Skip to main content

Incident ResponderIncident Responder Documentation

Configure the Fortinet Service

Configure Fortinet as a service to block and unblock IP addresses using actions.

  • Create a PyFortiAPI firewall object. You use the ipaddr, username, and password later.

  • If you use a proxy, ensure that you whitelist your the IP address or domain of your Fortinet API endpoint.

  1. In the navigation bar, click the menu The menu icon in the navigation bar; three white lines on a green background., select Settings, then select Core.

  2. Under SERVICE INTEGRATIONS, select Services.

  3. Select a service:

    • To configure a specific service, hover over a service, then click CONFIGURE. Use the search by vendor or filter by action to find a service.

    • To manually provide the relevant information for a service, click Configure a new serviceA blue circle with a white plus sign..

    • To view all actions for a service, hover over a service, then click the information icon An icon of a grey i inside a grey circle..

  4. Enter information about the service:

    • Service Name – Enter a unique name for the service. By default, the service name is Fortinet.

    • (Optional) Description – Describe the service.

    • (Optional) Owner – Enter the email address of the person or group responsible for the service. 

    • Host – Enter the management IP address of the target device. This is the value of the ipaddr parameter you used for the firewall object.

    • Username – Enter the username of the account used to log in to the target device. This is the value of the username parameter you used for the firewall object.

    • Password – Enter the password of the account used to log in to the target device. This is the value of the password parameter you used for the firewall object.

  5. To validate the source, select TEST CONNECTIVITY.

  6. Select CREATE SERVICE.