Fortinet Firewall is a network appliance by Fortinet which enhances various network security capabilities.
Integrating your Fortinet/Fortigate logs into Hunters will allow ingestion of the logs, as well as detection and advanced investigation and correlation over these logs.
Supported Data Types
Fortinet Firewall - Network information logs by Fortinet (see more details here). For details on specific events logged see here.
Hunters Integration
In order to integrate your Fortinet logs into Hunters, the logs need to be collected from your network to a Storage Service (e.g. to an S3 bucket or Azure Blob Storage) shared with Hunters. See here for more details for Fortinet’s side.
The expected format of the logs is the key value format as exported by Fortinet. For example:
