Integrations

Fortigate Firewall-integration

Overview

The FortiGate Firewall integration allows Cywift to securely connect with your Fortinet environment to collect security, network, and system-related data. This integration uses a REST API token generated from the FortiGate GUI and enables continuous visibility into firewall controls and configurations.

Before starting the integration, ensure the following:

• FortiOS version 7.4.5 or later (or 7.6.0 or later) is installed
• You have administrator access to the FortiGate firewall
• Network connectivity exists between Cywift and the FortiGate device

Step 1: Create an Admin Profile in FortiGate

• Log in to the FortiGate GUI
• Navigate to:

System → Admin Profile → Create New

• Create a new profile and assign the following permissions

1. VPN — Read/Write
2. User and Device — Read/Write
3. Network — Read/Write
4. System — Read/Write

‍

• Save the profile

Step 2: Create a REST API Admin and Generate Token

• Go to:

System → Administrators → Create New

• Select REST API Admin
• Assign the Admin Profile created in Step 1
• Generate the REST API Token
• Copy the token and store it securely

This token will be used once in Cywift. Treat it as confidential.

Step 3: Add FortiGate Integration in Cywift (Individual Integration)

• Click Add Integration
• Select:

Number of Integration: Individual Integration

Fill in the required fields:

• Integration Type: NGFW
• Collectors: Select a collector
• Integration System: FortiGate
• Alias: Enter a recognizable name
• Owner: Select integration owner
• Host Address: Enter FortiGate IP or hostname
• API Token: Paste the copied REST API token

Step 4: Bulk Integration (Optional)

If you want to integrate multiple FortiGate devices at once:

• Choose Bulk Integration
• Select:

     Integration Type: NGFW

     Integration System: FortiGate

• Download the provided template
• Fill in the required device details
• Upload the completed file
• Click Test Connection

After Integration

Once connected:

• FortiGate data becomes visible on the Cywift Dashboard
• Relevant controls, system insights, and risk indicators are updated automatically
• Integration status can be monitored from the Integrations section

Notes

• Regenerating a token will invalidate the previous token
• Ensure the FortiGate IP/hostname is reachable from Cywift
• Use dedicated API users for better security and auditability