FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
parthpatel
Staff
Staff
Article Id 269605
Description This article describes steps for setting up an automation stitch to monitor FortiSwitch and FortiAP devices connected to the network. Once the automation is set it will be possible to get notification for devices going offline or coming back online 
Scope FortiGate.
Solution

First, set up automation by navigating to 'Security Fabric -> Automation -> Create New'.

Under Create New, the automation needs to be set up with trigger Forti OS event logs. Following Forti OS events need to be added under trigger.

Physical AP join: This event will notify us of AP joining the network.
Physical AP leave: This event will notify us of AP going offline in the network.
Switch-Controller Tunnel Down: This will notify of Switch joining the network.

Switch-Controller Tunnel Up: This event will notify of Switch going offline in the network.


AP1.PNG

 

Once the events are added, the last step is to configure the action. There are multiple actions to choose from, for this example, it has been selected the email notification which will notify the email recipients whenever any AP or switch leaves/joins the network.

 

AP3.PNG
After completing the setup, just enable the automation and it will keep monitoring the AP and Switch status. Whenever there is any event logged for AP or Switch all the email recipients will receive email notification and can take actions accordingly.