Skip to main content

Cyware Orchestrate

Fortinet FortiClient

App Vendor: Fortinet

App Category: Endpoint

Connector Version: 1.0.0

API Version: 1.0.0

About App

FortiClient is an endpoint software that runs on an endpoint, such as a laptop or mobile device, that communicates with the Fortinet Security Fabric to provide information, visibility, and control to that device.

The Fortinet FortiClient app is configured with the Orchestrate application to perform the following actions:

Action Name

Description

Quarantine Endpoint

This action quarantines the specified endpoint.

Remove Endpoint from Quarantine

The action removes the specified endpoint from quarantine.

List Endpoint Records

This action retrieves a list of endpoint records.

Get Endpoint Count

This action retrieves a count of endpoints.

Get Count of Endpoint Vulnerabilities

This action retrieves a count of vulnerabilities on an endpoint.

Get Vulnerabilities for an Endpoint

This action retrieves a list of vulnerabilities on an endpoint.

Get System Events for an Endpoint

This action retrieves system events related to the specified endpoint.

Send Patch Request

This action sends a patch request to the specified endpoint.

Create Vulnerability Scan

This action creates a vulnerability scan for the specified endpoint.

Get Endpoints by OS Type

This action can be used to get endpoints by OS type.

Get Endpoint by Device ID

This action retrieves endpoints for the specified device.

Get Installed Software for an Endpoint

This action retrieves a list of installed software on the specified endpoint.

Configuration Parameters

The following configuration parameters are required for the Fortinet FortiClient app to communicate with the Fortinet FortiClient enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

Base URL

Enter the base URL.

Example:

"https://hostname.com"

Text

Required

Username

Enter the username.

Example:

"admin"

Text

Required

Password

Enter the password.

Example:

password

Password

Required

Verify

Enter if you want to verify the SSL certificate.

Example:

True

Boolean

Required

Allowed values:

  • True: Verify the SSL certificate.

  • False: Do not verify the SSL certificate.

Action: Quarantine Endpoint

This action quarantines the specified endpoint.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Endpoint Name

Enter the name of the endpoint you want to quarantine.

Text

Required

Action: Remove Endpoint from Quarantine

The action removes the specified endpoint from quarantine.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Endpoint Name

Enter the name of the endpoint you want to remove from quarantine.

Text

Required

Action: List Endpoint Records

This action retrieves a list of endpoint records.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Filter Type

Enter the filter type.

Example:

"unregistered"

Text

Required

Allowed values:

  • notinstalled

  • unregistered

  • outofsync

  • notcompliant

  • securityrisk

  • quarantined

Default value: all

Action: Get Endpoint Count

This action retrieves a count of endpoints.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Filter Type

Enter the filter type.

Example:

"unregistered"

Text

Optional

Allowed values:

  • notinstalled

  • unregistered

  • outofsync

  • notcompliant

  • securityrisk

  • quarantined

Default value: all

Action: Get Count of Endpoint Vulnerabilities

This action retrieves a count of vulnerabilities on an endpoint.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Client ID

Enter the client ID.

Text

Required

Action: Get Vulnerabilities for an Endpoint

This action retrieves a list of vulnerabilities on an endpoint.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Endpoint Name

Enter the name of the endpoint for which you want to retrieve vulnerabilities.

Text

Required

Action: Get System Events for an Endpoint

This action retrieves system events related to the specified endpoint.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Endpoint Name

Enter the name of the endpoint name for which you want to retrieve system events.

Text

Required

Action: Send Patch Request

This action sends a patch request to the specified endpoint.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Endpoint ID

Enter the unique identifier of the endpoint that you want to patch.

Text

Required

Action: Create Vulnerability Scan

This action creates a vulnerability scan for the specified endpoint.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Endpoint ID

Enter the unique identifier of the endpoint for which you want to create a vulnerability scan.

Text

Required

Action: Get Endpoints by OS Type

This action retrieves all endpoints for the specified OS.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

OS Type

Enter the OS type for which you want to retrieve endpoints.

Example:

"mac"

Text

Required

Allowed values:

  • windows

  • mac

  • linux

Action: Get Endpoint by Device ID

This action retrieves endpoints for the specified device.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Device ID

Enter the unique identifier of the device for which you want to retrieve endpoints.

Text

Required

Action: Get Installed Software for an Endpoint

This action retrieves a list of installed software on the specified endpoint.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Endpoint ID

Enter the unique identifier of the endpoint for which you want to retrieve details.

Text

Required