Latest Version 1.0.4
August 26, 2021
Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
This app is archived. App archiving documentation
FortiGate Active Response Add-on For Splunk Enterprise
The Fortinet Active Response add-on defined an alert action, which will enable users to block traffic from/to a particular source IP, destination IP or a network user through FortiGate's RESTful API based on correlation search result. It leverages Adaptive Response Framework solution provided by Splunk Enterprise.
Built by
Compatibility
Splunk Enterprise
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0, 8.2, 8.1, 8.0
CIM Version: 4.x
Rating
0
(0)
Log in to rate this app
Support
Not Supported
The Fortinet Active Response add-on defined an alert action, which will enable users to block traffic from/to a particular source IP, destination IP or a network user through FortiGate's RESTful API based on correlation search result. It leverages Adaptive Response Framework solution provided by Splunk Enterprise.
Categories
IT Operations, Security, Fraud & Compliance
Created By
Fortinet Inc
Type
addon
Downloads
3,691
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing