Skip to content

Commit 4106053

Browse files
v-atulyadavv-atulyadav
committed
Repakcaged
1 parent ceebc67 commit 4106053

File tree

8 files changed

+39
-26
lines changed

8 files changed

+39
-26
lines changed

‎Solutions/Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel/Data/Solution_Fortinet-Fortigate.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
"Name": "Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel",
33
"Author": "Microsoft - [email protected]",
44
"Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\" width=\"75px\" height=\"75px\">",
5-
"Description": "Gain insight into your organization's network and improve your security operation capabilities with the [Fortinet FortiGate Next-generation Firewall](https://www.fortinet.com/products/next-generation-firewall) Solution for Microsoft Sentinel. It allows you to easily connect your FortiGate logs with Microsoft Sentinel. This enables you to view dashboards, create custom alerts, and improve investigation. \n\n Playbooks are included to help in automated remediation \n\n For questions about [FortiGate](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/fortinet.fortinet_fortigate-vm_v5?tab=Overview), please contact Fortinet at [[email protected]](mailto:[email protected]).\n\n This solution is dependent on the Common Event Format solution containing the CEF via AMA connector to collect the logs. The CEF solution will be installed as part of this solution installation. \n\n**NOTE:** Microsoft recommends installation of CEF via AMA Connector. The existing connectors are about to be deprecated by **Aug 31, 2024**.",
5+
"Description": "Gain insight into your organization's network and improve your security operation capabilities with the [Fortinet FortiGate Next-generation Firewall](https://www.fortinet.com/products/next-generation-firewall) Solution for Microsoft Sentinel. It allows you to easily connect your FortiGate logs with Microsoft Sentinel. This enables you to view dashboards, create custom alerts, and improve investigation. \n\n Playbooks are included to help in automated remediation \n\n For questions about [FortiGate](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/fortinet.fortinet_fortigate-vm_v5?tab=Overview), please contact Fortinet at [[email protected]](mailto:[email protected]).\n\n This solution is dependent on the Common Event Format solution containing the CEF via AMA connector to collect the logs. The CEF solution will be installed as part of this solution installation. \n\n**NOTE:** Microsoft recommends installation of CEF via AMA Connector. The existing connectors were deprecated on **Aug 31, 2024**.",
66
"Playbooks": [
77
"Playbooks/FortinetFortigateFunctionApp/azuredeploy.json",
88
"Playbooks/FortinetCustomConnector/azuredeploy.json",

‎Solutions/Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel/Package/3.0.8.zip‎

