| Table of Contents | ||||
|---|---|---|---|---|
|
| Info |
|---|
|
Navigate to Integrations
...
In the CyberCNS portal,
...
navigate to Global Settings(⚙) > Integrations and choose
...
FortiGate from the integrations listed.
...
It will lead to add credentials for the Fortigate device. Provide details as requested.
Next, you will add credentials for your FortiGate firewall.
...
This will navigate to the FortiGate Page
Enter Credentials
Using API
| Info |
|---|
Please create a new User for CyberCNS before adding the credentials to FortiGate Firewall. |
In FortiGate navigate to the Administrators, In Administrators click on the Create New dropdown, and select REST API Admin.
...
Set a username for the API administrator account and select its profile. Use an existing profile create a new one and limit permissions to what the plugin will be used for.
...
Once decide to create a new profile, select Add from the Administrator Profile dropdown.
...
Once decide to create a new profile, assign it a name and give it appropriate permissions. Optionally, provide a description of what this profile is allowed to do and where it's used. The plugin actions require a minimum of Firewall Read permissions.
...
Click OK to create the new profile.
Place the IP of the probe that will be doing the scanning in trusted hosts.
...
Next, click OK to create a new user. The New API key will be generated.
...
| Info |
|---|
Note that multiple credentials can be added by using the '+' sign. Each set of credentials can be attached to a company and then to an agent under that company. |
Enter Name: Choose a name of your choice for the credentials to be added.
Enter Hostname/IP Address: Enter a Hostname/IP address for the credentials to be added.
Enter Port Number: Enter the Port Number for the credentials to be added
...
(https port for API scan[integrating with API Key]).
Enter Username: Enter the username used to log in to the Fortigate Firewall. It is recommended that to define a special username to be used exclusively for these scans so that it can be identified in the firewall’s logs.
Enter
...
API Key: If you want to scan the firewall via API (more reliable) enter the API Key.
| Info |
|---|
If integrating with API key https port should be integrated. |
Select an associated company: Select
...
an existing company
...
in order to add
...
the firewall as an asset of that company
...
.
...
...
Select Probe/Agent: Select the Probe/Agent from the selected company to be used for the scan.
...
If no agent is installed
...
for the company, an external scan agent can be used to initiate firewall scans
...
from the CyberCNS Server (e.g. abc.mycybercns.com).
...
Once all the details below are provided, SAVE the data. Likewise, multiple credentials can be added in this section using the '+' sign. Each set of credentials can be attached to a company and then to an agent under that company.
...
data have been entered, click Save.
...
| Info |
|---|
After the credentials have been successfully added to the company, the Firewalls tab will be auto-created into added to the Main Menuof CyberCNS. |
In the Firewalls section, once you click on Firewall Scan, the scan for all to initiate a scan of all the configured firewalls will be initiated.
...
Once When the firewall scan is completedcomplete, details like of Groups, Users, Access Rules, LicensesLicense, Zones, and Interfaces will be are populated for the Fortigate firewall Firewall.
...
Completed firewall scans are listed with timestamps as shown below. Select the relevant timestamp to check for the respective results.
...
These results are available to To view the results of a scan, click the scan in the list.
The scan results can be downloaded as a report into Docx formatin the Microsoft Word .docx format by clicking Download Report.
...
This completes the documentation of the Fortigate Firewall
...
.