---
updatedAt: 2026-08-13T13:49:02.000Z
agentTools:
  projectIndex: https://docs.liongard.com/llms.txt
---

# Fortinet FortiManager (Beta)

<Callout icon="👍" theme="okay">
  ## **Quick Details**

  **Recommended Agent:**  On-Demand<br />**Supported Agents:** On-Demand and Self-Managed<br />**Is Auto-Discovered By:**  N/A<br />**Can Auto-Discover:**  Fortinet Fortigate Child Inspectors<br />**Parent/Child Type Inspector:** Yes<br />**Inspected via:**  API<br />**Default Frequency:&#x20;**&#x44;aily. (max every 8 hours)<br />**Data Summary:** [FortiManager Inspector Summary](https://docs.liongard.com/docs/fortinet-fortimanager-inspector-summary)
</Callout>

# Overview

<br />

## Inspector Setup Preparation

<Callout icon="⚠️" theme="warn">
  ### **Prerequisites & Access Requirements**
</Callout>

## Inspector Setup:

&#x20;**Create the Liongard Service API Account**

The Liongard FortiManager Inspector requires a dedicated **REST API Administrator** account with a **read-only administrator profile**.

Complete the following steps to create the required account and generate an API key.

***

**Step 1: Create a Read-Only Administrator Profile**

1. In FortiManager, navigate to **System Settings → Admin Profiles**.
2. Click **Create New**.
3. Enter a name for the profile, such as **Read Only**.
4. Select every permission in the **Read-Only** column.
5. Click **OK**.&#x20;

   <Image src="https://files.readme.io/c3ab2f24c25e677e114c16604cccdd78d02a8389882eb6bda3cf99aa657afc7f-FFM_Readonly.png" width="65%" border={true} />

<br />

***

**Step 2: Create a REST API Administrator**

1. Navigate to **System Settings → Administrators**.

2. Click **Create New → REST API Admin**.&#x20;

   <Image src="https://files.readme.io/6fc1f4c4c69b50cd094cbb115fbf6a334804cb43496284fb46a7bf2c61018d47-RAPI1.png" border={true} />

3. Configure the account using the following settings:

| Setting                         | Value                                                                    |
| ------------------------------- | ------------------------------------------------------------------------ |
| **User Name**                   | `liongard_svc`                                                           |
| **Administrator Profile**       | Select the **Read Only** profile created in Step 1                       |
| **JSON API Access**             | **Read and Write**                                                       |
| **Trusted Hosts (IPv4 Host 1)** | Enter the IP address of the server where the Liongard Agent is installed |

<Image src="https://files.readme.io/fe1e0fafb5e9803201583072e63ba2a4bb46fbda430bb353fc3f0a99e23fcad3-RAPI2.png" width="50%" border={true} />

4. Click **OK**.
   <Callout icon="⚠️" theme="warn">
     ### **Important:**

     After you save the account, FortiManager displays the API key **only once**. Copy the key immediately and store it securely. You will need this API key when configuring the Liongard FortiManager Inspector.&#x20;


     <Image src="https://files.readme.io/d19d6c95dd4eb20cd03501543405e8e0f58e3d7ebb9bac172a2f466ddc4811b2-RAPI3.png" width="75%" border={true} />

   </Callout>

***

### Step 2: Configure the Fortinet FortiManager Inspector in Liongard

1. Log in to the Liongard platform.
2. In Liongard, navigate to **Admin > Inspectors > Inspector Types > Navigate to the Fortinet FortiManager** **Inspector > Select Add System.**

Since the Fortinet FortiManager Inspectors are multi-tenant systems where a single portal can be used to manage many Environments, you will set up a single "Parent" Inspector that will then auto-discover "Child" Inspectors for each Environment.

Fill in the following information:

* **Type of Inspector:** Parent
* **Environment:** Select your MSP's Environment
* **Friendly Name:** Suggested Naming: \[*Customer Name]&#x20;*&#x46;ortiManage&#x72;*&#x20;Parent*
* **Agent:** Select the On-Premises Agent installed for this Environment
* **Inspector Version:** Latest
* **Deployment Type:&#x20;**&#x53;elect **On-Premises** for a directly reachable FortiManager appliance, or **FortiManager Cloud** for a Fortinet-hosted instance
* **Host/FQDN:** The IP address or FQDN of your FortiManager device. Do not include the protocol (ex: https\://)
* **HTTPS Port:** Enter the port used to reach your device (ex: 443)
* **Cloud Account ID:** Enter your account ID — required only if Deployment Type is FortiManager Cloud
* **Cloud Region:** Enter your region — required only if Deployment Type is FortiManager Cloud
* **API Key (Bearer):&#x20;**&#x54;he API Key generated for the service account created above
* **Username and Password:** Optional if you are not using an API Key.
* **Scheduling:** The Inspector will default to running once a day at the time it is set up. Here you can adjust the schedule
* Select **Save.** The Inspector will now be triggered to run within the minute.

### Step 3: Child Inspector Setup&#x20;

After the first run of the Parent Inspector, your client Fortinet FortiGate organizations will be auto-discovered in the **Discovered Systems** tab on the **Inspectors** > **Appropriate Fortinet FortiManager Inspector** page.

* Activate or Archive your Discovered Systems by ensuring that they're **mapped to the correct Environment** > **Check the checkbox to the left of Inspector(s)** > **Select the Actions drop-down menu** > **Activate Launchpoints**
* Click **Save.**