Management extension applications
The following section describes supported models and minimum system requirements for management extension applications (MEA) in FortiAnalyzer 7.4.4.
|
FortiAnalyzer uses port TCP/443 or TCP/4443 to connect to the Fortinet registry and download MEAs. Ensure that the port is also open on any upstream FortiGates. For more information about incoming and outgoing ports, see the FortiAnalyzer 7.0 Ports Guide. |
As of FortiAnalyzer 7.4.0, the Management Extensions pane is only visible in the GUI when docker status is enabled and at least one MEA is enabled and downloaded. For more information about enabling and using the MEAs, see the Management Extensions documentation in the FortiAnalyzer Documents Library.
Supported models for MEA
You can use any of the following FortiAnalyzer models as a host for management extension applications:
| FortiAnalyzer |
FAZ-3000F, FAZ-3000G, FAZ-3100G, FAZ-3500F, FAZ-3500G, FAZ-3510G, FAZ-3700F, and FAZ-3700G. |
| FortiAnalyzer VM |
FAZ_VM64, FAZ_VM64_ALI, FAZ_VM64_AWS, FAZ_VM64_AWSOnDemand, FAZ_VM64_Azure, FAZ_VM64_GCP, FAZ_VM64_IBM, FAZ_VM64_HV (including Hyper-V 2016, 2019, and 2022), FAZ_VM64_KVM, FAZ_VM64_OPC, FAZ_VM64_XEN (for both Citrix and Open Source Xen). |
Minimum system requirements
By default FortiAnalyzer VMs use the following system resource settings:
- 4 vCPU
- 16 GB RAM
- 500 GB disk space
Starting with FortiAnalyzer 7.0.0, RAM and CPU is capped at 50% for MEAs. (Use the config system docker command to view the setting.) If FortiAnalyzer has 8 CPUs and 16 GB RAM, then only 4 CPUs and 8 GB RAM are available to MEAs by default, and the 4 CPUs and 8 GB RAM are used for all enabled MEAs.
Some MEAs have minimum system requirements that require you to increase system resources. The following table identifies the minimum requirements for each MEA as well as the recommended system resources to function well in a production environment.
MEA minimum system requirements apply only to the individual MEA and do not take into consideration any system requirements for resource-sensitive FortiAnalyzer features or multiple, enabled MEAs.
|
Management Extension Application |
Minimum system requirements |
Recommended system resources for production* |
|---|---|---|
|
FortiSIEM |
|
|
| FortiSOAR |
|
|
*The numbers in the Recommended system resources for production column are a combination of the default system resource settings for FortiAnalyzer plus the recommended system requirements for the MEA.