Deployment mode of Fortigate Firewall

The common deployment modes:

1. Transparent Mode: In this mode, the FortiGate unit operates as a transparent bridge, allowing it to seamlessly integrate into an existing network without requiring changes to IP addresses or network configurations. It can intercept and inspect traffic passing through it without modifying the network topology.

2. Gateway Mode: This is the default mode for FortiGate units. In gateway mode, the FortiGate device functions as a firewall and router, performing network address translation (NAT) and routing functions. It separates different network segments and controls traffic flow between them based on security policies.

3. Layer 2 Transparent Mode: Similar to transparent mode, but operates at Layer 2 of the OSI model. This mode maintains the original MAC addresses of packets passing through the FortiGate unit, allowing it to function seamlessly in Layer 2 networks.

4. VDOM (Virtual Domain) Mode: VDOMs enable the partitioning of a single FortiGate unit into multiple virtual firewalls, each with its own configuration settings, security policies, and interfaces. This is useful for service providers or organizations that need to provide firewall services to multiple customers or departments within a single device.

5. HA (High Availability) Mode: FortiGate devices can be deployed in a high availability configuration to provide redundancy and failover capabilities. In this mode, two FortiGate units operate in an active-passive configuration, with one unit serving as the primary firewall and the other as the standby. If the primary unit fails, the standby unit takes over seamlessly to ensure continuous network availability.

6. Cluster Mode: In cluster mode, multiple FortiGate units are interconnected to form a cluster, providing scalability, high availability, and load balancing. Traffic is distributed across the cluster members, and if one unit fails, the remaining units continue to handle traffic without interruption.

7. VDOMs in NAT/route mode: This mode allows you to configure VDOMs to operate in NAT/route mode, where each VDOM functions as an independent router with its own NAT and routing tables.