Technical Tip: FortiGate Integration with FortiWeb

On the FortiGate: Setup Security Fabric.

• Navigate to Security Fabric -> Fabric Connectors.

• Go to Security Fabric Setup.

• Select 'Security Fabric role' as 'Serve as Fabric Root'.

Note:

FortiAnalyzer or Cloud Logging is essential for the Security Fabric.

• Enable 'Allow other Security Fabric devices to join' and select the interface having connectivity to the FortiWeb (in this case, port3).
• Enter the Fabric Name (here, FortiWeb_Integration).
• (Optional) Pre-authorization of FortiWeb can be configured to enable the device to join the Security Fabric as soon as it connects.
• (Optional) SAML SSO can be enabled.

On the FortiWeb: Setup FortiGate:

• Navigate to Security Fabric -> Fabric Connectors.
• Select FortiGate.

• Enable 'Status'.
• Set the 'Upstream IP' of the interface that was selected on 'Allow other Security Fabric devices to join' in FortiGate (in this case, 172.30.17.193 for port3).
• 'Upstream Port' can be kept as default i.e., 8013.
• Enter the 'Management IP' as the FortiWeb GUI management IP.

• Enter the 'Management Port' as the FortiWeb GUI management HTTPS port, which can be verified under System -> Admin -> Settings.

• Select OK.

On the FortiWeb: Connection Status:

• Navigate again to Security Fabric -> Fabric Connectors -> FortiGate.

• The Connection Status will display as 'Authorize pending.'

Note:

If pre-authorization for FortiWeb on FortiGate (Step 1-f) is configured, FortiWeb will be authenticated right away.

On the FortiGate: Authorization of FortiWeb.

• Navigate to Security Fabric -> Fabric Connectors.
• The FortiWeb connector will now appear with a status of 'Waiting for Authorization.'

• Select FortiWeb and an option to 'Authorize' will be presented.

• Upon selecting 'Authorize,' a window will appear to 'Verify Pending Device Certificate.'

• Verify the certificate and select 'Accept'.
• The FortiWeb Connector Status will show as 'Online' after some time.

Note:

If the device does not come online in 6-8 minutes, verify the connection between devices.

On the FortiWeb: Verification of Authorization

• Navigate to Security Fabric -> Fabric Connectors -> FortiGate.
• The 'Connection Status' will now be updated to 'Authorized'.

On the FortiGate: Verification of Integration.

• Navigate to Security Fabric -> Physical Topology or Security Fabric -> Logical Topology to verify and check details.