DOCUMENT LIBRARY

External Systems Configuration Guide

FortiSIEM External Systems Configuration Guide Online
Change Log
Overview
FortiSIEM External Ports
Supported Devices and Applications by Vendor
Applications
- Application Server
- Authentication Server
- Database Server
- DHCP and DNS Server
- Directory Server
  - Microsoft Active Directory
- Document Management Server
  - Microsoft SharePoint
- Healthcare IT
  - Epic EMR/EHR System
- Mail Server
  - Microsoft Exchange
- Management Server/Appliance
  - Cisco Application Centric Infrastructure (ACI)
  - Fortinet FortiManager
- Remote Desktop
  - Citrix Receiver (ICA)
- Source Code Control
- Unified Communication Server
- Web Server
Blade Servers
- Cisco UCS Server
- HP BladeSystem
Cloud Applications
- Alcide.io KAudit
- AWS Access Key IAM Permissions and IAM Policies
- AWS CloudTrail API
- AWS EC2
- AWS EC2 CloudWatch API
- AWS Kinesis
- AWS RDS
- AWS Security Hub
- Box.com
- Google Workspace Audit
- Microsoft Azure Audit
- Microsoft Office365 Audit
- Microsoft Cloud App Security
- Microsoft Azure ATP
- Microsoft Azure Compute
- Microsoft Azure Event Hub
- Okta
- Salesforce CRM Audit
Console Access Devices
- Lantronix SLC Console Manager
End Point Security Software
- Bit9 Security Platform
- Carbon Black Security Platform
- Cisco AMP Cloud V0
- Cisco AMP Cloud V1
- Cisco Security Agent (CSA)
- CloudPassage Halo
- Crowdstrike Endpoint Security
- Digital Guardian CodeGreen DLP
- ESET NOD32 Anti-Virus
- FortiClient
- FortinetFortiEDR
- MalwareBytes
- McAfee ePolicy Orchestrator (ePO)
- Microsoft Defender for Endpoint / Microsoft Windows Defender ATP
- MobileIron Sentry and Connector
- Netwrix Auditor
- Palo Alto Traps Endpoint Security Manager
- SentinelOne
- Sophos Central
- Sophos Endpoint Security and Control
- Symantec Endpoint Protection
- Symantec SEPM
- Tanium Connect
- Trend Micro Interscan Web Filter
- Trend Micro Intrusion Defense Firewall (IDF)
- Trend Micro OfficeScan
Environmental Sensors
- APC Netbotz Environmental Monitor
- APC UPS
- Generic UPS
- Liebert FPC
- Liebert HVAC
- Liebert UPS
Firewalls
- Check Point FireWall-1
- Check Point Provider-1
- Check Point VSX
- Cisco Adaptive Security Appliance (ASA)
- Clavister Firewall
- Cyberoam Firewall
- Dell SonicWALL
- Fortinet FortiGate Firewall
- Imperva Securesphere Web App Firewall
- Juniper Networks SSG
- McAfee Firewall Enterprise (Sidewinder)
- Palo Alto
- Sophos UTM
- Stormshield Network Security
- Tigera Calico
- WatchGuard Firebox
Load Balancers and Application Firewalls
- Brocade ServerIron ADX
- Citrix Netscaler Application Delivery Controller (ADC)
- F5 Networks Application Security Manager
- F5 Networks Local Traffic Manager
- F5 Networks Web Accelerator
- Fortinet FortiADC
- Qualys Web Application Firewall
- Zscaler Cloud Firewall
Log Aggregators
- Fortinet FortiAnalyzer
Network Compliance Management Applications
- Cisco Network Compliance Manager
- PacketFence
Network Intrusion Prevention System
- 3COM TippingPoint UnityOne IPS
- AirTight Networks SpectraGuard
- Alert Logic IRIS API
- Cisco Firepower Management Center (FMC) - Formerly Cisco FireSIGHT and FirePower Threat Defence
- Cisco Intrusion Prevention System
- Cisco Stealthwatch
- Cylance Protect Endpoint Protection
- Cyphort Cortex Endpoint Protection
- Damballa Failsafe
- Darktrace CyberIntelligence Platform
- FireEye Malware Protection System (MPS)
- FortiDDoS
