Fortinet white logo
Fortinet white logo

New features and enhancements

New features and enhancements

Feature Details

Simplified the module creation process

Simplification of module creation enhances user experience and also eliminates errors that occur due to incorrect inputs. The simplification is achieved as follows:

  • Users need to provide only the Module Name while creating the module.

  • Legacy fields such as module type, table name, which could cause issues if incorrect inputs were provided are now auto-generated.

  • Simplification of the process of creating many to many fields as fields are by default added with same module name to the other side of related module.

Added support for pre-provisioning of SAML users

You can now choose the strategy to create SSO users between At Sign-in (Default) or Pre-provision. The At Sign-in (Default) strategy creates users at login, i.e., user accounts are created automatically on the first SSO login of the user login. The Pre-provision strategy requires the user accounts to be created prior to login.

Optimized Playbook Logging

You can now choose the logging levels for your playbook execution logs between INFO and DEBUG, both globally as well as at the individual playbook level. Choose the INFO level for production instances and in scenarios where you want to use storage space efficiently and the DEBUG level while designing or debugging playbooks.

Augmented the process of building connectors

FortiSOAR version 7.0.2 has simplified the process of building your own connector as follows:

  • Added an Actions screen in the 'Connector Building Wizard' using which you can define the actions that you want the connector to perform, instead of editing the raw JSON file.

  • Added support for editing the info.json file for the connectors in the Form View, instead of having to edit the file in the raw JSON format.

Enhanced the Export and Import Wizards

FortiSOAR version 7.0.2 has enhanced the export and import wizards to export and import all data and configurations, enabling the creation of a near-exact replica of a FortiSOAR environment.

  • Added support for export and import of record data.

  • Added support for export and import of .tgz files for connectors and widgets.

  • Changed the export format from .json to .zip for easier management.

  • Added support for exporting specific module permissions from roles.

Added support to reclaim unused disk space

FortiSOAR v7.0.2 provides you with an option to reclaim unused disk space. This activity clears all the empty rows in tables and indexes, which helps in improving the performance by optimizing the space. By default, this cleanup activity is run "Weekly at 02:01 AM (UTC) on Sunday"; however, you have the ability to update the schedule of this cleanup activity as per your requirement.

Added support for updating the license from the FortiSOAR login screen in the case of duplicate license detection or due to a change in the device UUID

If your FortiSOAR instance is blocked due to duplicate license detection or due to a change in the device UUID, then you can upload a new valid license from the FortiSOAR login screen.

Enhanced the Widget Library

The Extensible Widget Library (EWL) has been enhanced as follows:

  • Enhanced the Widget Library page to include the Workspace tab where you can create new widgets and edit existing ones. Therefore, the Widget Library page now contains three tabs:
    • Installed: Displays the widgets that are currently installed on your FortiSOAR system
    • Widget Store: Displays a list of widgets currently available that you can install and use.
    • Workspace: Displays the widgets that are currently being developed.
  • Introduced the 'Widget Building Wizard' to efficiently build new widgets.
  • Added support for editing the info.json file for the widgets in the Form View, instead of having to edit the file in the raw JSON format.
  • Added support to add versions for a widget, which enables you to install multiple versions of a widget and systematically enhance the functionality of widgets.

Added support for 'Dynamic List' in Manual Triggers and Manual Inputs

Dynamic List is supported as a 'Custom' input type in both the Manual Trigger step and the Manual Input step. A 'Dynamic list' is a list with dynamic values that is set using a playbook, i.e., the options of the list are defined using JSON or comma-separated values, set using Jinja, and gets displayed as a list in a user input prompt. You can use dynamic lists in cases such as:

  • Independent Playbooks, where you want the list to be included as part of the playbook and do not want to create a custom picklist for the same
  • Constantly Changing Picklists, where the values of picklists are constantly changing
  • Unauthenticated Picklists, where pre-defined JSON lists can be used to present multiple options to users for their selection
  • Filtered Record List, where you can present a filtered lists of records in a manual input to users for selection.

