How to configure, integrate and monitor network devices (FORTIGATE)

Carlos Adolfo Alejandro

unread,

May 17, 2021, 5:05:01 PM5/17/21

to Wazuh mailing list

Hi guys!!

Someone can give me some information about how can i do an integration with fortigate??

I dont understand and dont found information about forti with wazuh.

Thank you!

Regards

Mauricio Ruben Santillan

unread,

May 17, 2021, 5:20:12 PM5/17/21

to Wazuh mailing list

Hello!

Thanks for using Wazuh!
To monitor network devices, you can use syslog to forward events from them to the Wazuh Manager.

The procedure basically consists in:

Adding the syslog configuration to the Manager and restart the wazuh-manager service.
Enable syslog in data source.
Add custom decoders/rules.

You can find the complete procedure documented here: https://wazuh.com/blog/how-to-configure-rsyslog-client-to-send-events-to-wazuh/ and there's additional information here: https://documentation.wazuh.com/current/user-manual/capabilities/log-data-collection/how-it-works.html#remote-syslog.

Also, in case you need to create decoders/rules (most probably), you can find information for this here:

Please let us know if you need further help! We'll be glad to assist you!

Rafael Antonio Rodriguez Otero

unread,

May 18, 2021, 2:03:39 PM5/18/21

to Carlos Adolfo Alejandro, Wazuh mailing list

Hi friend.

Excuse me for not being able to help you now, it is because I was left without a job due to a complex situation with my nationality and my cell phone was stolen. I am in the process of recovering to get my things back.

I'm sorry I can't right now.

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/c58463fb-1191-4088-9ced-b2dce5ee3cc3n%40googlegroups.com.

Reply all

Reply to author

Forward