Blocking
Use FortiGate Integration to configure FortiGate settings for integration with FortiDeceptor. FortiDeceptor uses FortiGate REST APIs to make quarantine calls when decoys are accessed. Attackers are immediately quarantined on the FortiGate for further analysis.
The following options are available:
|
Severity level |
Select the security level. The selected level and all levels above it are blocked. For example, if you select Medium, then medium, high, and critical levels are blocked. If you select Critical, then only the critical level is blocked. |
|
Add new block configuration |
Create a new FortiGate integration setting. |
|
Update |
Save the modified FortiGate integration setting to a configuration file. |
|
Cancel |
Discard current changes. |
|
Edit |
Edit the record. |
|
Delete |
Delete the record. |
|
Test |
Manually send quarantine request to the corresponding FortiGate. |
The following information is displayed:
|
Name |
Alias name of the integrated FortiGate. |
|
IP |
|
|
User |
Username of the integrated FortiGate. |
|
Password of that username. |
|
|
Port |
Port number of the integrated FortiGate REST API service. Default port number is 443. |
|
Default Expiry |
Default blocking time in second. Default is 3600 seconds. |
|
Default VDOM |
The default access VDOM of the integrated FortiGate. |
|
Type |
FortiGate (read only value). |
|
Enabled |
Enable or disable the integration setting. |