Hi @gwaihir This does not look like normal behavior. My recommendation
would be to raise a TAC case for this. The following link provides some
useful information about the output required by TAC:
https://community.fortinet.com/t5/FortiSIEM/Technical-...
Hi @Stephen_G For devices that are not supported out of the box by
FortiSIEM, custom parsers are required to interpret the events received.
The following link provides some more information:
https://help.fortinet.com/fsiem/7-2-1/Online-Help/HTML5_Hel...
Hi @massive_dynamic Some common issues would include: The credentials
have not been created on the FortiSIEM supervisor - This is a dedicated
account (not admin) The credentials for registration are incorrect -
Incorrect password for example. Windows...
Yes, you should to run the discovery from the correct organization. You
only mentioned SSH above. Did you also configure SNMP credentials. Did
the test credentials option work? Did the discovery succeed for SNMP?
Forticonverter can take a config from a 3rd party device such as a
Sophos firewall and convert aspects of the configuration into FortiGate
configuration.