FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ihaidar
Staff
Staff
Article Id 420298
Description This article describes about specific information when configuring FortiGuard API connection with 3rd party SIEM.
Scope FortiGuard.
Solution

Assume that the following topology is configured. The SIEM will have the API URL configured to communicate with FortiGuard.


FortiGuard <-> API <-> SIEM.

The following information will be useful for the user:

  • The feed refresh interval is 3h, no limits.
  • The expected response when no new data is available should be 'empty response'.
  • A 404 response could be related to network issues.
  • There is no limitation once token is generated, it can be used multiple times.

 

Contributors