Fortinet Fortisiem

Introduction

This guide explains how to authenticate the Fortinet FortiSIEM connector in Swimlane using HTTP Basic Authentication. You will prepare FortiSIEM API access, collect the required credentials, and configure the connector asset in Swimlane Turbine.

Prerequisites

FortiSIEM Access Requirements

You must have administrative or API access to Fortinet FortiSIEM with permissions to:

Access the FortiSIEM REST API

Retrieve incidents, events, and device information

Update incidents through the API

Required Credentials

During setup you will collect:

FortiSIEM API URL

FortiSIEM Username

FortiSIEM Password

Authentication Method Overview

The Fortinet FortiSIEM connector authenticates using HTTP Basic Authentication. The FortiSIEM username and password are used to authenticate API requests.

FortiSIEM API Setup

Take the following steps to prepare FortiSIEM API access:

Ensure the FortiSIEM REST API service is enabled in your deployment.

Verify that the user account has permissions to access incidents, events, and device data.

Identify the base URL for your FortiSIEM API endpoint.

Confirm the username and password that will be used for API authentication.

Test the API endpoint using an API client if required.

Connector Configuration in Swimlane

Take the following steps to configure the Fortinet FortiSIEM connector asset in Swimlane.

From the left-hand navigation pane click ORCHESTRATION and then Assets.

The Asset homepage opens.

Click the Plus Icon (+) to open the Configure your Connector Asset window.

Select Fortinet FortiSIEM from the Asset Type list.

Fill in the Asset Settings and Asset Input fields as shown below.

Click Create.

Configuration Parameters

Field	Description	Required
url	Base URL for the FortiSIEM API endpoint	Required
username	FortiSIEM account username	Required
password	FortiSIEM account password	Required
verify_ssl	Enable or disable SSL certificate verification	Optional
http_proxy	Proxy configuration if requests must go through a proxy	Optional

Troubleshooting

If authentication fails:

Ensure the FortiSIEM username and password are correct.

Verify the FortiSIEM API URL is correct and reachable.

Confirm the user account has API access permissions.

Check SSL verification settings if using self-signed certificates.

Verify proxy configuration if requests must pass through a proxy.

Review FortiSIEM logs for authentication errors.

Sources

Fortinet FortiSIEM Official Documentation: https://docs.fortinet.com/product/fortisiem

Result

You have successfully authenticated the Fortinet FortiSIEM connector in Swimlane.