FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
wmaier1
Staff
Staff
Article Id 365389
Description This article describes how NSX and LSSO connectors can be used to get the state of SDN connectors in the CLI or receive SDN Connector status by email. API can be used to get the state of the SDN connector and automation stitches can be triggered to send an email when the connector status changes.
Scope FortiGate.
Solution Basic SDN configuration example :


config system sdn-connector

    edit <name>

        set status {enable | disable}

        set type {connector type} ...

        set update-interval <integer>

    next

end

 

API calls can be used to get the state of SDN connectors.

 

Example API call  for the NSX connector: 
https://FortiGATEIP:HTTPSport/api/v2/monitor/system/sdn-connector/status

More API calls can be found in the online guide.

 

JSON response:


results
0
name "test"
type "nsx" -->
status "Down" -->
updating true
last_update 1733757826
vdom "root"
path "system"
name "sdn-connector"
action "status"
status "success"
serial "FGVM01TM21000565"
version "v7.4.2"
build 2571

 

Example API call for the FSSO connector: 
https://FortiGATEIP:HTTPSport/api/v2/monitor/user/fsso

More API calls can be found in the online guide.

 

JSON response:


results
0
name "10.191.35.39"
ldap_server ""
type "fsso"
status "connected"
active_server "10.191.35.39"
vdom "root"
path "user"
name "fsso"
status "success"
serial "FGVM01TM21000565"
version "v7.4.2"
build 2571

 

SDN connectors can also be monitored by triggering stitches that use the following event types 53000 53001 43050 43051. The following is a sample stitch structure:

 

config system automation-trigger

    edit "SDN Connector"

        set event-type event-log
        set logid 53000 53001 43050 43051

    next

end


Stitch action sends an email:

 

config system automation-action

    edit "Email Notification"

        set description "Send a custom email to the specified recipient(s)."
        set action-type email
        set email-to "noc@company.com"
        set email-from "fortigate@company.com"
        set email-subject "%%log.logdesc%%"

    next

end

 

To complete the stitch setup, it is necessary to add an automation stitch to trigger the automation-trigger and automation action:

 

config system automation-stitch

    edit "SDN"

        set trigger "SDN Connector"

            config actions

                edit 1

                    set action "Email Notification"
                    set required enable

                next

            end

    next

end