Fortinet black logo

External Systems Configuration Guide

Damballa Failsafe

Damballa Failsafe

Configuration in FortiSIEM

Complete these steps in the FortiSIEM UI:

  1. Go to the ADMIN > Setup > Credentials tab.
  2. In Step 1: Enter Credentials:
    1. Follow the instructions in “Setting Credentials“ in the User's Guide to create a new credential.
    2. Enter these settings in the Access Method Definition dialog box:

      SettingValue
      NameA name for the device.
      Device TypeDamballa Failsafe
      Access ProtocolSee Access Credentials
      PortSee Access Credentials
      Password configSee Password Configuration
  3. In Step 2, Enter IP Range to Credential Associations:
    1. Select the name of your credential from the Credentials drop-down list.
    2. Enter a host name, an IP, or an IP range in the IP/Host Name field.
    3. Click Save.
  4. Click Test to test the connection to Damballa Failsafe.
  5. To see the jobs associated with Damballa, select ADMIN > Pull Events.
  6. To see the received events select ANALYTICS, then enter Damballa in the search box.

Damballa Failsafe

Configuration in FortiSIEM

Complete these steps in the FortiSIEM UI:

  1. Go to the ADMIN > Setup > Credentials tab.
  2. In Step 1: Enter Credentials:
    1. Follow the instructions in “Setting Credentials“ in the User's Guide to create a new credential.
    2. Enter these settings in the Access Method Definition dialog box:

      SettingValue
      NameA name for the device.
      Device TypeDamballa Failsafe
      Access ProtocolSee Access Credentials
      PortSee Access Credentials
      Password configSee Password Configuration
  3. In Step 2, Enter IP Range to Credential Associations:
    1. Select the name of your credential from the Credentials drop-down list.
    2. Enter a host name, an IP, or an IP range in the IP/Host Name field.
    3. Click Save.
  4. Click Test to test the connection to Damballa Failsafe.
  5. To see the jobs associated with Damballa, select ADMIN > Pull Events.
  6. To see the received events select ANALYTICS, then enter Damballa in the search box.