FortiProxy

Version: 1.2
Updated: Jul 18, 2023

Fortinet FortiProxy is a secure web proxy that protects employees against internet-borne attacks by incorporating multiple detection technique such as web filtering, DNS filtering, data loss prevention, antivirus, intrusion prevention, and advanced threat protection. FortiProxy helps to reduce bandwidth demands and optimize the network with content and video caching.

Actions

• List Antivirus Profiles (Enrichment) - Select all entries in a CLI table of antivirus profiles.
• Create Antivirus Profile (Containment) - Create antivirus profile.
• Delete Antivirus Profiles (Containment) - Delete the specific resource.
• List Authentication Rules (Enrichment) - Select all entries in a CLI table of authentication rules.
• Create Authentication Rule (Containment) - Create authentication rule.
• Delete Authentication Rule (Containment) - Delete the specific resource.
• List Firewall Addresses (Enrichment) - Select all entries in a CLI table of firewall addresses.
• Create Firewall Address (Containment) - Create firewall address.
• Delete Firewall Address (Containment) - Delete the specific resource.
• List Web Filter Profiles (Enrichment) - Select all entries in a CLI table of webfilter profiles.
• Create Web Filter Profile (Containment) - Delete the specific resource.
• List Policies (Enrichment) - Select all entries in a CLI table of policies.
• Create Policy (Containment) - Create firewall policy.
• Delete Policy (Containment) - Delete the specific resource.
• List Traffic Shaping Policy (Enrichment) - Select all entries in a CLI table of traffic shaping policy.
• Create Traffic Shaping Policy (Containment) - Create traffic shaping policy.
• Delete Traffic Shaping Policy (Containment) - Delete the specific resource.
• List Webfilter Urlfilter (Enrichment) - Select all entries in a CLI table of webfilter urlfilter.
• Create URL Filter (Containment) - Create URL filtering.

Configure FortiProxy in Automation Service and Cloud SOAR

Before you can use the integration, you must configure it so that the vendor can communicate with Sumo Logic. For general guidance, see Configure Authentication for Integrations.

1. Access App Central and install the integration.
2. Select the installed integration in the Integrations page.
   Classic UI. In the main Sumo Logic menu, select Automation and then select Integrations in the left nav bar.
   New UI. In the main Sumo Logic menu, select Automation > Integrations. You can also click the Go To... menu at the top of the screen and select Integrations.
3. Select the integration.
4. Hover over the resource name and click the Edit button that appears.
   
5. In the Add Resource dialog, enter the authentication needed by the resource. When done, click TEST to test the configuration, and click SAVE to save the configuration.

For information about FortiProxy, see FortiProxy documentation.

Change Log

• February 14, 2022 - First upload
• June 26, 2023 (v1.1) - Updated the integration with Environmental Variables
• July 18, 2023 (v1.2) - Code refactoring