Introduced a new system subcommand with the disk option to csadm

The system subcommand with the disk option has been added to FortiSOAR Admin CLI (csadm) to enable administrators to manage disk space by extending specified logical volumes. Administrators can extend a logical volume to occupy space that is available in its own volume group or if a new disk is attached, then a single partition is created and the logical volume can be expanded to occupy that partition based on the specified size (GB).

Added support for one-time edits in case of read-only fields

One-time edits are allowed for read-only fields, in the following cases:

  • If the value of the field had not been set, i.e., it is 'null' or 'blank'
  • If the field name is "tenant", and the field value is "self".

Mandated password change for the 'csadmin' users on first FortiSOAR SSH login

The 'csadmin' user is now mandated to change their FortiSOAR default password during their first SSH login. This enhances the security of your csadmin account and prevents unauthorized parties from accessing the administration account for FortiSOAR.

Added the 'package' subcommand to csadm

The 'package' subcommand has been added to FortiSOAR Admin CLI (csadm) to install, update, or remove connectors from your FortiSOAR system.

Added an option to add a page break after each iteration in the 'Summary' Widget

You can now choose to add a page break after each iteration of the Summary widget by selecting the Print each record on new page checkbox while configuring the widget. If this checkbox is selected, then for example, if you have configured your Summary widget to display critical alerts with their related incidents, then the summary of each critical alert along with its associated incidents get displayed in a new page.

Enhanced global search to perform an exact text search

Global search now supports 'Exact Text Search' so that the search does not split up text with spaces, @, etc and the search results contain the complete text.

Enhancements made to the FortiSOAR mobile application

Updated the FortiSOAR mobile application to be compatible with version 7.0.2 of the FortiSOAR platform. The FortiSOAR mobile application has also added support for the dark theme, so if you have selected the dark theme for your mobile, the FortiSOAR mobile application will also appear in the dark theme.

Added support for new filters

Support for new filters Is In List and Is Not In List has been added for the Text, Picklist, and LookUp field types.

Added support for client-based certificate authentication to Secure Message Exchange

FortiSOAR v7.0.2 supports client-based certificate authentication to create connections between FSR agents or tenants and secure message exchange. This enhances security by ensuring that only trusted clients can connect to the secure message exchange.

Prior to the 7.0.2 release, only basic authentication was supported. Now, the following types of authentications are supported:

  • Basic Authentication: Uses username and password to create connections between FSR agent and secure message exchange.
  • Basic Authentication with Peer Verification: Uses username and password to create connections between FSR agents or tenants and secure message exchange, and also performs 'Certificate Verification'.
  • Client Certificate Authentication: Presents a certificate to the server which is signed by a trusted CA, and which uses the Common Name (CN) as the username when an agent or tenant tries to connect with the secure message exchange.

Enhanced the Data Ingestion Wizard to work in case of connectors that require only the ingest playbook

Prior to version 7.0.2, the Data ingestion wizard would fail if there are no #fetch or #create playbooks. However, there could be connectors that require only the #ingest playbook that contains a single action, which pulls data and creates records. Such connectors do not require the #fetch playbook since data is not required for custom module mapping and the #create playbook is not required since the 'Create Record' step is not needed. Therefore, from version 7.0.2 onwards the ingestion wizard has been enhanced to now work even if only the #ingest playbook is present.

Updated built-in widgets

All the built-in widgets that are part of the Widget Library are updated to version 2.0.0 in the 7.0.2 release to accommodate enhancements made in EWL and the changed folder structure. There have also been some bug fixes made in the respective widgets.

Updated built-in connectors

The following built-in connectors have been updated in the 7.0.2 release:

  • Utilities connector updated to version 3.1.2

  • SOAP connector updated to version 2.4.0

For more information on FortiSOAR Built-in connectors, see the "FortiSOAR™ Built-in connectors" article.

