Skip to main content
U_shah
Visitor III
June 13, 2024
Question

FortiEMS security Logs to Third Party SIEM

  • June 13, 2024
  • 2 replies
  • 1967 views

Hi,

 

Is there a possibility to send Forticlient logs mostly security and system events that are fetched by FortiEMS to a third party SIEM.Right now, the only option I see is to send FortiEMS Event logs to Syslog. We dont have the SIEM on a public IP and thus require FortiEMS to be the mediator as it already collects these logs for its dashboard.

2 replies

ebilcari
Staff
Staff
June 14, 2024

It seems that FCT EMS cannot be used to forward FCT events via syslog. FortiAnalyzer can serve as a collection point for FCT events and then forward that information to a 3rd party SIEM.

Emirjon
U_shah
U_shahAuthor
Visitor III
June 21, 2024

We dont have a FortiAnalyzer. Sad that there is a dependency on 3rd product.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.