Fortinet white logo
Fortinet white logo

Product integration and support

Product integration and support

The following table lists FortiNDR Cloud product integration and support information.

SIEM

CrowdStrike

Tested with Parser 1.0.2

FortiSIEM 7.1.0 or higher
Microsoft Sentinel Not applicable
QRadar IBM QRadar SIEM version 7.3.3 or higher
Splunk Splunk Cloud versions: 9.3, 9.2, 9.1

SOAR

Cortex-XSOAR Tested on: 6.6
FortiSOAR Tested on: 7.3.2-2150
Splunk SOAR

7.3.2-2150 or higher

EDR / Firewall

CrowdStrike EDR

Latest Falcon EDR APIs

FortiEDR Not applicable
FortiEDR Manager

6.2.0 or higher

FortiEDR Collector

5.2.0 or higher

FortiManager

7.4.2 or higher

FortiGate

7.4.2 or higher

Intelligence Feeds

CrowdStrike Falcon Intel

Available as Integration

Fortinet Botnet IP List

Available to all customers.

Internet Scan Data B (Shodan)

Available to all customers.

Known Sinkholes

Available to all customers.

PhishTank

Available to all customers.

Proofpoint TAP

Available to all customers.

Recorded Future connect

Available as Integration.

ThreatConnect

Available as Integration.

Tor Nodes

Available to all customers.

URLHaus

Available to all customers.

Other

Endace 7.2.2 or higher

Netskope

Not applicable

Zscaler

Not applicable

Product integration and support

Product integration and support

The following table lists FortiNDR Cloud product integration and support information.

SIEM

CrowdStrike

Tested with Parser 1.0.2

FortiSIEM 7.1.0 or higher
Microsoft Sentinel Not applicable
QRadar IBM QRadar SIEM version 7.3.3 or higher
Splunk Splunk Cloud versions: 9.3, 9.2, 9.1

SOAR

Cortex-XSOAR Tested on: 6.6
FortiSOAR Tested on: 7.3.2-2150
Splunk SOAR

7.3.2-2150 or higher

EDR / Firewall

CrowdStrike EDR

Latest Falcon EDR APIs

FortiEDR Not applicable
FortiEDR Manager

6.2.0 or higher

FortiEDR Collector

5.2.0 or higher

FortiManager

7.4.2 or higher

FortiGate

7.4.2 or higher

Intelligence Feeds

CrowdStrike Falcon Intel

Available as Integration

Fortinet Botnet IP List

Available to all customers.

Internet Scan Data B (Shodan)

Available to all customers.

Known Sinkholes

Available to all customers.

PhishTank

Available to all customers.

Proofpoint TAP

Available to all customers.

Recorded Future connect

Available as Integration.

ThreatConnect

Available as Integration.

Tor Nodes

Available to all customers.

URLHaus

Available to all customers.

Other

Endace 7.2.2 or higher

Netskope

Not applicable

Zscaler

Not applicable