New features and enhancements

New features and enhancements

Feature Details

Simplified the module creation process

Simplification of module creation enhances user experience and also eliminates errors that occur due to incorrect inputs. The simplification is achieved as follows:

  • Users need to provide only the Module Name while creating the module.

  • Legacy fields such as module type, table name, which could cause issues if incorrect inputs were provided are now auto-generated.

  • Simplification of the process of creating many to many fields as fields are by default added with same module name to the other side of related module.

Added support for pre-provisioning of SAML users

You can now choose the strategy to create SSO users between At Sign-in (Default) or Pre-provision. The At Sign-in (Default) strategy creates users at login, i.e., user accounts are created automatically on the first SSO login of the user login. The Pre-provision strategy requires the user accounts to be created prior to login.

Optimized Playbook Logging

You can now choose the logging levels for your playbook execution logs between INFO and DEBUG, both globally as well as at the individual playbook level. Choose the INFO level for production instances and in scenarios where you want to use storage space efficiently and the DEBUG level while designing or debugging playbooks.

Augmented the process of building connectors

FortiSOAR version 7.0.2 has simplified the process of building your own connector as follows:

  • Added an Actions screen in the 'Connector Building Wizard' using which you can define the actions that you want the connector to perform, instead of editing the raw JSON file.

  • Added support for editing the info.json file for the connectors in the Form View, instead of having to edit the file in the raw JSON format.

Enhanced the Export and Import Wizards

FortiSOAR version 7.0.2 has enhanced the export and import wizards to export and import all data and configurations, enabling the creation of a near-exact replica of a FortiSOAR environment.

  • Added support for export and import of record data.

  • Added support for export and import of .tgz files for connectors and widgets.

  • Changed the export format from .json to .zip for easier management.

  • Added support for exporting specific module permissions from roles.

Added support to reclaim unused disk space

FortiSOAR v7.0.2 provides you with an option to reclaim unused disk space. This activity clears all the empty rows in tables and indexes, which helps in improving the performance by optimizing the space. By default, this cleanup activity is run "Weekly at 02:01 AM (UTC) on Sunday"; however, you have the ability to update the schedule of this cleanup activity as per your requirement.

Added support for updating the license from the FortiSOAR login screen in the case of duplicate license detection or due to a change in the device UUID

If your FortiSOAR instance is blocked due to duplicate license detection or due to a change in the device UUID, then you can upload a new valid license from the FortiSOAR login screen.

Enhanced the Widget Library

The Extensible Widget Library (EWL) has been enhanced as follows:

  • Enhanced the Widget Library page to include the Workspace tab where you can create new widgets and edit existing ones. Therefore, the Widget Library page now contains three tabs:
    • Installed: Displays the widgets that are currently installed on your FortiSOAR system
    • Widget Store: Displays a list of widgets currently available that you can install and use.
    • Workspace: Displays the widgets that are currently being developed.
  • Introduced the 'Widget Building Wizard' to efficiently build new widgets.
  • Added support for editing the info.json file for the widgets in the Form View, instead of having to edit the file in the raw JSON format.
  • Added support to add versions for a widget, which enables you to install multiple versions of a widget and systematically enhance the functionality of widgets.

Added support for 'Dynamic List' in Manual Triggers and Manual Inputs

Dynamic List is supported as a 'Custom' input type in both the Manual Trigger step and the Manual Input step. A 'Dynamic list' is a list with dynamic values that is set using a playbook, i.e., the options of the list are defined using JSON or comma-separated values, set using Jinja, and gets displayed as a list in a user input prompt. You can use dynamic lists in cases such as:

  • Independent Playbooks, where you want the list to be included as part of the playbook and do not want to create a custom picklist for the same
  • Constantly Changing Picklists, where the values of picklists are constantly changing
  • Unauthenticated Picklists, where pre-defined JSON lists can be used to present multiple options to users for their selection
  • Filtered Record List, where you can present a filtered lists of records in a manual input to users for selection.

