FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
JCPL
Staff
Staff
Article Id 341741
Description

This article describes the steps to establish a connection between Zabbix and FortiGate.

Scope FortiGate.
Solution

The configuration below demonstrates how to establish a connection between Zabbix and FortiGate. Modifications to the topology, ports, SNMP version, and other settings can be made based on specific organizational requirements.

 

Topology: 

 

Zabbix1.PNG

 

FortiGate:

 

Ensure that SNMP is enabled in the administrative access options on the interface to be monitored.

Image 1 displays SNMP enabled on the WAN1 interface:

 

Zabbix2.PNG

 

Configure SNMP Agent:

Go to System -> SNMP

Enable SNMP agent and fill in the requested information:

  • Description
  • Location
  • Contact info

Next, configure SNMPv3. Retain the default settings and input the following information:

  • Username: FortiGate
  • IP Address: 34.196.186.168

The SNMP user information should appear as shown in Image 2:

 

Zabbix3.PNG

 

Image 3 illustrates the expected SNMP configuration on the FortiGate:

 

Zabbix4.PNG

Image 3.

Zabbix:

  • In the left panel, navigate to Monitoring -> Hosts. After, create a new Host.

To use a template with Fortinet items, refer to the Zabbix documentation for instructions on uploading a FortiGate device template. In this case, the template has already been uploaded.

  • Add a host group.
  • In the interface type, select SNMP and fill in the FortiGate information.

Note that the Security name field must match the Username field configured in the FortiGate SNMP v3.

Image 4 demonstrates how the FortiGate configuration should appear in Zabbix:

 

Zabbix5.PNG

Image 4.

After adding the FortiGate in Zabbix, create a new item to test and confirm that it is successfully retrieving FortiGate information.

  • Go to Data Collection -> Hosts.

Verify that the availability column displays SNMP with a green background.

  • Select items, and create an item in the new window.

Image 5 illustrates how the FortiGate should appear to collect the data. At this point, 231 items have been obtained from the applied template.

 

Zabbix6.PNG

 

In the type, select SNMP Agent. In the SNMP OID field, use any of the following OIDs for testing:

 

1.3.6.1.4.1.12356.101.4.1.3.0 = CPU usage

1.3.6.1.4.1.12356.101.4.1.7.0 = Disk Capacity

1.3.6.1.4.1.12356.101.4.1.6.0 = Disk Usage

1.3.6.1.4.1.12356.101.4.1.4.0 = Memory Usage

 

In this case, the memory usage OID was used. Select Test, then Get Value. Image 6 shows that the percentage of memory used is 33%.

 

Zabbix7.PNG

 

Related documents:

FortiGate by SNMP - Zabbix.com documentation

Contributors