Fortinet FortiClient
App Vendor: Fortinet
App Category: Endpoint
Connector Version: 1.0.0
API Version: 1.0.0
About App
FortiClient is an endpoint software that runs on an endpoint, such as a laptop or mobile device, that communicates with the Fortinet Security Fabric to provide information, visibility, and control to that device.
The Fortinet FortiClient app is configured with the Orchestrate application to perform the following actions:
Action Name | Description |
---|---|
Quarantine Endpoint | This action quarantines the specified endpoint. |
Remove Endpoint from Quarantine | The action removes the specified endpoint from quarantine. |
List Endpoint Records | This action retrieves a list of endpoint records. |
Get Endpoint Count | This action retrieves a count of endpoints. |
Get Count of Endpoint Vulnerabilities | This action retrieves a count of vulnerabilities on an endpoint. |
Get Vulnerabilities for an Endpoint | This action retrieves a list of vulnerabilities on an endpoint. |
Get System Events for an Endpoint | This action retrieves system events related to the specified endpoint. |
Send Patch Request | This action sends a patch request to the specified endpoint. |
Create Vulnerability Scan | This action creates a vulnerability scan for the specified endpoint. |
Get Endpoints by OS Type | This action can be used to get endpoints by OS type. |
Get Endpoint by Device ID | This action retrieves endpoints for the specified device. |
Get Installed Software for an Endpoint | This action retrieves a list of installed software on the specified endpoint. |
Configuration Parameters
The following configuration parameters are required for the Fortinet FortiClient app to communicate with the Fortinet FortiClient enterprise application. The parameters can be configured by creating instances in the app.
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Base URL | Enter the base URL. Example: "https://hostname.com" | Text | Required | |
Username | Enter the username. Example: "admin" | Text | Required | |
Password | Enter the password. Example: password | Password | Required | |
Verify | Enter if you want to verify the SSL certificate. Example: True | Boolean | Required | Allowed values:
|
Action: Quarantine Endpoint
This action quarantines the specified endpoint.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Endpoint Name | Enter the name of the endpoint you want to quarantine. | Text | Required |
Action: Remove Endpoint from Quarantine
The action removes the specified endpoint from quarantine.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Endpoint Name | Enter the name of the endpoint you want to remove from quarantine. | Text | Required |
Action: List Endpoint Records
This action retrieves a list of endpoint records.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Filter Type | Enter the filter type. Example: "unregistered" | Text | Required | Allowed values:
Default value: all |
Action: Get Endpoint Count
This action retrieves a count of endpoints.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Filter Type | Enter the filter type. Example: "unregistered" | Text | Optional | Allowed values:
Default value: all |
Action: Get Count of Endpoint Vulnerabilities
This action retrieves a count of vulnerabilities on an endpoint.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Client ID | Enter the client ID. | Text | Required |
Action: Get Vulnerabilities for an Endpoint
This action retrieves a list of vulnerabilities on an endpoint.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Endpoint Name | Enter the name of the endpoint for which you want to retrieve vulnerabilities. | Text | Required |
Action: Get System Events for an Endpoint
This action retrieves system events related to the specified endpoint.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Endpoint Name | Enter the name of the endpoint name for which you want to retrieve system events. | Text | Required |
Action: Send Patch Request
This action sends a patch request to the specified endpoint.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Endpoint ID | Enter the unique identifier of the endpoint that you want to patch. | Text | Required |
Action: Create Vulnerability Scan
This action creates a vulnerability scan for the specified endpoint.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Endpoint ID | Enter the unique identifier of the endpoint for which you want to create a vulnerability scan. | Text | Required |
Action: Get Endpoints by OS Type
This action retrieves all endpoints for the specified OS.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
OS Type | Enter the OS type for which you want to retrieve endpoints. Example: "mac" | Text | Required | Allowed values:
|
Action: Get Endpoint by Device ID
This action retrieves endpoints for the specified device.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Device ID | Enter the unique identifier of the device for which you want to retrieve endpoints. | Text | Required |
Action: Get Installed Software for an Endpoint
This action retrieves a list of installed software on the specified endpoint.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
---|---|---|---|---|
Endpoint ID | Enter the unique identifier of the endpoint for which you want to retrieve details. | Text | Required |