for additional hardware
and software.
It provides a subset of the FortiAnalyzer (Logs) and FortiManager feature set:
Traffic and application visibility
Real-time monitoring and alerting
Hosted log retention
Reporting and analysis
Configuration management
What features does FortiCloud provide?
Dashboard system and log widgets plus real-time monitors.
Log Viewer real-time log viewing with filters and download capability.
Drilldown Analysis user and network activity analysis.
Report Generator create reports in different formats including PDF to measure policy
compliance or illustrate network usage patterns.
Device Management configuration backup (including firmware), configuration history,
script management and alert profiles for real-time monitors.
How does FortiCloud work?
Each FortiGate device registers with FortiCloud under a single account. This is done via the
licensing widget in the FortiGate/FortiWiFi dashboard. The logs from each device are
periodically sent to FortiCloud and stored.
Logs are sent automatically every day to FortiCloud for storage and processing. You configure
what to log and upload. This could be as simple as the Traffic and Event logs or could include
other logs such as UTM (Web, Application, IPS etc.), Data Leakage or Network Scan.
From the recorded logs, reports can be generated to indicate trends within network traffic,
individual user activity and security threats across different applications. Drill-down capability
and real-time alerting are also available.
FortiCloud also takes copies of FortiGate/FortiWiFi configurations that can be used for backup
and restore or to provision new FortiGate/FortiWiFi. A VPN tunnel can be used to bring up the
console of selected FortiGate/FortiWiFi sitting behind a firewall for configuration or policy
changes.
Fortinet Technologies Inc. Page 3 FortiCloud Getting Started Guide
How does FortiCloud compare with FortiAnalyzer?
FortiCloud is an ideal solution for customers who do not want to implement a separate
hardware solution such as the FortiAnalyzer 200D series. However, it does not have all the
features of a FortiAnalyzer. A high-level comparison is shown below:
FortiCloud FortiAnalyzer
Business size SMB Enterprise
Licensing Per device, no minimum. Maximum device limit set per model.
Unlimited for VM model.
Granular administration Limited Yes
Supports external
authentication for
administrative access
No Yes
Disk quota Initial activation: 1Gb per
device. Subscription: 200Gb
per device.
Depends on model. Up to 24Tb for
the appliance, and 16Tb for the VM.
Centralized logging Real-time and batch uploads. Real-time and batch uploads, with
log aggregation and forwarding.
Aggregated reports No Yes
What is the difference between FortiCloud and FortiManager?
FortiCloud is an ideal solution for customers who do not want to implement a separate
hardware solution such as the FortiManager 200D series. However, it does not have all the
features of a FortiManager. A high-level comparison is shown below:
FortiCloud FortiManager
Business size SMB Enterprise
Licensing Per device, no minimum. Maximum device limit set per model.
Granular administrative
access profiles
No Yes
Supports external
authentication for
administrative access
No Yes
Alerts Yes, but simplified. Yes
Advanced configuration
management
Limited to scripting. Yes
What is the price of FortiCloud?
There is a no charge (Free) service option allowing 1 GB of storage data. However first you must
register your device(s).
Once activated, your account type in the dashboard license widget will indicate Free 1GB
Fortinet Technologies Inc. Page 4 FortiCloud Getting Started Guide
If you wish to upload more than 1GB of log storage from a FortiGate/FortiWiFi, you need to
acquire a 200GB subscription license (Contract Number) based on the following SKU:
Description SKU
1 year FortiCloud Basic Service with up to 200GB of storage for a
single FortiGate
FC-10-90801-131-02-12
Do I need a support contract to enable the service?
No, but you do need to register each FortiGate/FortiWiFi at the Service and Support portal.
Its very important to register each device in your network, or the service (free or subscribed)
cannot be enabled.
How do you enable FortiCloud service?
These are the steps for service activation. Please refer to the help guide at
https://www.forticloud.com (the top right-hand corner blue question mark icon).
1. Register the FortiGate/FortiWiFi in the Service and Support Portal.
2. Create an account in the /FortiWiFi dashboard licensing widget.
3. Activate the FortiGate/FortiWiFi within the dashboard licensing widget.
4. Set logs to upload (note this is automatic in the latest FortiOS 5.0 release).
5. Log into the portal https://www.forticloud.com and select Widgets and Reports
After an account is created, each FortiGate/FortiWiFi thereafter is attached to that same
account (username being an email address).
How do I subscribe to the 200GB service?
To upgrade to a subscription (200GB storage) you need to obtain a license (Contract Number)
from your Fortinet reseller. Then click on the Upgrade icon in the FortiGate/FortiWiFi dashboard
licensing widget. Follow the instructions presented.
It takes about 30 minutes for the backend systems to process the subscription. The account
type in your FortiGate/FortiWiFi will change from Free 1GB to Subscribed 200GB.
