Connectors

Connectors allow you to send and retrieve data from various third-party sources, enabling you to integrate with external cybersecurity tools and automate interactions using playbooks. FortiRecon provides several pre-installed connectors, such as the Utilities and SMTP connectors, which can be added in FortiRecon playbooks, as a connector step, to perform automated operations.

Each connector includes documentation that covers installation, configuration, and usage. See FortiSOAR Connectors.

Viewing Connectors

To view connectors, go to Security Orchestration > Content Hub tab. On the Content Hub page, select Connectors from the Filter panel to see all currently available connectors.

You can search for a connector using the Search field and sort the results alphabetically (A-Z) or by release date. Installed connectors are marked with a green check and the word 'Installed' on their card.

Working with Connectors

On the Content Hub page, from the Filters panel, select the Content Type as Connectors to view the list of available connectors. Click a connector ’s tile to open its details, which include the Summary, Actions, and Installation tabs:

• Summary Tab: This tab provides information about the SP publisher, its certification and featured status, a brief description, and its category.
• Actions Tab: This tab lists the actions the connector can perform.
• Installation Tab: This tab displays the Agents where the connector can be installed. By default, a Self Agent node is configured on FortiRecon in which connectors are installed. You can also configure another custom agent.
  Choose an Agent and click Install to install the connector and its dependencies. This action opens the connector's dialog on the Configuration(s) tab, where you can Configuring a connector for use in FortiRecon.

Managing Connectors

The Installed tab displays the installed connectors and allows you to manage them. Select a connector in the Installed tab to opens the connector's dialog on the Agents tab. Here, you can add a configuration by clicking Add Configuration, which will open the Configuration (s) tab. On the Configuration (s) tab you can:

• Configuring a connector.
• Click Uninstall to uninstall the connector.

Configuring a connector

Only users with the FortiRecon Admin role can configure connectors.

To configure a connector, either:

• Configure it immediately after installation by selecting the Configuration(s) tab in the connector's dialog.
• On the Installed tab, select the connector you want to configure, to open the connector's dialog on the Agents tab. Here, you can add a configuration by clicking Add Configuration, which will open the Configuration (s) tab.

If a connector, such as the SMTP connector, is pre-configured, it will display a button showing the number of configurations available (e.g., 1 Configuration(s) Available). Clicking this button opens the Configuration(s) tab with the current configuration details and the Add New Configuration button which you can use to add a new configuration of a connector.

On the Configuration (s) tab, configure the connector as follows:

1. In the Configuration Name field, enter a unique name for the configuration. You can add multiple configurations, but each must have a unique name.
2. Check the Mark As Default Configuration option to set the selected configuration as the default for the connector on the FortiRecon instance. At least one configuration must be marked as default for the connector to function.
3. Each connector contains different fields for configuration. For detailed information, to the connector's specific documentation.
   Note: The password type fields such as password, client ID, etc. will be masked for security purposes.
4. Once you have completed adding all the details, click Save to save the connector configuration.

Additionally, on the Configuration (s) tab, you can perform the following operations:

• Update Available: If a newer version of the connector is available, click Update Available to upgrade the connector.
• Active: Toggle Active to activate or deactivate the connector.
• Uninstall: Click Uninstall to uninstall the connector.