Armis Asset Intelligence Platform

Armis utilizes existing management platforms and passive traffic monitoring to discover and identify every device in any environment enterprise, medical, industrial, and more. Armis then analyzes device behavior and detects vulnerabilities to identify risks and threats.

Support Added: FortiSIEM 6.5.0-7.0.1 via Content Update

Vendor Version Tested: Not Provided

Vendor: Armis

Product: The Asset Intelligence and Security Platform

Product Information: https://www.armis.com/platform/

• Event Types
• Rules
• Reports
• Armis Asset Intelligence Platform Configuration

Event Types

In ADMIN > Device Support > Event Types, search for "Armis" to see the event types associated with this device.

Rules

Go to RESOURCES > Rules and search for "Armis" in the main content panel Search... field.

Reports

There are no predefined reports for the Armis Asset Intelligence Platform.

Armis Asset Intelligence Platform Configuration

To configure the Armis Asset Intelligence Platform with FortiSIEM, take the following steps.

1. From the ARMIS GUI, navigate to Integrations > Library > Connect SIEM Integration.

2. In the Name field, enter the name of your FortiSIEM.

3. From the Connection Type drop-down list, select UDP.

4. In the Address field, enter the IP address of your FortiSIEM.

5. In the Port field, enter 514.

6. From the Message Format drop-down list, select CEF.
7. Click Test connection to validate.