When a FortiGate unit is set to split VDOM mode, the system automatically partitions its resources into two predefined Virtual Domains (VDOMs). The root VDOM is created specifically for management purposes, isolating administrative traffic and typically containing only the dedicated management interfaces. Concurrently, a second VDOM named FG-traffic is created to handle all data plane traffic, and all non-management interfaces are moved into this VDOM. This architecture enhances security by separating network management from general network traffic.

B. Mgmt: This is not a default VDOM name. The management VDOM is named root by default in split VDOM mode.

C. FG-Mgmt: This is not a default VDOM name created by FortiGate in split VDOM mode.

1. Fortinet. (2023). FortiOS Administration Guide 7.4.0. Fortinet Document Library. In the "System > VDOMs > Split VDOM mode" section

it states

"When split VDOM mode is enabled

two VDOMs are created: root and FG-traffic. The root VDOM is the management VDOM and contains only the management interfaces. All remaining interfaces are in the FG-traffic VDOM."

2. Fortinet. (2022). FortiGate Infrastructure 7.2 Study Guide. Fortinet Training Institute. Page 318

under the "Split VDOM Mode" heading

specifies

"When split VDOM mode is enabled

two VDOMs are created: root and FG-traffic."