Technical Tip: How to preconfigure the FortiData Security Fabric connector or Authorize on the FortiOS CLI

Description

This article describes how to preconfigure the FortiData Fabric Connector to automatically authorize the device to join the Security Fabric or to authorize the device on the CLI.

Scope

FortiOS v7.6.4+ and v8.0.0+, FortiData.

Solution

FortiData is a system used to scan configured various file storage systems, AWS S3, SharePoint, Samba (SMB), and Google Drive.

FortiData uses AI/ML and various classifiers and frameworks to classify and label files to determine their sensitivity for various use cases such as public exposure, third-party access, data encryption, and data minimization. This can also be used to assess risk.

To connect the FortiData Fabric Connector using the FortiOS GUI, see the following documentation:

Connecting FortiData to FortiGate

Connecting to FortiData

Authorize the FortiData Fabric Connector on the CLI.

First, enable FortiData on the CLI:

config system fortidata
    set status enable
end

Check pending fabric connections with the command: ‘diagnose sys csf authorization pending-list’. This will display the device serial number as well as certificate information.

On the FortiOS CLI, to authorize the device, use the command: ‘diagnose sys csf authorization accept <serial-number>’. The FortiData Connector will now display as 'Authorized', FortiOS will now show the Fabric Connector as 'Online' in the GUI.

Preconfigure FortiOS to authorize the FortiData fabric connector.

Replace 'FDTVMXXXXXXXXXXX' with the serial number of FortiData.

config system csf

    set status enable

    set group-name <fabric_name>

        config trusted-list

            edit "FDTVMXXXXXXXXXXX"

            set index 1

            set cn "FDTVMXXXXXXXXXXX"

        next

    end

end

Now configure the FortiData Fabric Connector as shown above. The FortiData Fabric Connector will immediately move to the authorization status 'Authorized'.