Fortinet

Use Fortinet data for Cortex AgentiX.

Important

This connector is only available for tenants that onboarded after July 26, 2026. For tenants that onboarded before this date, use Marketplace to access the standalone integration. For more information, see Marketplace.

This connector is available with any active Cortex XSIAM or Cortex AgentiX license.

Integrate with Fortinet products. FortiManager is a single console central management system that manages Fortinet devices. Use FortiSIEM to fetch and update issues, search events, and manage watchlists and resource lists. FortiSandbox is an advanced security tool that combines proactive mitigation, enhanced threat detection, and in-depth reporting to counter advanced threats. FortiMail is a comprehensive email security solution offering advanced threat protection, data loss prevention, encryption, and email authentication.

This connector includes the following sub-capabilities (Marketplace integrations link to PAN DEV for more information):

• fortimail: FortiMail is a comprehensive email security solution by Fortinet, offering advanced threat protection, data loss prevention, encryption, and email authentication to safeguard organizations against email-based cyber threats and protect sensitive information.
• FortiManager: FortiManager is a single console central management system that manages Fortinet devices.
• FortiSandboxv2: FortiSandbox is an advanced security tool that goes beyond standard sandboxing. It combines proactive mitigation, enhanced threat detection, and in-depth reporting, using Fortinet's dynamic antivirus technology, dual-level sandboxing, and FortiGuard cloud integration to counter advanced threats. It effectively detects viruses, Advanced Persistent Threats (APTs), and malicious URLs, integrating seamlessly with existing Fortinet devices like FortiGate and FortiMail for comprehensive network protection.
• FortiSIEM: Search and update events of FortiSIEM and manage resource lists.
• FortiSIEMV2: Use FortiSIEM v2 to fetch and update incidents, search events and manage watchlists of FortiSIEM.

To configure this connector, follow the steps outlined in the configuration wizard.