NSE5-FMG-7-2: FortiManager 7.2

In FortiManager, a policy marked Installation Targets is installed to the installation targets configured for its policy package. A policy with individually listed targets is installed only to those specified targets. Thus, policy 3 applies to all managed devices and VDOMs listed as installation targets, while policy 1 applies only to the Remote-FortiGate root[NAT] and Student[NAT] VDOMs.

ADOM revisions preserve a revision history of an ADOM’s policy packages and objects, allowing those policy-level configurations to be compared or restored. They do not serve as system checkpoints or as revisions of individual managed FortiGate device-level settings.

A Conflict status indicates that the configuration was changed independently on both FortiManager and the managed device and is not automatically synchronized. Fortinet: Policy package installation targets

FortiManager can assign a global policy package to all policy packages in an ADOM. A policy package created in an ADOM that has that global package assigned is automatically associated with the global policy package, so the administrator does not need to import or manually reassign it.

The server-list under config system central-management contains additional FortiGuard update and rating servers, not DNS servers. A newly created system template includes default FortiGuard settings, so FortiManager purges an existing central-management server list to apply that default FortiGuard configuration.