Fortinet

The CrowdSec Fortinet integration connects CrowdSec's hosted blocklist endpoint to your Fortinet firewall.
Fortinet calls this feature IP address Threat Feeds, which enable you to integrate external threat intelligence sources into your firewall policies.

Ensure your Fortinet firmware supports IP address Threat Feeds.
The vendor documentation is available in the References section below.

Step 1 — Create the integration in the CrowdSec Console

In the Integrations page, click Connect under the Fortinet card.

Name the integration (must be unique to your account), then click Create.

The credentials shown next are displayed only once. Copy them before closing this screen.

You now have an HTTPS endpoint and Basic Auth credentials to configure on your Fortinet device.

References

• Fortinet — IP address Threat Feeds documentation
• Video tutorial

Next Steps

Subscribe to blocklists in the Blocklist Catalog to populate your integration.