One console to control all your firewalls, switches and Wi-Fi. You make a change once and push it everywhere.
Devices are grouped into administrative domains, and rules are stored as policy packages. An administrator edits a package once, reviews it and installs it on many firewalls. FortiManager keeps revision history, so you can compare versions and roll back. It can also manage connected switches and access points.
Inmate technology policy only works if it’s enforced the same way everywhere. A rule allowing something in one facility can be used to bypass the policy, and administrators need to prove that the approved rules are the ones running. FortiManager keeps one standard across all sites, with a record of each change.
- Applies one approved inmate access policy to every facility.
- Shows who changed a rule, when, and what changed, which helps when an inmate’s access is questioned.
- Rolls back a bad change quickly, which matters in a 24/7 operation.
- Policy packages: inmate zones, schedules and allowlists can be defined once and installed on all facilities.
- Policy packages apply one standard across facilities while allowing site-specific exceptions.
- Revision history shows what changed, by whom and when, and supports fast rollback.
- Scheduled firmware rollouts make patching consistent.
- Workflow approval can require a second person to review a change before it’s installed.
| Control | Priority | How this helps |
|---|---|---|
| CM-2Baseline Configuration | P1 | Stores the approved baseline configuration for firewalls, switches and Wi-Fi. |
| CM-6Configuration Settings | P1 | Enforces consistent settings across devices. |
| SI-2Flaw Remediation | P1 | Central firmware scheduling helps you apply security updates. |
| AU-2Event Logging | P2* | Logs administrator actions. |
| AC-6Least Privilege | P1* | Role-based admin access limits what each administrator can change. |
Fortinet’s FIPS page lists 140-2 entries for FortiManager, and CJIS now calls for 140-3. Ask Fortinet for the current status if it handles CJI traffic.
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table