Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Administration Guide

    Home FortiWeb 7.2.0 Administration Guide
    7.2.0
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.10
    7.0.9
    7.0.8
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.2
    6.4.1
    6.4.0
    6.3.23
    6.3.19
    6.3.18
    6.3.17
    6.3.16
    6.3.15
    6.3.14
    6.3.13
    6.3.11
    6.3.10
    6.3.9
    6.3.7
    6.3.6
    6.3.5
    6.3.4
    6.3.3
    6.3.2
    6.3.1
    6.3.0
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.1.2
    6.1.1
    5.7.0
    5.6.1
    5.6.0
    5.6.0

    AWS Connector

    AWS Connector

    When you create an AWS connector, you are authorizing FortiWeb to periodically get information of AWS instances and dynamically populates it in server pool configuration.

    To create an AWS Connector:

    1. Go to Security Fabric > External Connectors.
      To access this part of the web UI, your administrator’s account access profile must have Read and Write permission to items in the System Configuration category. For details, see Permissions.
    2. Click Create New.
    3. Under Public SDN, select Amazon Web Services (AWS). The AWS screen is displayed.
    4. Configure the following options, and then click Save.
      NameType a name for the external connector object.
      Status

      Toggle on to enable the external connector object.

      Toggle off to disable the external connector object.

      Update Interval (s)

      Specify the update interval for the connector to get AWS objects and dynamically populates the information in the server pool configuration.

      Access Key ID

      Specify the access key ID.

      An access key on AWS grants programmatic access to your resources. If you have security considerations, it's recommended to create an IAM role specially for FortiWeb and grant read-only access.

      See this article for how to get access key ID and secret access key on AWS: HTTPs://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html.

      Secret Access Key

      Specify the secret access key.

      Region Name

      Specify the region where your instances are deployed.

    After the connector is created, you can configure the Server Type, SDN address type, SDN Connector, and Filter options in Server Objects > Server > Server Pool. FortiWeb will then get the IP addresses of the compute instances from Azure and dynamically populates the objects in server pool configuration. See Defining your web servers.

    Make sure the system time of the FortiWeb is the same with the time of the AWS instances, otherwise the connector can't work.

    Please note that sometimes the NTP server breakdown may cause the time to be incorrectly synchronized, which leads to connection failure. If you are troubleshooting the connection issue, highly recommend to check the time on both FortiWeb and AWS instance. If the time is not the same, use the Set Time option in Time Settings, then set FortiWeb's time as the same with the time on AWS instance.


    Previous
    Next

    AWS Connector

    AWS Connector

    When you create an AWS connector, you are authorizing FortiWeb to periodically get information of AWS instances and dynamically populates it in server pool configuration.

    To create an AWS Connector:

    1. Go to Security Fabric > External Connectors.
      To access this part of the web UI, your administrator’s account access profile must have Read and Write permission to items in the System Configuration category. For details, see Permissions.
    2. Click Create New.
    3. Under Public SDN, select Amazon Web Services (AWS). The AWS screen is displayed.
    4. Configure the following options, and then click Save.
      NameType a name for the external connector object.
      Status

      Toggle on to enable the external connector object.

      Toggle off to disable the external connector object.

      Update Interval (s)

      Specify the update interval for the connector to get AWS objects and dynamically populates the information in the server pool configuration.

      Access Key ID

      Specify the access key ID.

      An access key on AWS grants programmatic access to your resources. If you have security considerations, it's recommended to create an IAM role specially for FortiWeb and grant read-only access.

      See this article for how to get access key ID and secret access key on AWS: HTTPs://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html.

      Secret Access Key

      Specify the secret access key.

      Region Name

      Specify the region where your instances are deployed.

    After the connector is created, you can configure the Server Type, SDN address type, SDN Connector, and Filter options in Server Objects > Server > Server Pool. FortiWeb will then get the IP addresses of the compute instances from Azure and dynamically populates the objects in server pool configuration. See Defining your web servers.

    Make sure the system time of the FortiWeb is the same with the time of the AWS instances, otherwise the connector can't work.

    Please note that sometimes the NTP server breakdown may cause the time to be incorrectly synchronized, which leads to connection failure. If you are troubleshooting the connection issue, highly recommend to check the time on both FortiWeb and AWS instance. If the time is not the same, use the Set Time option in Time Settings, then set FortiWeb's time as the same with the time on AWS instance.


    Previous
    Next