Configuring fabric connectors

A fabric connector allows you to automatically discover endpoint devices with FortiClient that are managed by FortiClient Endpoint Management Server (EMS) or FortiClient EMS Cloud, as well as endpoint devices with FortiDeceptor.

FortiClient EMS is a security management solution that enables scalable and centralized management of multiple endpoints (computers). FortiClient EMS provides efficient and effective administration of endpoints running FortiClient. It provides visibility across the network to securely share information and assign security policies to endpoints.

FortiDeceptor creates a network of decoy VMs to lure attackers and monitor their activities on the network. When attackers attack decoy VMs, their actions are analyzed to protect the network. Deploying FortiDeceptor devices across the entire network ensures comprehensive protection. Integrating FortiDevice with FortiDeceptor allows you to identify and show the decoy VM among the assets, so you can know how many decoy VMs and what kind of decoy VMs are deployed in the network.

To add a FortiClient EMS fabric connector:

1. Go to Connectors > Fabric Connector.

   

2. Click ADD CONNECTOR.

   

3. If you selected All Organizations in the Organization dropdown list at the top of the GUI, you can select which organization that the connector will belong to.

4. From the Type dropdown list, select FortiClient EMS.

5. In the Connector Name field, enter a name for this connector.

6. In the IP/Domain field, enter an IP address or domain name for the EMS server.

7. In the Port field, enter the port number for the EMS server.

8. In the Username field, enter the user name for the EMS server.

9. In the Password field, enter the password for the EMS server.

10. In the Notes field, enter an optional description of the connector.

11. Click SAVE.

To add a FortiClient EMS Cloud fabric connector:

1. Go to Connectors > Fabric Connector.

   

2. Click ADD CONNECTOR.

   

3. If you selected All Organizations in the Organization dropdown list at the top of the GUI, you can select which organization that the connector will belong to.

4. From the Type dropdown list, select FortiClient EMS Cloud.

5. In the Connector Name field, enter a name for this connector.

6. In the Account Email field, enter the account email address for the EMS server.

7. In the Access Key field, enter the access key for the EMS server

8. In the Notes field, enter an optional description of the connector.

9. Click SAVE.

To add a FortiDeceptor fabric connector:

1. Go to Connectors > Fabric Connector.

   

2. Click ADD CONNECTOR.

   

3. If you selected All Organizations in the Organization dropdown list at the top of the GUI, you can select which organization that the connector will belong to.

4. From the Type dropdown list, select FortiDeceptor.

5. In the Connector Name field, enter a name for this connector.

6. In the IP/Domain field, enter an IP address or domain name for this connector.

7. In the Port field, enter the port number for this connector.

8. In the Authentication Token field, enter the authentication token for this connector.

9. In the Notes field, enter an optional description of the connector.

10. Click SAVE.

    When FortiDevice scans with FortiDeceptor, FortiDevice scans the target first, and then it connects with FortiDeceptor to get the decoy information using the FortiDeceptor API. When processing the scan result, FortiDevice combines the scan result with the decoy information and flags the specified asset as a decoy VM asset.