Technical Tip: How to configure & use API token to communicate with FortiGate

[khoffman]

Description	This article describes how to generate and use a REST API token that can be used by FortiNAC. The use of a REST API token increases efficiency when communicating with FortiGates that are integrated with FortiNAC. This reduces the number of API login events made by FortiNAC.
Scope	FortiNAC-F 7.2 and above.
Solution	Create a REST API Admin on the FortiGate. On the FortiGate, navigate to System -> Administrator. Select 'Create New'. Create a new 'REST API Admin'. Configure a REST API Admin. Set the profile to Administrator and configure the following: Visibility only: System read access to all VDOMs. Control: System read/write access to all VDOMs. (Optional) Set trusted hosts using the FortiNAC port1 IP address. Copy the API token generated. Add the FortiGate API token to the FortiGate device model in FortiNAC. In the FortiNAC Admin GUI, Navigate to Network -> Inventory. 'Right-click' on the FortiGate in inventory and select 'Model Configuration'.   Enter the FortiGate API Token generated in step 3. Select Apply. Related documents: Troubleshooting Tip: FortiGate API access.  FortiGate Endpoint Management Integration