Technical Tip: OMI Kerberos authentication configuration

Description

This article describes the requirements and configuration needed to integrate the OMI Kerberos authentication successfully.

Scope

 FortiSIEM v7.5.0 and v7.5.1.

Solution

Prerequisites:

• Active Directory Server is configured for Kerberos authentication.

• DNS Server configured to resolve hostnames.

• OMI user permissions are configured in the Windows host.

See the WMI/OMI Configuration and Kerberos Configuration for OMI guides for more information.

FortiSIEM configuration:

1. Create OMI Kerberos credentials:

See the OMI Access Credentials configuration guide for more information.

2. Create an IP range association template:
   
   

3. Run the Association and Credentials test:
   
   

Ensure the test is run on the correct SIEM node by using the Use drop-down menu

Note: NTLM has been deprecated by Microsoft; therefore, OMI authentication for only local accounts is not supported.

See this document: What's New in 7.5.0 for more information in the release notes v7.5.0 documentation guide.