Introduced a new system subcommand with the disk option to csadm

The system subcommand with the disk option has been added to FortiSOAR Admin CLI (csadm) to enable administrators to manage disk space by extending specified logical volumes. Administrators can extend a logical volume to occupy space that is available in its own volume group or if a new disk is attached, then a single partition is created and the logical volume can be expanded to occupy that partition based on the specified size (GB).

Added support for one-time edits in case of read-only fields

One-time edits are allowed for read-only fields, in the following cases:

  • If the value of the field had not been set, i.e., it is 'null' or 'blank'
  • If the field name is "tenant", and the field value is "self".

Mandated password change for the 'csadmin' users on first FortiSOAR SSH login

The 'csadmin' user is now mandated to change their FortiSOAR default password during their first SSH login. This enhances the security of your csadmin account and prevents unauthorized parties from accessing the administration account for FortiSOAR.

Added the 'package' subcommand to csadm

The 'package' subcommand has been added to FortiSOAR Admin CLI (csadm) to install, update, or remove connectors from your FortiSOAR system.

Added an option to add a page break after each iteration in the 'Summary' Widget

You can now choose to add a page break after each iteration of the Summary widget by selecting the Print each record on new page checkbox while configuring the widget. If this checkbox is selected, then for example, if you have configured your Summary widget to display critical alerts with their related incidents, then the summary of each critical alert along with its associated incidents get displayed in a new page.

Enhanced global search to perform an exact text search

Global search now supports 'Exact Text Search' so that the search does not split up text with spaces, @, etc and the search results contain the complete text.

Enhancements made to the FortiSOAR mobile application

Updated the FortiSOAR mobile application to be compatible with version 7.0.2 of the FortiSOAR platform. The FortiSOAR mobile application has also added support for the dark theme, so if you have selected the dark theme for your mobile, the FortiSOAR mobile application will also appear in the dark theme.

Added support for new filters

Support for new filters Is In List and Is Not In List has been added for the Text, Picklist, and LookUp field types.

Added support for client-based certificate authentication to Secure Message Exchange

FortiSOAR v7.0.2 supports client-based certificate authentication to create connections between FSR agents or tenants and secure message exchange. This enhances security by ensuring that only trusted clients can connect to the secure message exchange.

Prior to the 7.0.2 release, only basic authentication was supported. Now, the following types of authentications are supported:

  • Basic Authentication: Uses username and password to create connections between FSR agent and secure message exchange.
  • Basic Authentication with Peer Verification: Uses username and password to create connections between FSR agents or tenants and secure message exchange, and also performs 'Certificate Verification'.
  • Client Certificate Authentication: Presents a certificate to the server which is signed by a trusted CA, and which uses the Common Name (CN) as the username when an agent or tenant tries to connect with the secure message exchange.

Enhanced the Data Ingestion Wizard to work in case of connectors that require only the ingest playbook

Prior to version 7.0.2, the Data ingestion wizard would fail if there are no #fetch or #create playbooks. However, there could be connectors that require only the #ingest playbook that contains a single action, which pulls data and creates records. Such connectors do not require the #fetch playbook since data is not required for custom module mapping and the #create playbook is not required since the 'Create Record' step is not needed. Therefore, from version 7.0.2 onwards the ingestion wizard has been enhanced to now work even if only the #ingest playbook is present.

Updated built-in widgets

All the built-in widgets that are part of the Widget Library are updated to version 2.0.0 in the 7.0.2 release to accommodate enhancements made in EWL and the changed folder structure. There have also been some bug fixes made in the respective widgets.

Updated built-in connectors

The following built-in connectors have been updated in the 7.0.2 release:

  • Utilities connector updated to version 3.1.2

  • SOAP connector updated to version 2.4.0

For more information on FortiSOAR Built-in connectors, see the "FortiSOAR™ Built-in connectors" article.