Online Help

• What's New
• Cloud/Container Protection Switch
• FortiCNP Access Management
  • Cloud Protection Permission Group
  • Container Protection Permission Group
  • Global Settings Permission Group
  • Create Resource Group for Cloud Protection
  • Create Resource Group for Container Protection
  • Create User Profile Using Resource Group and Permission Group
  • Assign Profile to FortiCNP User
  • Switch Between Multiple Profiles
• Global Settings
  • API Access
  • IP Address Groups
• Cloud Protection
  • Cloud Protection License and Subscription
    • AWS Marketplace Subscription
    • Subscribe Monthly Consumption License through AWS Marketplace
    • Subscribe Annual Contract License through AWS Marketplace
    • FortiCloud License Subscription
    • Cloud Protection Service Usage
    • Data Protection Service Usage
    • Unsubscribe or Cancel AWS Marketplace Subscription
    • About FortiCloud Account Master User
  • Cloud Account Onboarding Process
  • Amazon Web Services Account OnBoarding
    • AWS Permission and Resource Requirements
    • Automatically Add AWS Account
      • Add AWS Account Automatically
      • Update AWS Account Automatically
    • Manually Add AWS Account
      • Add AWS Account Manually
      • Update AWS Account Manually
      • Update AWS Role External ID
    • Add Multiple AWS Accounts
      • Activate Security Token Service (STS)
      • Setup permissions for Stack Sets Operations
      • Add Multiple AWS accounts via CloudFormation
      • Create AWS StackSet for Security Hub Integration
    • Add AWS Organization
      • Add AWS Organization
      • Update AWS Organization
      • Add AWS Organization Sub Account Status
      • Fixes for AWS Organization Checklist
      • Add AWS Organization: Fix No Permission Status
    • AWS Security Hub and Amazon EventBridge
    • AWS Security Hub and EventBridge Configuration
    • AWS Traffic Configuration
  • Google Cloud Platform Account Onboading
    • Add Google Cloud Account
      • Configure Google Workspace Account
      • Configure OAuth Consent Screen
      • Configure Service Account
      • Grant Service Account API Access
      • Grant Service Account and Organization Roles
      • Enable Required APIs
      • Enable Activity And Alert Monitoring
      • Add Google Cloud Account
    • Update Google Cloud Account
      • Configure Google Workspace Account
      • Configure Service Account
      • Grant Service Account API Access
      • Grant Service Account and Organization Roles
      • Enable Required APIs
      • Enable Activity And Alert Monitoring
      • Update Google Cloud Account
    • Google Cloud Traffic Log Configuration
  • Microsoft Azure Account Onboarding
    • Add Microsoft Azure Account
    • Add Azure Account: CANNOT ADD Subscription Status
    • Update Microsoft Azure Account
    • Microsoft Azure Traffic Log Configuration
  • Cloud Service Integration Pricing
    • AWS Security Service Charge
    • Azure Security Center Charge
    • Google Security Command Center Charge
  • FortiCNP Insights and Findings
    • Resource Risk Insights
      • Resource Risk Insight State
      • Associated Resources View
      • Resource Vulnerability View (AWS Only)
      • Resource Traffic View
      • Resource Changes View
    • Findings and Policy Relationship
    • Example on Using Filter in Findings
    • Configure Finding States
    • User Activity Details
    • Cloud Storage Files Details
  • Generate FortiCNP Reports
    • Generate Compliance Report
    • Compliance Standards
    • Compliance Standard Configuration Example
    • Generate C-Level Report
    • Generate Findings Report
    • Generate User Activity Report
  • FortiCNP Policies and Configuration
    • Risk Management Policy
      • Create Customized Risk Management Policy
      • Risk Management Example - CloudTrail should be enabled across all regions
    • Risk Score Modifier
      • Create Key-Value Pairs on Cloud Infrastructure Workload
      • Add Key-Value Pairs to Risk Calculation
    • Threat Detection Policy
      • Allowlist Configuration
      • Threat Protection Example - Suspicious Time
      • Threat Protection Example - Suspicious Movement
    • Data Scan Policy
      • Create Customized Data Pattern
      • Create Customized Data Scan Policy
      • Anti-Virus Scan Policy
      • Data Scan Example - DLP US CA Driver License
      • Data Scan Example - DLP Visa Credit Card Policy
    • Integrations Policy
      • Enable Microsoft Azure Integration
    • Predefined Policy Configuration
    • Collections Configuration
      • User Collection
      • IP Collection
      • File Collection
      • Predefined Compliance Collection
      • Custom Compliance Collection
  • Cloud Protection User Admin
    • Cloud Account Management
      • Cloud Account Status
      • Update Cloud Account
      • Delete Cloud Account
      • Turn off Cloud Protection
      • Turn on Cloud Protection
      • Configure Security Hub Integration (AWS account only)
    • Cloud Storage Management
      • Activate Data Protection on Bucket/Container
      • Disable Data Protection on Storage Bucket/Container
    • Create Notification Target
      • Add Amazon SQS Notification Target
      • Add Amazon SNS Notification Target
      • Add Jira Notification Target
        • Jira Software Configuration
      • Add ServiceNow Notification Target
    • Create Automatic Notification
