Fortinet + D3 Smart SOAR
Harness the Power of the Fortinet Security Fabric
Fortinet secures many of the largest enterprises, SMBs, service providers, and public sector entities around the world. Fortinet security solutions include firewall, SIEM, IPS, sandbox, and many more. D3 Smart SOAR’s robust out-of-the-box integrations with eight Fortinet tools provide security teams with seamless security incident and data breach responses.
Expert-Built and Maintained Integrations
D3’s integration team takes the burden of coding, troubleshooting, and updating integrations off your hands. Our deep research into integrated technologies has produced important integrations with many Fortinet tools, including:
- FortiSIEM: Automatically ingest, triage, and respond to FortiSIEM alerts.
- FortiGate: Ingest FortiGate alerts and orchestrate FortiGate’s firewall policy management and IOC blacklisting with a full range of actions from across your security infrastructure.
- FortiEDR: Ingest endpoint events and perform remediation actions.
- FortiSandbox: Upload suspicious files and URLs and retrieve test results.
Use Case 1
Alarm Enrichment and Response
Phishing, malware, and brute force attacks can upend your security team by requiring analysts to gather contextual data and resolve the threat while dealing with screen-switching, data silos, and a lack of up-to-date information. By combining FortiSIEM for threat detection with Smart SOAR for incident enrichment and response, you can automatically escalate real threats to incident status in Smart SOAR and assess their criticality through data enrichment and analysis.
- Smart SOAR can then trigger an automated response playbook or guide human analysts efficiently through manual steps.
- Mange the entire process from a single interface.
- Normalize, triage, and escalate alerts through Smart SOAR’s Event Pipeline.
Use Case 2
Automated Network Traffic Investigation
Analyzing network traffic requires analysts to investigate several information sources, including dense log and event data. Stitching this information together to form timelines and investigative insights is difficult and highly manual, delaying corrective action and increasing the risk to the organization. To carry out investigations with Fortinet and Smart SOAR, analysts can use pre-built commands in Smart SOAR to rapidly gather alarm details, event logs, statuses, and other data from FortiGate and FortiSIEM.
- Similar commands are available for hundreds of other tools, giving investigators a centralized console for complex, end-to-end incident investigations.
- Manage complex investigations and continuously incorporate new evidence.
- Orchestrate response actions, such as updating blocklists in FortiGate.
Why Smart SOAR?
Joint users of Fortinet and D3 Smart SOAR don’t just get automated alarm enrichment and network traffic investigations; they also get the countless other features that make Smart SOAR the leading independent SOAR solution, including:
Expert-built codeless integrations across the stack
Tier 1–3 automation, based on deep research into the capabilities of common tools
The Event Pipeline, which reduces alert volume by up to 98%
Cross-dimension correlation, which acts across tools, timeframes, TTPs, and artifacts
Fortinet Integrations: Summary
Integrations Done the Right Way
An unlimited number of pre-built integrations, expertly maintained by the largest technical team in security automation. Thoroughly researched, tested and built—and delivered for free. Always.
