FortiGate Integration with FortiEDR

[FortiHelp]

Dears ,

I have configured the connector on FortiEDR for the FortiGate, but the Jumbox is cloud-based to block any malicious IP on the endpoint. but there has been no action, although I have visited a malicious website.

My question is:. Does this connector work when the Jumbox is cloud-based, or should I install the core on-premise?

and this question is the same for Sandbox and NAC; all of them need on-premise cores or are working with cloud cores (Jumbox).

Thanks 

[FortiHelp]

Any Help?

[Anthony_E]

Hello FortiHelp,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello FortiHelp,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[Anthony_E]

Dear @ozkanaltas,

Do you maybe have the answer to this question?

Thanks a lot in advance for your expertize.

Regards,

[ozkanaltas]

Hi @FortiHelp, @Anthony_E ,

I do not have FortiEDR experience, but as far as I have researched, in order to integrate FortiEDR with FortiGate or other Fortinet products, you must either make these products accessible from the outside(internet) or install FortiEDR core in your internal network and configure it as an internal jumpbox. This jumpbox must have access to Fortinet products installed inside.

You can review these documents for more information.

https://docs.fortinet.com/document/fortiedr/6.2.0/administration-guide/778942/firewall-integration

https://docs.fortinet.com/document/fortiedr/6.2.0/administration-guide/626160/network-access-control...

https://docs.fortinet.com/document/fortiedr/6.2.0/administration-guide/913707/setting-up-the-fortied...

[Anthony_E]

Thanks a ton for your help!

[FortiHelp]

Thanks a lot ozkanaltas. I will try.