system fortigate-integration

FortiGate appliances can maintain a list of source IPs that it prevents from interacting with the network and protected systems. You can configure FortiWeb to receive this list of IP addresses at intervals you specify. Then, you configure an inline protection profile to detect the IP addresses in the list and take an appropriate action.

This feature is available only if the operating mode is Reverse Proxy or True Transparent Proxy.

This command configures a FortiGate appliance that provides banned source IPs. To configure FortiWeb to detect the quarantined IP addresses and take the appropriate action, configure the FortiGate Quarantined IPs settings in an inline protection profile. For details, see waf web-protection-profile inline-protection.

To use this command, your administrator account’s access control profile must have either w or rw permission to the sysgrp area. For details, see Permissions.

Syntax

config system fortigate-integration

set server "<domain_name_or_ipv4>"

set port <port_int>

set protocol {HTTP | HTTPS}

set server-verification {enable | disable}

set ca-cert <cert_name>

set username "<username_str>"

set password "<password_str>"

set schedule-frequency <schedule-frequency_int>

set flag {enable | disable}

end

Variable	Description	Default
server "<domain_name_or_ipv4>"	Enter the FortiGate IP address or domain name that is used for administrative access.	No default.
port <port_int>	Specify the port that the FortiGate uses for administrative access via HTTPS. In most cases, this is port 443.	80
protocol {HTTP | HTTPS}	Specify whether the FortiGate and FortiWeb communicate securely using HTTPS.	HTTP
server-verification {enable | disable}	Enable this option to verify the TLS certificates used for the HTTPS connection between FortiWeb and FortiGate. Available only if HTTPS is selected for Protocol.	disable
ca-cert <cert_name>	Select the certificate for the HTTPS connection between FortiWeb and FortiGate. It should be uploaded in System > Admin > Certificates > Admin Cert CA.	No default.
username "<username_str>"	Enter the name of the administrator account that FortiWeb uses to connect to the FortiGate.	No default.
password "<password_str>"	Enter the password for the FortiGate administrator account that FortiWeb uses.	No default.
schedule-frequency <schedule-frequency_int>	Enter how often FortiWeb checks the FortiGate for an updated list of banned source IP addresses, in hours. The valid range is 1 to 5.	1
flag {enable | disable}	Enables or disables the transmission of quarantined source IP address information from the specified FortiGate.	disable

Related topics

• waf file-upload-restriction-policy
• log reports
• system fortisandbox-statistics