Do I get any other features when I subscribe to the 200GB subscription?
Yes. When you upgrade to a subscription, you will not have a daily limit on upload. More
subscriber-only features will be added in the next releases of FortiCloud.
What happens when the retention quota is reached?
When the retention quota reaches 80%, warning messages are sent through the connected
device(s). You can also configure FortiCloud to send alert emails. Your options are:
Manually deleting old logs in the FortiCloud interface;
If you have a 1G account, acquiring a device license to add 200G of storage; or
Waiting for logs to roll (old logs to be automatically deleted).
If no action is taken and the log storage is full, the FortiGate/FortiWiFi will stop sending logs to
FortiCloud until space is available.
Fortinet Technologies Inc. Page 5 FortiCloud Getting Started Guide
What if I want more than 200GB log storage per FortiGate/FortiWiFi?
If you need more than 200GB per FortiGate/FortiWiFi, please consider the FortiAnalyzer product
series which has up to 24TB of storage per appliance or 16TB per virtual machine version.
Does FortiCloud support devices from other vendors?
FortiCloud only supports FortiGate and FortiWiFi products. It does not currently support other
companys products for log retention.
Which FortiGate and FortiWiFi models does FortiCloud support?
FortiGate
All FortiGate models from the 300 series and below natively support FortiCloud with the console
licensing widget. Models from 600 to 800 series and greater need to use the CLI to activate and
models above 600 series do not support FortiCloud.
FortiWifi
All FortiWifi models 20 to 80 support FortiCloud natively through the dashboard licensing
widget.
Are there any FortiGate products that are required to use FortiCloud (and
FortiAnalyzer) for logging and reporting?
Yes, FortiGate/FortiWiFi models 20C/40C/50C/60C/80C/100A and above release FortiOS
v4.0MR3 Patch7models have to use either FortiAnalyzer or FortiCloud for logging and reporting.
How do you configure service once it is activated?
The configuration of the service is done via the web portal at https://www.forticloud.com. The
logs will automatically start appearing in the logs and archives section.
Please refer to the help guide at https://www.forticloud.com (the top right-hand corner, blue
question mark icon) for more information on FortiCloud and configuration.
Fortinet Technologies Inc. Page 6 FortiCloud Getting Started Guide
Is this a global service?
Yes.
What languages is FortiCloud available in?
FortiCloud currently supports three languages: English, Japanese and Chinese. These can be
selected via the web portal login page.
Is FortiCloud a new service?
No. FortiCloud has been operational for 2+ years and currently has thousands of active
FortiGate/FortiWiFi devices under management. Customers are adding FortiGate/FortiWiFi
devices around the world every day. With the introduction of FortiOS 5.0, the name has been
changed from FAMS to FortiCloud.
What are the main differences between FAMS and FortiCloud?
The main difference is the licensing model and the activation widget within the dashboard
licensing widget which includes a more functional dashboard licensing widget in the
FortiGate/FortiWiFi where you can set when uploads occur, send the logs immediately if
desired, and change the upload time if you are a subscriber. In addition, the widget will give you
the account type, such as Free or Subscribed.
What do I do if Im an existing FAMS customer?
No immediate action is required. Your FortiGate/FortiWiFi will continue to work as before. Your
storage plan remains in place. You will notice the FAMS name has changed to FortiCloud when
you log in to the portal. You can also upgrade you devices to FortiOS 5.0 and use the new
features within the licensing widget.
When you renew your service, you get a FortiCloud style license. You will need a storage license
for each FortiGate/FortiWiFi. The system will automatically make any conversions from
account-based to FortiGate/FortiWiFi-based licensing.
What if I still have some unused FAMS licenses?
If you still have an unused FAMS contract license, you can log in to the FortiCloud portal and
register the FAMS contract. This option will be available until 1/14/2013.
Does my FortiGate unit require a hard drive to use FortiCloud?
Not if logs are being uploaded to FortiCloud in real-time, which can be enabled in the Log
Setting page in the FortiGate interface.
What are Rolling Logs?
Rolling logs enable you to automatically delete older logs to make space for new log data. Free
1G accounts will stop logging when they reach their limit, and the user must manually delete the
log data, although free accounts will roll logs older than 30 days.
What security and redundancy has been built into the service?
Logs are transferred between FortiGate and the FortiCloud cloud storage via an encrypted link.
All system elements are duplicated for redundancy.
Fortinet Technologies Inc. Page 7 FortiCloud Getting Started Guide
What happens if I lose my password?
You can reset your password on the FortiCloud site.
What if I want to unsubscribe from the service and stop my logs from uploading?
You can disconnect your account from the dashboard in your FortiGate/FortiWiFi. In the
Licensing widget, click on the FortiCloud Log-out button. This will detach the
FortiGate/FortiWiFi from the account and stop the logs from uploading.