New Member.
160 views

Can Fortinet IPS correlate with Qualys vuln scan data

Nessus and Qualys scanners can correlate against Sourcefilre IPS, I was wondering of Fortinet IPS can also so I get use the ThreatLevel formula as it should be used.

0 Likes
2 Replies
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: Can Fortinet IPS correlate with Qualys vuln scan data

Please try posting your question in the Fortinet forums.

0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: Can Fortinet IPS correlate with Qualys vuln scan data

Hello Tom,

Thank you for your post.

Please could you clarify the detail of the question that you are asking?

From the short statement you have made,  I am guessing that you wish to take "event/log" data from the Fortinet IPS and have it sent to ArcSight ESM so that content can be developed to correlate with vulnerability scanner data for some use cases that you have in mind?

To bring information from Fortigate IPS you would need a SmartConnector.   I found this documentation link for the SmartConnector-for-Fortinet-FortiGate-Syslog which could provide you with the source event connection you need to Fortigate IPS appliance if that is the appliance you are using. 

If I did not interpret your question correctly, then if we know a little more about what you are trying to achieve then the experience in this forum may be able to make some suggestions for you.

Thanks and regards,

Darren

 

 

ArcSight Support
If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.