- Fortinet FortiDeceptor
- Fortinet FortiNAC
- Fortinet FortiSandbox Configuration
- Fortinet FortiTester
- IBM Internet Security Series Proventia
- Indegy Security Platform
- Juniper DDoS Secure
- Juniper Networks IDP Series
- McAfee IntruShield
- McAfee Stonesoft IPS
- Motorola AirDefense
- Nozomi
- Radware DefensePro
- Snort Intrusion Prevention System
- Sourcefire 3D and Defense Center
- Trend Micro Deep Discovery
- Zeek (Bro) Installed on Security Onion
Routers and Switches
- Alcatel TiMOS and AOS Switch
- Arista Router and Switch
- Brocade NetIron CER Routers
- Cisco 300 Series Routers
- Cisco IOS Router and Switch
  - How CPU and Memory Utilization is Collected for Cisco IOS
- Cisco Meraki Cloud Controller and Network Devices
- Cisco NX-OS Router and Switch
- Cisco ONS
- Cisco Viptela SDWAN Router
- Dell Force10 Router and Switch
- Dell NSeries Switch
- Dell PowerConnect Switch and Router
- Foundry Networks IronWare Router and Switch
- HP/3Com ComWare Switch
- HP ProCurve Switch
- HP Value Series (19xx) and HP 3Com (29xx) Switch
- Hirschmann SCADA Firewalls and Switches
- Juniper Networks JunOS Switch
- MikroTik Router
- Nortel ERS and Passport Switch
Security Gateways
- Barracuda Networks Spam Firewall
- Blue Coat Web Proxy
- Cisco IronPort Mail Gateway
- Cisco IronPort Web Gateway
- Fortinet FortiMail
- Fortinet FortiWeb
- Imperva Securesphere DB Monitoring Gateway
- Imperva Securesphere Security Gateway
- McAfee Vormetric Data Security Manager
- McAfee Web Gateway
- Microsoft ISA Server
- Squid Web Proxy
- SSH Comm Security CryptoAuditor
- Websense Web Filter
Servers
- HP UX Server
- IBM AIX Server
- IBM OS400 Server
- Linux Server
- Microsoft Windows Server
- QNAP Turbo NAS
- Sun Solaris Server
Storage
- Brocade SAN Switch
- Dell Compellent Storage
- Dell EqualLogic Storage
- EMC Clariion Storage
- EMC Isilon Storage
- EMC VNX Storage
- NetApp Data ONTAP
- NetApp Filer Storage
- Nimble Storage
- Nutanix Storage
Threat Intelligence
- FortiInsight
- LastLine
- ThreatConnect
Virtualization
- HyperV
- HyTrust CloudControl
- VMware ESX
VPN Gateways
- Cisco VPN 3000 Gateway
- Cyxtera AppGuard
- Juniper Networks SSL VPN Gateway
- Microsoft PPTP VPN Gateway
- Pulse Secure
Vulnerability Scanners
- AlertLogic
- Green League WVSS
- McAfee Foundstone Vulnerability Scanner
- Nessus Vulnerability Scanner
- Qualys QualysGuard Scanner
- Qualys Vulnerability Scanner
- Rapid7 NeXpose Vulnerability Scanner
- Rapid7 InsightVM
- Tenable.io
- Tenable Nessus Vulnerability Scanner
- Tenable Security Center
- YXLink Vulnerability Scanner
WAN Accelerators
- Cisco Wide Area Application Server
- Riverbed SteelHead WAN Accelerator
Wireless LANs
- Aruba Networks Wireless LAN
- Cisco Wireless LAN
- CradlePoint
- FortiAP
- FortiWLC
- Motorola WiNG WLAN AP
- Ruckus Wireless LAN
Using Virtual IPs to Access Devices in Clustered Environments
Syslog over TLS
SNMP V3 Traps
Flow Support
Appendix
- Access Credentials

Home FortiSIEM 6.1.1 External Systems Configuration Guide

6.1.1

Source Code Control

FortiSIEM supports the GitHub and GitLab Source Code Control tools for log collection via an API.

Source Code Control

FortiSIEM supports the GitHub and GitLab Source Code Control tools for log collection via an API.

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

External Systems Configuration Guide

Source Code Control

Source Code Control

Source Code Control

Source Code Control