Fortinet black logo

FortiSIEM Reference Architecture Using ClickHouse

Agent Architecture - MSSP

Agent Architecture - MSSP

Agent Architecture - MSSP

The FortiSIEM agent is fully functional in a multi-tenant service provider environment. Agents can be installed on customer devices and can upload logs to a dedicated per-organization Collector at a customer site, or to a shared multi-tenant Collector if the organization does not have a dedicated per-organization Collector assigned. Note it is not possible to combine dedicated per-organization Collectors and multi-tenant Collectors in the same tenant organization.

Service providers can install the agent on their own servers and upload logs to a shared Collector for ingestion into the super-local organization.

Agent Architecture - MSSP

Agent Architecture - MSSP

The FortiSIEM agent is fully functional in a multi-tenant service provider environment. Agents can be installed on customer devices and can upload logs to a dedicated per-organization Collector at a customer site, or to a shared multi-tenant Collector if the organization does not have a dedicated per-organization Collector assigned. Note it is not possible to combine dedicated per-organization Collectors and multi-tenant Collectors in the same tenant organization.

Service providers can install the agent on their own servers and upload logs to a shared Collector for ingestion into the super-local organization.