FortiEDR
FortiEDR automates the protection against advanced threats, pre and post-execution, with real time orchestrated incident response functionality.
ymasaki
Staff
Staff
Article Id 305667
Description This article explains testing tools on Linux collector machines.
Scope FortiEDR.
Solution

connect 1 (Ubuntu) and connect 2 (CentOS) are connectivity test tools to generate a security event on Linux collector machines. If the event appears in the FortiEDR Manager, connectivity between the Collector and Aggregator and Manager is working.

connect 1 and connect 2 can be executed in the following methods:

  1. Ask Support to get connect 1 and connect 2.
  2. Verify in the Console where there is an Exfiltration Prevention Policy with the Unconfirmed Executable - Executable File Failed Verification Test rule enabled and applied to the correct group.
  3. Run 'chmod +x connect\ 2' and execute the file with './connect\ 2'.

In this scenario, the tool runs on CentOS. The same step is applied to Ubuntu to run connect 1.

 

connect_cli.png

 

  1. The event will show up in the console.

 

connect_gui.png

Contributors