Security Fabric: Automation (7.6.0)

The Automation feature has been enhanced to provide more comprehensive monitoring and response capabilities.

• Notifications can now be sent to Teams, Slack, Jira, based on additional triggers, such as high CPU usage, expired certificates or licenses, FDS DB updates, and detected attacks.

• Malicious source IP addresses can be automatically added to the FortiGate IP Ban list.

• CLI scripts can be executed automatically to address the trigger issues, further automating the process and reducing manual intervention.

It can significantly enhance the security posture of your application by providing comprehensive monitoring and response capabilities. For more information on the feature itself, refer to the "Automaton" section in FortiWeb Administration Guide.

Here are some use cases and detailed explanations of how these automation features can be effectively utilized.

• Use case: Real-time incident alerts

• Use case: Expired SSL certificate management

• Use case: Automated response to FortiGuard Database (FDS DB) updates

• Use case: Automatic IP banning

• Use case: Blocking repeated attacks from an IP address

• Use case: Automating exception handling for false positives