DumbMonit
ИнтеграцииСеть и межсетевые экраны
Мониторинг FortiGate в DumbMonit
A Fortinet firewall through the FortiOS REST API: IPsec tunnels down, interfaces without link, HA out of sync, memory near conserve mode, FortiGuard licences expiring.
ДокументацияОфициальный сайт: FortiGate
Описания на английском, как в самом продукте. Подписи на странице — на вашем языке.
Что проверяет DumbMonit
A Fortinet FortiGate through the FortiOS REST API: site-to-site IPsec tunnels that are down, enabled interfaces that lost their link, an HA cluster out of sync or short of a member, memory approaching conserve mode, FortiGuard and FortiCare licences expiring, and patch releases offered for the running FortiOS branch. DumbMonit uses a REST API user whose access profile only reads, and which only accepts calls from the DumbMonit server's address (trusted host). Its token is sent as Authorization: Bearer, never in the URL: FortiOS 7.4.5 and 7.6.1 refuse it there anyway.
Типичное применение. Firewall: IPsec tunnels, links, HA sync, conserve mode, FortiGuard licences
Примеры
- FortiGate 40F / 60F / 100F
- FortiGate VM
- FortiOS 7.x
Как подключается
Что понадобится
- API tokenThe token of the dumbmonit REST API user, sent as a bearer token.
Сетевые порты, которые нужно открыть
443/TCPAdministration API (HTTPS, default)
Шаги настройки: Create a read-only REST API user for DumbMonit
System → Admin Profiles → Create New: name the profile as follows and set the access permissions listed below, everything else None.
dumbmonit-roSystem → Administrators → Create New → REST API Admin: name it as follows and pick that profile.
dumbmonitUnder Trusted Hosts, enter the DumbMonit server's address with a /32 mask: FortiGate refuses 0.0.0.0/0.
Click OK: FortiGate shows the API token once. Copy it.
In DumbMonit, enter the FortiGate address (fw.lan) and paste the token as API token.
Обратите внимание. FortiGate ships a self-signed certificate: tick "Accept an unverifiable certificate" unless you installed your own.