Fortinet Gate 60D, Administration Manual

Page: 116 / 706

Configuring global and VDOM resource limits Using virtual domains
FortiGate Version 4.0 Administration Guide
116 01-400-89802-20090424
http://docs.fortinet.com/ • Feedback
6 Select the VDOM that this administrator manages.
Administrators are assigned to a specific VDOM when the account is created unless
they are super_admin administrators. For more information, see
“Configuring an
administrator account” on page 212 .
7 Configure other settings as required.
For detailed information, see “Configuring an administrator account” on page 212 .
8 Select OK .
Changing the management VDOM
The management VDOM on your FortiGate unit is where some default types of traffic
originate, including:
• SNMP
• logging
• alert email
• FDN-based updates
• NTP-based time setting.
Before you change the management VDOM, ensure that virtual domains are enabled on
the system dashboard screen. For more information, see
“Enabling VDOMs” on page 108 .
Only one VDOM can be the management VDOM at any given time.
Global events are logged with the VDOM set to the management VDOM.
To change the management VDOM
1 Go to System > VDOM .
2 From the list of VDOMs, select the VDOM to be the new management VDOM.
This list is located to the immediate left of the Apply button.
3 Select Apply to make the change.
At the prompt, confirm the change.
Management traffic will now originate from the new management VDOM.
Configuring global and VDOM resource limits
FortiGate units have upper limits for resources such as firewall policies, protection profiles
and VPN tunnels. These limits vary by model. In general, the more VDOMs the FortiGate
unit supports, the greater the impact on resource limits. In previous releases of FortiOS,
maximum values for resources belonging to virtual domains (VDOMs) applied equally to
each VDOM. Maximums for system-wide (global) resources applied globally and the
resources were equally accessible to each VDOM.
If you are a super administrator, you can control resource allocation to each VDOM. This
limits the impact of each VDOM on other VDOMs due to resource competition. Also, you
can set global resource limits to control the impact of various features on system
performance.
Note: You cannot change the management VDOM if any administrators are using RADIUS
authentication.