Downloading the FortiDLP Decryption Tool

Fortinet provides two versions of the FortiDLP Decryption Tool:

• The FortiDLP Decryption Tool Extension is a GUI version of the tool, which is available as a browser extension for Google Chrome, Microsoft Edge, and Firefox. It allows you to seamlessly and quickly decrypt shadow copies from the FortiDLP Console's Detection details and Action details panels. You can also download shadow copies from these panels or your storage bucket and then upload them to the extension, either individually or in bulk.
• The FortiDLP Decryption CLI Tool is a command-line interface version of the tool. It allows you to decrypt shadow copies after downloading them from the FortiDLP Console's Detection details and Action details panels or your storage bucket. With the FortiDLP Decryption CLI Tool, shadow copies can be decrypted individually, and bulk decryption can be scripted. For details on scripting this, contact Fortinet Support.

How to download the FortiDLP Decryption Tool Extension

1. Using Google Chrome, Microsoft Edge, or Firefox, navigate to the FortiDLP Console.
2. On the left-hand sidebar, click .
3. Under Integrations, select the File shadowing tab.
4. In the Decryption Tool downloads section, under Decryption Tool Extension, click the browser on which you want to install the extension.
   
5. In the installation dialog box, follow the steps to add the extension to your browser.
   
6. Refresh the page.

The page must be refreshed to enable the Decrypt button to display within the Detection details and Action details panels.

How to download the FortiDLP Decryption CLI Tool

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. Under Integrations, select the File shadowing tab.
3. In the Decryption Tool downloads section, under Decryption CLI Tool, select the binary file format for your OS.
   
4. Click Download.