170 Bytes
Binary file not shown.

‎Solutions/Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel/Package/createUiDefinition.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
"config": {
77
"isWizard": false,
88
"basics": {
9-
"description": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\" width=\"75px\" height=\"75px\">\n\n**Note:** Please refer to the following before installing the solution: \n\n• Review the solution [Release Notes](https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Fortinet%20FortiGate%20Next-Generation%20Firewall%20connector%20for%20Microsoft%20Sentinel/ReleaseNotes.md)\n\n • There may be [known issues](https://aka.ms/sentinelsolutionsknownissues) pertaining to this Solution, please refer to them before installing.\n\nGain insight into your organization's network and improve your security operation capabilities with the [Fortinet FortiGate Next-generation Firewall](https://www.fortinet.com/products/next-generation-firewall) Solution for Microsoft Sentinel. It allows you to easily connect your FortiGate logs with Microsoft Sentinel. This enables you to view dashboards, create custom alerts, and improve investigation. \n\n Playbooks are included to help in automated remediation \n\n For questions about [FortiGate](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/fortinet.fortinet_fortigate-vm_v5?tab=Overview), please contact Fortinet at [[email protected]](mailto:[email protected]).\n\n This solution is dependent on the Common Event Format solution containing the CEF via AMA connector to collect the logs. The CEF solution will be installed as part of this solution installation. \n\n**NOTE:** Microsoft recommends installation of CEF via AMA Connector. The existing connectors are about to be deprecated by **Aug 31, 2024**.\n\n**Workbooks:** 1, **Custom Azure Logic Apps Connectors:** 1, **Function Apps:** 1, **Playbooks:** 3\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)",
9+
"description": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\" width=\"75px\" height=\"75px\">\n\n**Note:** Please refer to the following before installing the solution: \n\n• Review the solution [Release Notes](https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Fortinet%20FortiGate%20Next-Generation%20Firewall%20connector%20for%20Microsoft%20Sentinel/ReleaseNotes.md)\n\n • There may be [known issues](https://aka.ms/sentinelsolutionsknownissues) pertaining to this Solution, please refer to them before installing.\n\nGain insight into your organization's network and improve your security operation capabilities with the [Fortinet FortiGate Next-generation Firewall](https://www.fortinet.com/products/next-generation-firewall) Solution for Microsoft Sentinel. It allows you to easily connect your FortiGate logs with Microsoft Sentinel. This enables you to view dashboards, create custom alerts, and improve investigation. \n\n Playbooks are included to help in automated remediation \n\n For questions about [FortiGate](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/fortinet.fortinet_fortigate-vm_v5?tab=Overview), please contact Fortinet at [[email protected]](mailto:[email protected]).\n\n This solution is dependent on the Common Event Format solution containing the CEF via AMA connector to collect the logs. The CEF solution will be installed as part of this solution installation. \n\n**NOTE:** Microsoft recommends installation of CEF via AMA Connector. The existing connectors were deprecated on **Aug 31, 2024**.\n\n**Workbooks:** 1, **Custom Azure Logic Apps Connectors:** 1, **Function Apps:** 1, **Playbooks:** 3\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)",
1010
"subscription": {
1111
"resourceProviders": [
1212
"Microsoft.OperationsManagement/solutions",

‎Solutions/Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel/Package/mainTemplate.json‎

