Online Help

• What's New
• Workload/Container Protection Switch
• Workload Protection
  • Introduction
  • License Overview
    • Storage Guardian, Basic/Advance
    • Workload Guardian License
  • Getting started
    • Amazon Web Services
      • Add AWS Account Manually
      • Add Multiple AWS Accounts via CloudFormation
      • Add AWS Organization Account Checklist
      • Add AWS Organization: CANNOT ADD Sub-Account Status
      • Update AWS Account Manually
      • Update AWS Organization Checklist
      • Update AWS Role External ID
    • Google Cloud Platform
      • Add Google Cloud Account
        • Configure G Suite Account
        • Configure Service Account
        • Configure OAuth Consent Screen
        • Grant Service Account API Access
        • Grant Service Account Owner Role
        • Grant service account Organization Administrator role
        • Enable required APIs
        • Enable activity and alert monitoring
        • Add Google Cloud Account
      • Update Google Cloud Account
        • Configure G Suite Account
        • Configure Service Account
        • Grant Service Account API Access
        • Grant Service Account Owner Role
        • Grant service account Organization Administrator role
        • Enable required APIs
        • Enable activity and alert monitoring
        • Update Google Cloud Account
    • Microsoft Azure
      • Add Microsoft Azure Account
      • Add Azure Account: CANNOT ADD Subscription Status
      • Update Microsoft Azure Account
    • Security Integration
      • AWS Cloud Security Integration
        • Enable Amazon Inspector
        • Enable Amazon Guard Duty
      • Microsoft Azure Security Integration
    • Traffic Configuration
      • AWS Traffic Log Configuration
      • Microsoft Azure Traffic Log Configuration
      • Google Cloud Traffic Log Configuration
    • Activate Asset and Attack Surface View
      • Create EC2 role for AWS SSM agent
      • Attach the EC2 role to all EC2 instances
      • Create an Assessment Target on AWS Inspector
      • Create Assessment Template for Assessment Run
    • Cloud Service Integration Pricing
      • AWS Security Service Charge
      • Azure Security Center Charge
      • Google Security Command Center Charge
  • Using FortiCWP
  • General
    • Alert
    • Resource
      • Table View
      • Map View
      • Asset View
      • Attack Surface View
    • Documents
    • Policy
      • Risk Assessment Policy
      • Data Analysis Policy
      • Threat Protection Policy
      • Network Policy
      • Integration Policy
      • Compliance Policy
    • Policy Configuration
      • Predefined Policy Configuration
      • Policy Configuration Examples
      • Customized Risk Assessment Policy Setup
      • Customized Data Analysis Policy
    • Report
      • C-Level Report
      • Compliance Report
      • Activity Report
      • Alert Report
    • Activity
    • AV Scan
    • Traffic
  • Admin
    • Cloud Account Management
      • Cloud Account Status
      • Update Cloud Account
      • Delete Cloud Account
      • Turn off Workload Guardian
      • Turn on Workload Guardian
    • Storage Bucket Management
      • Activate Storage Guardian on Bucket/Container
      • Disable Storage Guardian on Storage Bucket/Container
      • Free Up Storage Guardian License Seat Space
    • Notifications
    • Collections
    • Data pattern
    • Allow List
    • Traffic Group
    • Data Analysis Log
  • FortiCWP APIs
    • Generate Credentials
    • Get Authorization Token
    • Get Refresh Token
    • Get Credentials Token
    • Get Resource Map
    • Get Account Severity Level
    • Get Alert by Filter
    • Get Country List
    • Get Number of DLP Documents
    • Get Document Activity
    • Get Document Detail
    • Get Document Permission
    • Get Document Violation
    • Get Event
    • Get Number of Malware Documents
    • Get Alert Policy List
    • Get Policy Risk
    • Get Policy Violation
    • Get Resource Highlight
    • Get Resource Risk Level
    • Get Severity
    • Get Severity Alert
    • Get Status Detail
    • Get Status List
    • Get Storage Risk
    • Get Virtual Machine Overview
• Container Protection
  • Introduction
    • Kubernetes Agent and System Requirement
  • Upgrade Kubernetes Agent
  • License Overview
  • Container Visibility
    • Cluster Visibility
    • Namespace Layer
    • Deployment Layer
    • Pod Layer
    • Container Traffic
  • FortiView
    • Container Image
    • CI/CD Integration Protection
    • Compliance Assessment
  • CI/CD Integration Policy Configuration
    • Add Policy to CI/CD Integration
    • Jenkins Configuration
  • Compliance Policy Configuration
    • Compliance Audit Setting
  • Add Kubernetes Cluster
    • AWS Add Kubernetes Cluster - EKS - Auto Deployment
      • Add IAM Role to Kubernetes Configmap
      • Make Kubernetes API server accessible by Container Protection
      • Add Kubernetes Cluster - EKS - Auto Deployment
    • AWS Add Kubernetes Cluster - EKS - Manual Deployment
    • AWS Add Kubernetes Cluster - Self Managed - Auto Deployment
      • AWS Create and Attach Role to EC2 Instance
      • AWS Kubernetes Service Account Creation
      • AWS Kubernetes Obtain Access Token
      • AWS Add Self Managed Kubernetes Cluster - Auto Deployment
    • AWS Add Kubernetes Cluster - Self Managed - Manual Deployment
    • Azure Add Kubernetes Cluster - AKS
    • Azure Add Kubernetes Cluster - Self Managed
    • Google Cloud Add Kubernetes Cluster - GKE - Auto Deployment
    • Google Cloud Add Kubernetes Cluster - GKE - Manual Deployment
    • Google Cloud Add Kubernetes Cluster - Self Managed
    • Private Cloud Add Kubernetes Cluster - Self Managed
    • Deploy Kubernetes Agent Controller
    • Kubernetes Agent and Node Status
  • Add Registry
    • Add AWS Registry
      • Add AWS Registry Example
    • Add Azure Registry
      • Add Azure Registry Example
    • Add Google Cloud Registry
      • Add Google Cloud Registry Example
    • Add Harbor Cloud Registry
      • Add Harbor Cloud Registry Example
    • Add OpenShift Registry
      • Add OpenShift Registry Example
  • Add Credential Store
    • Add AWS Account - Manual
    • Add AWS Account - Automatic
      • Add AWS IAM Role via CloudFormation
      • AWS Administrator Role Creation
      • Reference - Role Policy in CloudFormation
    • Add Google Account
      • Configure G Suite Account
      • Configure Service Account
      • Enable required APIs
      • Add Google Account
    • Add Azure Account
      • Add Role to Azure Subscription
      • Add User Access Administrator Role to Multiple Azure Subscriptions (optional)
      • Add Azure Account Credential
    • Add Harbor Account
    • Add OpenShift Account
      • Openshift Account Configuration
      • Add OpenShift Account
• Troubleshooting
  • Workload Protection Troubleshooting
    • No Pop-Up errors
    • Stack Already Exists error
    • AWS Account Checklist Troubleshooting
    • Number of VM exceeds available Workload Guardian license seats
  • Container Protection Troubleshooting
    • Error: Update AWS IAM Role
    • Warning: Do not use the update function to change to a new cluster
• Appendix
  • Appendix A - Workload Protection Amazon Policy Usage
  • Appendix B - Container Protection Compliance Audit Configuration File Path
    • CIS Kubernetes Benchmark 1.5 Configuration File Paths
    • CIS Kubernetes Benchmark 1.6 Configuration File Paths
    • Google GKE Compliance Audit Configuration File Paths
    • Amazon EKS Compliance Audit Configuration File Paths
• Data Retention Policy
• End User License Agreements