we are using FortiAnalyzer-VM with IOC license and everything is working fine: In FortiAnalyzer compromised hosts are shown.
But when I'm trying to view compromised hosts in our Fortigate environment (Fortigate 600E cluster) I get an error message "Compromised hosts requires a FortiAnalyze".
Fortigate Security fabric is configured as root fabric. FortiAnalyzer logging & Fortigate REST API is enabled with FortiAnalyzer certificate authentification.
Firmware Version 6.2.7.
In Device Manager primary Fortigate was added with S/N, HA-Cluster checkbox enabled and second Fortigate 600E with S/N was added to cluster list. super-admin user "admin" & password were added, too.
Tried to use internal FortiAnalyzer-VM certificate & our public wildcard certificate.
Firmware Version 6.4.3.
Does anyone know why communication not working?
Thanks a lot!