Troubleshooting Tip: Unable to Integrate FortiSIEM with Bitdefender GravityZone due TLS Error
| Description | This article explains how to solve the error: {"code":-32602,"message":"Invalid params","data":{"details":"The web server with this URL must support TLS 1.2, at least"}}}' trying to enable Endpoint Bitdefender GravityZone forward events to FortiSIEM. |
| Scope | FortiSIEM. |
| Solution |
"error":{"code":-32602,"message":"Invalid params","data":{"details":"The web server with this URL must support TLS 1.2, at least"}}
It is displayed when running the script enableBitDefenderForwardEventsToFortiSIEM.py to enable event forwarding, and multiple WAN links may be configured in the network to provide Internet access.
6. Since Bitdefender GravityZone is a cloud-based service, a public IP address is required for the supervisor or collector to enable event forwarding. 7. Make sure the script enableBitDefenderForwardEventsToFortiSIEM.py is using a public IP address in the option 'FSIEM Collector/Supervisor IP'. Ensure the node has access to the Internet using the same public IP address. This means the same public IP is used as source NAT and destination NAT, and the same WAN link. Verify by running the following command: curl ifconfig.me. |
