Chapter 19 Virtual Domains : Virtual Domains in NAT/Route mode : Virtual domains in NAT/Route mode : Configuring security profiles for NAT/Route VDOMs
  
Configuring security profiles for NAT/Route VDOMs
In NAT/Route VDOMs, security profiles are exactly like regular FortiGate unit operation with one exception. In VDOMs, there are no default security profiles.
If you want security profiles in VDOMs, you must create them yourself. If you have many security profiles to create in each VDOM, you should consider using a FortiManager unit. It can get existing profiles from a VDOM or FortiGate unit, and push those profiles down to multiple other VDOMs or FortiGate units. See FortiManager Administration Guide.
When VDOMs are enabled, you only need one FortiGuard license for the physical unit, and download FortiGuard updates once for the physical unit. This can result in a large time and money savings over multiple physical units if you have many VDOMs.