      • Create Resource Risk Insight Automatic Notification
      • Create Finding Automatic Notification
      • Create Report Automatic Notification
      • Create System Information Automatic Notification
  • FortiCNP APIs
    • Generate Credentials
    • Get Credentials Token
    • Get Refresh Token
    • Get Resource Map
    • Get Account Severity Level
    • Get Alert by Filter
    • Get Alert Policy List
    • Get Country List
    • Get Document Activity
    • Get Document Detail
    • Get Document Violation
    • Get Event
    • Get Finding List
    • Get Number of Malware Documents
    • Get Number of DLP Documents
    • Get Policy Risk
    • Get Policy Violation
    • Get Resource Highlight
    • Get Resource Config
    • Get Resource Detail
    • Get Resource List
    • Get Resource Risk Level
    • Get Severity
    • Get Severity Alert
    • Get Status Detail
    • Get Status List
    • Get Storage Risk
    • Get Virtual Machine Overview
  • FortiCNP NAT IP Address
• Container Protection
  • License Overview
  • Kubernetes Agent
    • Deploy Kubernetes Agent Command
    • Upgrade Kubernetes Agent
    • Uninstall the Current Kubernetes Agent
    • Kubernetes Agent Log Collection
    • Support for Traffic Collection with Cilium CNI
  • Add Credential Store
    • Add AWS Account - Manual
    • Add AWS Account - Automatic
      • Add AWS IAM Role via CloudFormation
      • AWS Administrator Role Creation
      • Reference - Role Policy in CloudFormation
    • Add Azure Account
      • Add Role to Azure Subscription
      • Add User Access Administrator Role to Multiple Azure Subscriptions (optional)
      • Add Azure Account Credential
    • Add Docker Hub Account
    • Add Google Account
      • Configure Google Workspace Account
      • Configure OAuth Consent Screen
      • Configure Service Account
      • Enable required APIs
      • Add Google Account
    • Add Harbor Account
    • Add OpenShift Account
      • Openshift Account Configuration
      • Add OpenShift Account
  • Add Kubernetes Cluster
    • AWS Add Kubernetes Cluster - EKS - Auto Deployment
      • Add IAM Role to Kubernetes Configmap
      • Make Kubernetes API server accessible by Container Protection
      • Add Kubernetes Cluster - EKS - Auto Deployment
    • AWS Add Kubernetes Cluster - EKS - Manual Deployment
    • AWS Add Kubernetes Cluster - Self Managed - Auto Deployment
      • AWS Create and Attach Role to EC2 Instance
      • AWS Kubernetes Service Account Creation
      • AWS Kubernetes Obtain Access Token
      • AWS Add Self Managed Kubernetes Cluster - Auto Deployment
    • AWS Add Kubernetes Cluster - Self Managed - Manual Deployment
    • Azure Add Kubernetes Cluster - AKS
    • Azure Add Kubernetes Cluster - Self Managed
    • Google Cloud Add Kubernetes Cluster - GKE - Auto Deployment
    • Google Cloud Add Kubernetes Cluster - GKE - Manual Deployment
    • Google Cloud Add Kubernetes Cluster - Self Managed
    • Private Cloud Add Kubernetes Cluster - Self Managed
    • Deploy Kubernetes Agent Controller
      • Deploy Kubernetes Agent on AWS EKS
      • Deploy Kubernetes Agent on Azure AKS
      • Deploy Kubernetes Agent on Google Cloud GKE
    • Kubernetes Agent and Node Status
  • Add Registry
    • Add AWS ECR Registry
      • Add AWS Registry Example
    • Add Azure Registry
      • Add Azure Registry Example
    • Add Docker Hub Registry
      • Docker Hub Collaborators Access Configuration
      • Docker Hub Organization Access Configuration
      • Add Docker Hub Registry
      • Add Docker Hub Registry Example
      • Docker Hub Add Registry Review
    • Add Google Cloud Registry
      • Add Google Cloud Registry Example
    • Add Harbor Cloud Registry
      • Add Harbor Cloud Registry Example
    • Add OpenShift Registry
      • Add OpenShift Registry Example
  • CI/CD Integration Policy Configuration
    • Add Policy to CI/CD Integration
    • Jenkins Configuration
  • Compliance Policy Configuration
    • Compliance Audit Setting
  • FortiView
    • Container Image
    • CI/CD Integration Protection
    • Compliance Assessment
  • Container Visibility
    • Cluster Layer
    • Namespace Layer
    • Deployment Layer
    • Pod Layer
    • Container Traffic
  • Container Image Scan
  • Resource Group
    • Create Resource Group by Rule Matching
    • Create Resource Group by Specification
• Troubleshooting
  • Cloud Protection
    • Number of VM exceeds available Cloud Protection license seats
    • Stack Already Exists Error
    • AWS Account Checklist Troubleshooting
    • AWS Marketplace Subscription Troubleshooting
    • UUID Modified In AWS Account Onboarding
    • Azure Account Checklist Troubleshooting
    • Google Cloud Account Checklist Troubleshooting
  • Container Protection
    • Error: Update AWS IAM Role
    • Warning: Do not use the update function to change to a new cluster
• Appendix
  • Appendix A - Cloud Protection Amazon Policy Usage
  • Appendix B - Container Protection Compliance Audit Configuration File Path
    • CIS Kubernetes Benchmark 1.5 Configuration File Paths
    • CIS Kubernetes Benchmark 1.6 Configuration File Paths
    • Google GKE Compliance Audit Configuration File Paths
    • Amazon EKS Compliance Audit Configuration File Paths
  • Appendix C - Regex Syntax Rule
  • Appendix D - Risk Score Algorithm
  • Appendix E - Azure API Usage on FortiCNP
• Data Retention Policy
• End User License Agreements