SOCaaS Onboarding

Thank you for choosing SOCaaS!

This SOCaaS onboarding process includes the following steps:

• Prerequisites
• Step 1: Register your devices with the SOCaaS license
• Step 2: Complete the onboarding request from the FortiCloud SOCaaS portal
• Step 3: Set up log forwarding

Prerequisites

Before you start the onboarding process, ensure that you have completed the prerequisite configurations on your FortiGates and FortiAnalyzers to optimize your SOCaaS subscription.

Step 1: Register your devices with the SOCaaS license

To register your devices with the SOCaaS license:

1. Log in to your FortiCloud account.

2. Under Register Product, register your FortiGate device with the SOCaaS license.

3. Click on the link to continue to the SOCaaS portal. See Step 2: Complete the onboarding request from the FortiCloud SOCaaS portal.

Step 2: Complete the onboarding request from the FortiCloud SOCaaS portal

This step is essential and must be completed in order to avoid onboarding delays.

To complete the onboarding request:

1. Log in to your FortiCloud account.
2. Go to Services > Cloud Services > SOCaaS. The SOCaaS welcome page opens.
   
3. Click on the Start Onboarding button to launch the SOCaaS Onboarding Wizard. The full steps for onboarding using the SOCaaS Onboarding Wizard are available in the SOCaaS User Guide.
4. Before proceeding to the next step, wait until you receive an email from the SOCaaS Onboarding team which includes next steps and instructions.

Step 3: Set up log forwarding

To set up log forwarding from your on-premise FortiAnalyzer:

1. Configure your FortiAnalyzer devices to forward logs to SOCaaS by following the instructions in the email from the SOCaaS Onboarding team. For full steps, see Sending logs from an on-premise FortiAnalyzer.
2. Reply to the email from Fortinet-SOC@fortinet.com to confirm that the log forwarding configuration is completed.
   
3. Wait for a confirmation email from the SOCaaS Onboarding team. The message will inform you when Onboarding is completed. This may take up to three business days (Pacific Standard Time).

For more information about the onboarding process, refer to Frequently asked questions.

To set up log forwarding from FortiAnalyzer Cloud:

The SOCaaS license includes a complimentary FortiAnalyzer Cloud instance that you can use.

1. Provision the FortiAnalyzer Cloud instance on the region of your choice. See Deploying a FortiAnalyzer Cloud instance in the FortiAnalyzer Cloud Deployment Guide.
2. Configure the FortiGate to forward the entitled device logs to the SOCaaS collection point in that same region. See Configuring FortiOS in the FortiAnalyzer Cloud Deployment Guide.
3. Configure FortiAnalyzer Cloud to send logs to SOCaaS. See Sending logs from FortiAnalyzer Cloud in the SOCaaS User Guide.