Lines changed: 25 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -173,7 +173,7 @@
173173
"resources": [
174174
{
175175
"type": "Microsoft.Storage/storageAccounts",
176-
"apiVersion": "2023-04-01",
176+
"apiVersion": "2022-09-01",
177177
"name": "[[variables('storageAccountName')]",
178178
"location": "[[parameters('location')]",
179179
"sku": {
@@ -198,7 +198,7 @@
198198
{
199199
"type": "Microsoft.Web/sites",
200200
"apiVersion": "2020-06-01",
201-
"name": "[[variables('FunctionAppName')]",
201+
"name": "[[variables('functionAppName')]",
202202
"location": "[[parameters('location')]",
203203
"kind": "functionapp",
204204
"identity": {
@@ -280,7 +280,7 @@
280280
},
281281
{
282282
"apiVersion": "2019-08-01",
283-
"name": "[[concat(variables('FunctionappName'),'/', variables('functionName'))]",
283+
"name": "[[concat(variables('functionAppName'),'/', variables('functionName'))]",
284284
"type": "Microsoft.Web/sites/functions",
285285
"identity": {
286286
"type": "UserAssigned"
@@ -1991,7 +1991,7 @@
19911991
],
19921992
"metadata": {
19931993
"comments": "This Fortinet custom connector uses Fortinet-Fortigate API to perform different actions on Forinet VM",
1994-
"lastUpdateTime": "2025-02-21T14:40:20.007Z",
1994+
"lastUpdateTime": "2025-02-25T19:09:01.748Z",
19951995
"releaseNotes": {
19961996
"version": "1.0",
19971997
"title": "[variables('blanks')]",
@@ -2070,9 +2070,9 @@
20702070
}
20712071
},
20722072
"variables": {
2073+
"functionAppName": "[[concat(toLower(parameters('FunctionAppName')), uniqueString(resourceGroup().id))]",
20732074
"AzureSentinelConnectionName": "[[concat('azuresentinel-', parameters('PlaybookName'))]",
20742075
"UserIdentifier": "[[parameters('User Identifier Name')]",
2075-
"Functionappname": "[[parameters('FunctionAppName')]",
20762076
"connection-2": "[[concat('/subscriptions/', subscription().subscriptionId, '/providers/Microsoft.Web/locations/', parameters('location'), '/managedApis/azuresentinel')]",
20772077
"_connection-2": "[[variables('connection-2')]",
20782078
"workspace-location-inline": "[concat('[resourceGroup().locatio', 'n]')]",
@@ -2355,7 +2355,7 @@
23552355
"type": "ManagedServiceIdentity"
23562356
},
23572357
"function": {
2358-
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',parameters('FunctionAppName'),'/functions/Fortinet-GetEntityDetails')]"
2358+
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',variables('functionAppName'),'/functions/Fortinet-GetEntityDetails')]"
23592359
}
23602360
},
23612361
"runAfter": {
@@ -2379,7 +2379,7 @@
23792379
"type": "ManagedServiceIdentity"
23802380
},
23812381
"function": {
2382-
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',parameters('FunctionAppName'),'/functions/Fortinet-GetEntityDetails')]"
2382+
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',variables('functionAppName'),'/functions/Fortinet-GetEntityDetails')]"
23832383
}
23842384
},
23852385
"runAfter": {
@@ -5476,7 +5476,10 @@
54765476
"type": "Microsoft.Logic/workflows",
54775477
"location": "[[variables('workspace-location-inline')]",
54785478
"identity": {
5479-
"type": "UserAssigned"
5479+
"type": "UserAssigned",
5480+
"userAssignedIdentities": {
5481+
"[[resourceId('Microsoft.ManagedIdentity/userAssignedIdentities', parameters('User Identifier Name'))]": {}
5482+
}
54805483
},
54815484
"apiVersion": "2016-06-01",
54825485
"tags": {
@@ -5648,6 +5651,7 @@
56485651
}
56495652
},
56505653
"variables": {
5654+
"functionAppName": "[[concat(toLower(parameters('FunctionAppName')), uniqueString(resourceGroup().id))]",
56515655
"AzureSentinelConnectionName": "[[concat('azuresentinel-', parameters('PlaybookName'))]",
56525656
"TeamsConnectionName": "[[concat('teamsconnector-', parameters('PlaybookName'))]",
56535657
"FortinetConnectorConnectionName": "[[concat('FortinetConnector-', parameters('PlaybookName'))]",
@@ -5702,7 +5706,10 @@
57025706
"name": "[[parameters('PlaybookName')]",
57035707
"location": "[[variables('workspace-location-inline')]",
57045708
"identity": {
5705-
"type": "UserAssigned"
5709+
"type": "UserAssigned",
5710+
"userAssignedIdentities": {
5711+
"[[resourceId('Microsoft.ManagedIdentity/userAssignedIdentities', parameters('User Identifier Name'))]": {}
5712+
}
57065713
},
57075714
"dependsOn": [
57085715
"[[resourceId('Microsoft.Web/connections', variables('FortinetConnectorConnectionName'))]",
@@ -5889,7 +5896,7 @@
58895896
"type": "ManagedServiceIdentity"
58905897
},
58915898
"function": {
5892-
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',parameters('FunctionAppName'),'/functions/Fortinet-GetEntityDetails')]"
5899+
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',variables('functionAppName'),'/functions/Fortinet-GetEntityDetails')]"
58935900
},
58945901
"method": "GET",
58955902
"queries": {
@@ -5913,7 +5920,7 @@
59135920
"type": "ManagedServiceIdentity"
59145921
},
59155922
"function": {
5916-
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',parameters('FunctionAppName'),'/functions/Fortinet-GetEntityDetails')]"
5923+
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',variables('functionAppName'),'/functions/Fortinet-GetEntityDetails')]"
59175924
},
59185925
"method": "GET",
59195926
"queries": {
@@ -9731,6 +9738,7 @@
97319738
}
97329739
},
97339740
"variables": {
9741+
"functionAppName": "[[concat(toLower(parameters('FunctionAppName')), uniqueString(resourceGroup().id))]",
97349742
"AzureSentinelConnectionName": "[[concat('azuresentinel-', parameters('PlaybookName'))]",
97359743
"TeamsConnectionName": "[[concat('teamsconnector-', parameters('PlaybookName'))]",
97369744
"FortinetConnectorConnectionName": "[[concat('FortinetConnector-', parameters('PlaybookName'))]",
@@ -9785,7 +9793,10 @@
97859793
"name": "[[parameters('PlaybookName')]",
97869794
"location": "[[variables('workspace-location-inline')]",
97879795
"identity": {
9788-
"type": "UserAssigned"
9796+
"type": "UserAssigned",
9797+
"userAssignedIdentities": {
9798+
"[[resourceId('Microsoft.ManagedIdentity/userAssignedIdentities', parameters('User Identifier Name'))]": {}
9799+
}
97899800
},
97909801
"dependsOn": [
97919802
"[[resourceId('Microsoft.Web/connections', variables('FortinetConnectorConnectionName'))]",
@@ -9988,7 +9999,7 @@
99889999
"type": "ManagedServiceIdentity"
998910000
},
999010001
"function": {
9991-
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',parameters('FunctionAppName'),'/functions/Fortinet-GetEntityDetails')]"
10002+
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',variables('functionAppName'),'/functions/Fortinet-GetEntityDetails')]"
999210003
},
999310004
"queries": {
999410005
"entity": "addrgrp",
@@ -10011,7 +10022,7 @@
1001110022
"type": "ManagedServiceIdentity"
1001210023
},
1001310024
"function": {
10014-
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',parameters('FunctionAppName'),'/functions/Fortinet-GetEntityDetails')]"
10025+
"id": "[[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',variables('functionAppName'),'/functions/Fortinet-GetEntityDetails')]"
1001510026
},
1001610027
"method": "GET",
1001710028
"queries": {

