What is FortiEDR? #
FortiEDR delivers automated endpoint security that integrates with the Fortinet Security Fabric and third-party solutions to reduce MTTR. FortiEDR proactively shrinks the attack surface, prevents malware infection, detects and defuses potential threats immediately, and automates response and remediation procedures with customizable playbooks across legacy and current operating systems.
Why Should You Use the FortiEDR Connector? #
The FortiEDR connector provides visibility into the assets managed by FortiEDR. You can use this visibility to:
-
ensure assets are managed per your security policies
-
monitor each endpoint and its status
How Does This Connector Work? #
Lucidum executes read-only requests to the Fortinet REST API and ingests only meta-data about ForiEDR devices. Lucidum does not retrieve any data stored on your assets.
Configuring the Connector in Lucidum #
|
Field |
Description |
Example |
|---|---|---|
|
URL |
URL for the FortiEDR API |
https://ENSILOHOST/management-rest/ |
|
Username |
User name for a FortEDR account with read access for all devices. |
 justynmutts |
|
Password |
The password for the ForiEDR pro account. |
 ************ |
Source Documentation #
Creating Credentials #
Required Permissions #
|
Object |
Permissions |
|---|---|
|
User Account |
 REST API |
API Documentation #
API V4.1
