Technical Tip: How to send a notification from FortiCloud when FortiGate or FortiProxy is disconnected or management tunnel is down

[ssriswadpong]

Description

This article describes how to configure FortiGate Cloud to send alerts whenever a FortiGate or FortiProxy unit is disconnected from the management tunnel for an extended period of time and has been updated based on FortiGate Cloud v25.3.a.

Scope

FortiCloud, FortiGate, FortiProxy.

Solution

1. Log in to FortiGate Cloud: https://fortigate.forticloud.com/
   
2. On the left-hand navigation menu, select Administration -> Automation, then select the Actions tab, and then Create new.

3. Create a New Event Handler Action, specifying a Name and the action to take (Email and/or Webhook). In this example, Email will be used, so specify a recipient email address (To) and a Subject line for the email, then select OK to create the action.
4. Still in Administration -> Automation, change to the Stitches tab and select Create new.
5. Select the Add trigger button, then search for and select the Device Tunnel To Server Down option. Select the Add action button and specify the Email action created earlier.
6. Select a FortiGate from the available list that this Automation Stitch should apply to.Only devices with active FortiGate Cloud subscriptions may be associated with these Automation Stitches. Select OK to complete the Automation Stitch creation.

Important Note:

FortiGate Cloud is currently designed to wait for 30 minutes after the FortiGate/FortiProxy management tunnel goes offline before the Device Tunnel To Server Down trigger is executed.

This is meant to avoid excessive notifications caused by flaps in network connectivity, and so brief outages (such as reboots of the FortiGate) may not trigger this Automation Stitch.

At the moment, this timer is not configurable, but this will be added in FortiGate Cloud v25.4.a.