Fortinet black logo

Administration Guide

Device Input

Device Input

The Security Fabric > Device Input page displays the FortiGate and FortiSandbox devices that are sending files to FortiNDR.

Supported models:
  • FortiGate 5.6 and higher
  • FortiSandbox 4.0.1 and higher

The Device Input page contains two tabs:

Tab

Description

FortiGate tab

The FortiGate tab displays the FortiGates sending files via OFTP (FortiSandbox field with TCP port 514) and via HTTPs (FOS 7.0.1 and higher).

FortiNDR must authorize connections from FortiGate for OFTP and for inline blocking. Connect FortiNDR to the FortiGate Security Fabric to authorize the device via the Security Fabric protocol.

Other Device tab The Other Device tab displays FortiSandbox submissions via the FortiNDR API such as FortiSandbox and FortiMail.

The Device Input page displays the following information:

Device Name The device name.
VDOM The VDOM associated with the device.
IP Address The device IP.
Connection Type The connection type.
Authorized The authorization method.

Status

The connection status.

Device Input

The Security Fabric > Device Input page displays the FortiGate and FortiSandbox devices that are sending files to FortiNDR.

Supported models:
  • FortiGate 5.6 and higher
  • FortiSandbox 4.0.1 and higher

The Device Input page contains two tabs:

Tab

Description

FortiGate tab

The FortiGate tab displays the FortiGates sending files via OFTP (FortiSandbox field with TCP port 514) and via HTTPs (FOS 7.0.1 and higher).

FortiNDR must authorize connections from FortiGate for OFTP and for inline blocking. Connect FortiNDR to the FortiGate Security Fabric to authorize the device via the Security Fabric protocol.

Other Device tab The Other Device tab displays FortiSandbox submissions via the FortiNDR API such as FortiSandbox and FortiMail.

The Device Input page displays the following information:

Device Name The device name.
VDOM The VDOM associated with the device.
IP Address The device IP.
Connection Type The connection type.
Authorized The authorization method.

Status

The connection status.