External Connectors

You can use external connectors to connect your FortiProxy unit to public and private cloud solutions. By using an external connector, you can ensure that changes to cloud environment attributes are automatically updated in the Security Fabric. You can use external connector address objects to create policies that provide dynamic access control based on cloud environment attribute changes. There is no need to manually reconfigure addresses and policies whenever changes to the cloud environment occur.

There are four steps to creating and using an external connector:

1. Gather the required information. The required information depends on which public or private cloud solution SDN connector you are configuring.

2. Create the external connector.

3. Create an external connector address.

4. Add the address to a firewall policy.

The following provides general instructions for creating an external connector and using the dynamic address object in a firewall policy.

To create an SDN connector in the GUI:

1. Go to Security Fabric > External Connectors.

2. Click Create New.

3. Click the desired public or private cloud.

4. Enter the Name, Status, and Update interval for the connector.

5. Enter the previously collected information for the connector as needed.

6. Click OK.

To create an SDN connector in the CLI:

config system sdn-connector
    edit <name>
        set status {enable | disable}
        set type {connector type}
        ...
        set update-interval <integer>
    next
end

The available CLI commands vary depending on the selected SDN connector type.