Adding integrations
The Attack Surface Management > Integrations page displays all existing integrations. You can manually add new integrations as needed.
|
IASM only supports FortiGate integration. |
To add a new AWS integration:
-
Go to Attack Surface Management > Integrations.
-
Click the + icon.
-
Select AWS. The Add AWS page is displayed.
For more information on creating an AWS IAM policy and role, click Need Help?.
-
Select EASM.
-
Enter the account ID number in the Account ID field.
-
Enter a descriptive name in the Integration Name field.
-
Click Save.
To add a new Azure integration:
-
Go to Attack Surface Management > Integrations.
-
Click the + icon.
-
Select Azure. The Add Azure page is displayed.
-
Select EASM.
-
Enter the relevant values in the Subscription ID, Client ID, Tenant ID, and Client Secret fields.
These four values are necessary to create read-only access for your Azure cloud account. For information on generating these values, click Need Help?.
-
Enter a descriptive name in the Integration Name field.
-
Click Save.
To add a new Google Cloud Platform integration:
-
Go to Attack Surface Management > Integrations.
-
Click the + icon.
-
Select GCP. The Add GCP page is displayed.
-
Select EASM.
-
Enter a descriptive name in the Integration Name field.
-
Enter the JSON information from the GCP configuration file.
For information on generating the GCP key file and downloading JSON, click Need Help?.
-
Click Validate.
To add a new FortiDAST integration:
-
Go to Attack Surface Management > Integrations.
-
Click the + icon.
-
Select FortiDAST. The Add FortiDAST page is displayed.
-
Select EASM.
-
Enter the master email address in the Email field.
-
Enter the API Key from FortiDAST.
-
Click Save to verify the key.
Once the FortiDAST integration is verified, you can scan assets in the EASM > Asset Discovery page. See Performing a FortiDAST scan.
FortiGate Integration
Integrating FortiGate with FortiRecon enhances the asset discovery capabilities of FortiRecon EASM. It does this by adding FortiGate Interface IPs and all IPs behind NAT to the Attack Surface Management > Asset Discovery page. Once the integration is verified, all assets discovered via FortiGate will have additional metadata, including:
-
Name of Virtual IP on FortiGate
-
Mapped Internal IP
-
MAC address of Internal IP
-
Mapped External Port
-
Mapped Internal Port
-
Operating System
You can use this metadata to take action faster on security vulnerabilities and threats.
To add a new FortiGate integration:
-
Go to Attack Surface Management > Integrations.
-
Click the + icon.
-
Select EASM or IASM using toggle.
-
Select FortiGate. The Add FortiGate page is displayed.
-
Enter a name for the integration.
-
Enter FortiGate IP address in the Host field.
-
Enter the Port number.
-
Enter the FortiGate access Token.
For information on creating token, click Need Help?
-
Select Use HTTPs checkbox if required.
-
Click Save.