Fortinet integration
Centralize FortiGate security controls and network configuration into unified service workflows.
What it connects
- Firewall policies, addresses, and security rules from FortiGate.
- Network interfaces, zones, and VPN tunnel configurations.
- Administrative user accounts and access permissions.
- System status, HA cluster state, and appliance health.
What it automates
- Create and update firewall rules in response to security incidents or policy changes.
- Manage address objects and blocklists for threat containment.
- Enable or disable firewall policies without manual console access.
- Ban malicious IPs at runtime for immediate incident response.
In practice
- A network intrusion is detected; STLabs automatically creates a security ticket, queries FortiGate for affected policies, and blocks the attacker's IP range across firewall zones.
- STLabs enforces change-approval workflows for any firewall policy update, capturing the request, routing it through security review, and applying the change once approved.
- The security team audits firewall policies monthly through STLabs; it flags overly permissive rules, groups related addresses into blocklists, and tracks compliance status over time.
- A link failure occurs in the SD-WAN network; STLabs detects the FortiGate HA cluster failover, opens an infrastructure ticket with diagnostics, and documents the event for disaster recovery review.
