Refer to the exhibit, which shows device registration on FortiManager.

Based on the policy configuration on NGFW-1, the configuration on both spokes is modified and automatically updated.

On NGFW-A, the configuration was changed and spokes are wailing for an autoupdate.

On both Spoke-1 and Spoke-2, the configuration was changed directly on the FortiGate device, and the changes were automatically retrieved by the device database.

Spoke-1 and Spoke-2 are sharing the same security policy configuration and the same policy package.