FortiOS

Release 1.0

This feature is in Early Release/BETA. Please contact your Epiphany Systems support or sales contact to learn more.

About This Document

This guide details the steps necessary to connect FortiOS network configurations to the Epiphany Intelligence Platform. The Epiphany Intelligence Platform leverages data from network configurations to provide greater visibility into the exposures of risks in you environment.

Overview

FortiOS allows access to its network configurations by virtue of its API via an API token, or by extracting its configurations from its command line interface (CLI).

The Epiphany Intelligence Platform only requires read-only rights to the FortiOS appliance, which is a set of rules outlined later is this guide.

As stated above, there are two options to collect the needed network configurations:

• Option 1 - API access: Generate an API token and submit it to your Epiphany dashboard.

• Option 2 - CLI collection: Collect the network configurations and submit them to the local Epiphany Site Collector via SSHv2.

Version Compatibility

• Epiphany Site Collector: Version 1.0 and later.

• FortiOS: FortiOS 5.0 and later, or FortiOS with REST API Support

• SSH: If you use this method for submission, you are required to use SSHv2.

Prerequisites

• Access to the FortiOS appliance via CLI or WebUI.

• Ability to create API token or pull full appliance configurations manually.

What is Needed for API Integration

• Username with API access.

• Password to username.

• API Key generated after API user is created.

• The FortiOS device’s IP, or FQDN.

Legal Notice