NSE5-FMG-7-2: FortiManager 7.2

A FortiManager located behind NAT does not automatically set its IP address on a discovered FortiGate, because doing so could direct the FortiGate to FortiManager’s private, unreachable address. FortiManager detects a NATed FortiGate by comparing the FortiGate’s declared address with the actual remote source address, so the FortiGate is discovered through its NATed address. FGFM is initiated and retried by FortiGate, and FortiGate must use FortiManager’s reachable NATed management address rather than its non-NATed address.