Change Log

Overview

FortiSIEM External Ports

Supported Devices and Applications by Vendor

Applications

Application Server

• Apache Tomcat
• IBM WebSphere
• Microsoft ASP.NET
• Oracle GlassFish Server
• Oracle WebLogic
• Redhat JBOSS

Authentication Server

• Cisco Access Control Server (ACS)
• Cisco Duo
• Cisco Identity Solution Engine (ISE)
• CyberArk Password Vault
• Fortinet FortiAuthenticator
• Juniper Networks Steel-Belted RADIUS
• Microsoft Internet Authentication Server (IAS)
• Microsoft Network Policy Server (RAS VPN)
• OneIdentity Safeguard
• Vasco DigiPass

Database Server

• IBM DB2 Server
• Microsoft SQL Server
  • Microsoft SQL Server Scripts
• MySQL Server
• Oracle Database Server

DHCP and DNS Server

• Infoblox DNS/DHCP
• ISC BIND DNS
• Linux DHCP
• Microsoft DHCP (2003, 2008)
• Microsoft DNS (2003, 2008)

Directory Server

• Microsoft Active Directory

Document Management Server

• Microsoft SharePoint

Healthcare IT

• Epic EMR/EHR System

Mail Server

• Microsoft Exchange

Management Server/Appliance

• Cisco Application Centric Infrastructure (ACI)
• Fortinet FortiInsight
• Fortinet FortiManager

Remote Desktop

• Citrix Receiver (ICA)

Source Code Control

• GitHub
• GitLab API
• GitLab CLI

Unified Communication Server

• Avaya Call Manager
• Cisco Call Manager
• Cisco Contact Center
• Cisco Presence Server
• Cisco Tandeberg Telepresence Video Communication Server (VCS)
• Cisco Telepresence Multipoint Control Unit (MCU)
• Cisco Telepresence Video Communication Server
• Cisco Unity Connection

Web Server

• Apache Web Server
• Microsoft IIS for Windows 2000 and 2003
• Microsoft IIS for Windows 2008
• Nginx Web Server

Blade Servers

• Cisco UCS Server
• HP BladeSystem

Cloud Applications

• Alcide.io KAudit
• AWS Access Key IAM Permissions and IAM Policies
• AWS CloudTrail
• AWS EC2
• AWS EC2 CloudWatch API
• AWS Kinesis
• AWS RDS
• AWS Security Hub
• Box.com
• Google Apps Audit
• Microsoft Azure Audit
• Microsoft Office365 Audit
• Microsoft Cloud App Security
• Micorosft Azure ATP
• Microsoft Azure Compute
• Microsoft Azure Event Hub
• Microsoft Windows Defender ATP
• Okta
• Salesforce CRM Audit

Console Access Devices

• Lantronix SLC Console Manager

End Point Security Software

• Bit9 Security Platform
• Carbon Black Security Platform
• Cisco AMP Cloud V0
• Cisco AMP Cloud V1
• Cisco Security Agent (CSA)
• CloudPassage Halo
• Crowdstrike
• Digital Guardian CodeGreen DLP
• ESET NOD32 Anti-Virus
• FortiClient
• FortinetFortiEDR
• MalwareBytes
• McAfee ePolicy Orchestrator (ePO)
• MobileIron Sentry and Connector
• Netwrix Auditor
• Palo Alto Traps Endpoint Security Manager
• SentinelOne
• Sophos Central
• Sophos Endpoint Security and Control
• Symantec Endpoint Protection
• Symantec SEPM
• Tanium Connect
• Trend Micro Interscan Web Filter
• Trend Micro Intrusion Defense Firewall (IDF)
• Trend Micro OfficeScan

Environmental Sensors

• APC Netbotz Environmental Monitor
• APC UPS
• Generic UPS
• Liebert FPC
• Liebert HVAC
• Liebert UPS

Firewalls

• Check Point FireWall-1
• Check Point Provider-1
  • CLM for Check Point Provider-1
  • CMA for Check Point Provider-1
  • MDS for Check Point Provider-1
  • MLM for Check Point Provider-1
• Check Point VSX
• Cisco Adaptive Security Appliance (ASA)
• Clavister Firewall
• Cyberoam Firewall
• Dell SonicWALL
• Fortinet FortiGate Firewall
• Imperva Securesphere Web App Firewall
• Juniper Networks SSG
• McAfee Firewall Enterprise (Sidewinder)
• Palo Alto
• Sophos UTM
• Stormshield Network Security
• Tigera Calico
• WatchGuard Firebox

Load Balancers and Application Firewalls

• Brocade ServerIron ADX
• Citrix Netscaler Application Delivery Controller (ADC)
• F5 Networks Application Security Manager
• F5 Networks Local Traffic Manager
• F5 Networks Web Accelerator
• Fortinet FortiADC
• Qualys Web Application Firewall

Network Compliance Management Applications

• Cisco Network Compliance Manager
• PacketFence

Network Intrusion Prevention Systems

• 3COM TippingPoint UnityOne IPS
• AirTight Networks SpectraGuard
• Alert Logic IRIS API
• Cisco FireSIGHT and FirePower Threat Defence
• Cisco Intrusion Prevention System
• Cisco Stealthwatch
• Cylance Protect Endpoint Protection
• Cyphort Cortex Endpoint Protection
• Damballa Failsafe
• Darktrace CyberIntelligence Platform
• FireEye Malware Protection System (MPS)
• FortiDDoS
• Fortinet FortiDeceptor
• Fortinet FortiNAC
• Fortinet FortiSandbox Configuration
• Fortinet FortiTester
• IBM Internet Security Series Proventia
• Indegy Security Platform
• Juniper DDoS Secure
• Juniper Networks IDP Series
• McAfee IntruShield
• McAfee Stonesoft IPS
• Motorola AirDefense
• Nozomi
• Radware DefensePro
• Snort Intrusion Prevention System
• Sourcefire 3D and Defense Center
• Trend Micro Deep Discovery
• Zeek (Bro) Installed on Security Onion

Routers and Switches

• Alcatel TiMOS and AOS Switch
• Arista Router and Switch
• Brocade NetIron CER Routers
• Cisco 300 Series Routers
• Cisco IOS Router and Switch
  • How CPU and Memory Utilization is Collected for Cisco IOS
• Cisco Meraki Cloud Controller and Network Devices
• Cisco NX-OS Router and Switch
• Cisco ONS
• Cisco Viptela SDWAN Router
• Dell Force10 Router and Switch
• Dell NSeries Switch
• Dell PowerConnect Switch and Router
• Foundry Networks IronWare Router and Switch
• HP/3Com ComWare Switch
• HP ProCurve Switch
• HP Value Series (19xx) and HP 3Com (29xx) Switch
• Hirschman SCADA Firewalls and Switches
• Juniper Networks JunOS Switch
• MikroTik Router
• Nortel ERS and Passport Switch