Skip to main content
Taher11
Taher11
Explorer II
August 10, 2023
Solved

Configuring SSH on FortiSIEM to communicate with FortiGate

  • August 10, 2023
  • 4 replies
  • 3350 views

Hello, 

I would like to configure SSH on FortiSIEM in order to monitor any change on the configuration from the fortigate side

    Best answer by premchanderr

    Hi @Taher11 ,


    The issue is specific only for your environment and it requires some troubleshooting by analyzing your logs. It would be better if you can open a support ticket and engineer would assist you. 

     

    4 replies

    premchanderr
    Staff & Editor
    premchanderr
    Staff & Editor
    August 11, 2023

    Hi @Taher11 ,

     

    The steps for this is documented in external systems configuration guide: 

     

    https://docs.fortinet.com/document/fortisiem/7.0.1/external-systems-configuration-guide/751381/fortinet-fortigate-firewall

     

    Let me know if you have any specific query on this.

      Taher11
      Taher11Author
      Explorer II
      August 11, 2023
       

      Thanks, I successfully added Fortigate to Fortisiem using SSH and SNMP. Still, the problem I face now is that the CMDB method tab for this particular FortiGate firewall shows LOG instead of SSH or SNMP.

      @premchanderr Screenshot 2023-08-11 092018.png

       

      kcanalichio
      kcanalichio
      New Member
      August 11, 2023

      I would check to see if you have multiple entries in the CMDB for the firewall it sound like it didn't merge correctly when you discovered it due to an name or IP mismatch. You might also need to make sure the source-ip of your syslogs messages are being sent from it the same address ip as the one your discovering using SNMP

      Taher11
      Taher11Author
      Explorer II
      August 11, 2023

      Well in the CMDB there is one entry for this particularly FortiGate

      premchanderr
      Staff & Editor
      premchanderrAnswer
      Staff & Editor
      August 17, 2023

      Hi @Taher11 ,


      The issue is specific only for your environment and it requires some troubleshooting by analyzing your logs. It would be better if you can open a support ticket and engineer would assist you. 

       

        Taher11
        Taher11Author
        Explorer II
        August 17, 2023

        Thank you for your feedback 

        Terms & ConditionsAccessibility statement