Allowing FortiDLP Agent communication through the FortiGate
Every FortiDLP Agent requires a direct connection to the FortiDLP Cloud to report real-time data and receive configuration updates. This is outlined in Allowing communication between the FortiDLP Agent and FortiDLP Cloud.
As such, FortiDLP Agents operating behind the FortiGate firewall must be able to reach the FortiDLP Cloud servers. The servers must be trusted by the FortiGate and a corresponding firewall policy must allow traffic to these servers.
To view the FortiDLP Cloud server addresses on the FortiGate:
-
Go to Policy & Objects > Internet Service Database.
-
Search for FortiDLP.
-
Double-click the Fortinet-FortiDLP.Cloud entry to view it.
-
In the right hand panel, click View/Edit Entries to see the addresses.
To allow traffic to FortiDLP Cloud servers:
-
Go to Policy & Objects > Firewall Policy.
-
Click Create new.
-
Select the Incoming Interface and the Outgoing Interface.
-
Select the Source address.
-
For the Destination address
-
Click in the field and, in the slide-out pane, select the Internet Service tab.
-
Search for FortiDLP.
-
Select the Fortinet-FortiDLP.Cloud entry.
-
Click Close.
-
-
Leave remaining settings as their default values and click OK.