FortiGate FAQs

Question 1

How does this tool integrate with AI coding agents?

Accepted Answer

The tool exposes FortiGate data through the Model Context Protocol, enabling direct integration with AI coding agents like Pi and Claude Code. These agents can leverage the exposed tools to gather real-time or historical FortiGate information, aiding in security analysis, troubleshooting, and automated network management workflows.

Question 2

What is the FortiGate (MCP) integration tool?

Accepted Answer

This tool is an MCP (Model Context Protocol) server designed to provide read-only access to your FortiGate firewalls via their REST API. It allows AI agents and other MCP-compatible clients to query various firewall data, including policies, routing, VPN, UTM events, and local syslog history.

Question 3

What kind of FortiGate data can I access?

Accepted Answer

You can access 22 distinct read-only tools covering system status, interfaces, firewall policies, addresses, routing tables, VPN tunnels, DHCP leases, HA status, and numerous UTM security events like blocked traffic, malicious URLs, SSL, application control, viruses, DNS, and geoblocking statistics.

Question 4

What FortiOS versions are supported?

Accepted Answer

The tool is specifically designed to work with FortiGate firewalls running FortiOS version 7.x. A read-only FortiGate REST API token is required for authentication and data access.

Question 5

Does it include syslog capabilities?

Accepted Answer

Yes, it features a lightweight syslog receiver that captures FortiGate logs over UDP. It filters out noisy traffic, writes security-relevant events to compressed rotating log files, and makes them queryable through MCP, providing historical log analysis without requiring a dedicated SIEM.

FortiGate

FortiGate

Características Principales

Casos de Uso

Características Principales

Casos de Uso