FortiSIEM Creating Inbound Policies for Importing Devices from an External System

Creating Inbound Policies for Importing Devices from an External System

You can import the contents of other help desk and external system device databases into the FortiSIEM CMDB.

Prerequisites

Procedure

Prerequisites

You will need to have created a CSV file for mapping the contents of the external database to a location on your FortiSIEM Supervisor, which will be periodically updated based on the schedule you set. See Creating the CSV File for Importing Devices from External Systems for more information.

Procedure

  1. Log into your Supervisor node with administrator credentials.
  2. Go to Admin > General Settings > Integration.
  3. Click Add.
  4. For Type, select Device.
  5. For Direction, select Inbound.
  6. Select the Vendor of the external system you want to connect to.
  7. Enter the File Path to the CSV file.
  8. For Column Mapping, click + and enter the mapping between columns in the Source CSV file and the Destination

For example, if the source CSV has a column IP,  and you want to map that to the column Device IP in the CMDB, you would enter IP for Source Column, and select Device IP for Destination Column.

  1. When you are finished creating column mappings, click OK.
  2. For Data Mapping, click + and enter the mapping between data values in the external system and the destination CMDB.

For example, if you wanted to change all instances of California in the entries for the State attribute in the external system to CA in the destination CMDB, you would select the State attribute, enter California for From. and CA for To.

  1. When you are done creating your data mappings, click OK.
  2. Click Save.

 

Creating the CSV File for Importing Devices from External Systems


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

This entry was posted in Administration Guides, FortiSIEM on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.