It would be CEF. There is more information on the CEF mapping located at
https://help.fortinet.com/fsiem/5-2-5/Online-Help/HTML5_Help/Appendix_FSM-CEF-mapping.htm?Highlight=CEF.For
the FortiSIEM and PAN configuration, it is located at
https://help.fo...