‎Solutions/Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel/Playbooks/FortinetFortigateFunctionApp/azuredeploy.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -111,7 +111,7 @@
111111
{
112112
"type": "Microsoft.Web/sites",
113113
"apiVersion": "2020-06-01",
114-
"name": "[variables('FunctionAppName')]",
114+
"name": "[variables('functionAppName')]",
115115
"location": "[parameters('location')]",
116116
"kind": "functionapp",
117117
"identity": {
@@ -194,7 +194,7 @@
194194
},
195195
{
196196
"apiVersion": "2019-08-01",
197-
"name": "[concat(variables('FunctionappName'),'/', variables('functionName'))]",
197+
"name": "[concat(variables('functionAppName'),'/', variables('functionName'))]",
198198
"type": "Microsoft.Web/sites/functions",
199199
"identity": {
200200
"type": "UserAssigned",

‎Solutions/Fortinet FortiGate Next-Generation Firewall connector for Microsoft Sentinel/Playbooks/Fortinet_IncidentEnrichment/azuredeploy.json‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -69,9 +69,9 @@
6969
}
7070
},
7171
"variables": {
72+
"functionAppName": "[concat(toLower(parameters('FunctionAppName')), uniqueString(resourceGroup().id))]",
7273
"AzureSentinelConnectionName": "[concat('azuresentinel-', parameters('PlaybookName'))]",
73-
"UserIdentifier": "[parameters('User Identifier Name')]",
74-
"Functionappname": "[parameters('FunctionAppName')]"
74+
"UserIdentifier": "[parameters('User Identifier Name')]"
7575
},
7676
"resources": [
7777
{
@@ -355,7 +355,7 @@
355355
"type": "ManagedServiceIdentity"
356356
},
357357
"function": {
358-
"id": "[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',parameters('FunctionAppName'),'/functions/Fortinet-GetEntityDetails')]"
358+
"id": "[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',variables('functionAppName'),'/functions/Fortinet-GetEntityDetails')]"
359359
}
360360
},
361361
"runAfter": {
@@ -379,7 +379,7 @@
379379
"type": "ManagedServiceIdentity"
380380
},
381381
"function": {
382-
"id": "[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',parameters('FunctionAppName'),'/functions/Fortinet-GetEntityDetails')]"
382+
"id": "[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Web/sites/',variables('functionAppName'),'/functions/Fortinet-GetEntityDetails')]"
383383
}
384384
},
385385
"runAfter": {

0 commit comments

Comments
 (0)