FireSight docsSupported and planned platforms
FireSight is built for Fortinet first and is designed to become multivendor. Everything vendor-specific sits behind one connection interface, so approvals, analysis, placement, IP addressing, device health and auditing work the same way for every platform.
Status
| Vendor | Product | Role | Status |
|---|---|---|---|
| Fortinet | FortiManager | Manager (many firewalls) | Supported |
| Fortinet | FortiGate (standalone) | Firewall, managed directly | Supported |
| Fortinet | Offline snapshot (FortiGate configuration files, a FortiManager backup or export) | Read-only snapshot | Supported |
| Palo Alto Networks | Panorama | Manager | Planned, not available |
| Palo Alto Networks | PAN-OS firewall (standalone) | Firewall | Planned, not available |
| Check Point | Security Management / Smart-1 | Manager | Planned, not available |
| Cisco | Secure Firewall Management Center (FTD) | Manager | Planned, not available |
| Cisco | ASA (standalone) | Firewall | Planned, not available |
| Linux | nftables / iptables host | Firewall | Planned, not available |
Planned platforms can't be connected yet. Settings, Connections shows the list of vendors at the top; planned ones are marked "coming".
Versions assumed
| Platform | Version |
|---|---|
| FortiManager | 7.0 or later, with API-token authentication. Policy sets (policy packages) in folders are supported. |
| FortiGate (standalone) | FortiOS 7.0 or later, with a REST API administrator. |
FortiManager backups (.dat) |
Read on a best-effort basis; backups from FortiManager 7.4 can't be read yet. Use the export script instead. |
Not supported yet
- FortiManager workflow mode (approval sessions inside FortiManager). Management domains (ADOMs) in workflow mode are refused at deployment with a clear message.
- Placement uses routing as it was synced. Dynamic routing (BGP, OSPF) is used as far as it appears in the routing table; SD-WAN performance SLAs, ECMP load balancing and policy routes that match on ToS aren't evaluated.
- SAML encrypted assertions and signed authentication requests.
Licensing and other vendors
The license counts firewalls, whatever the vendor. Managers (FortiManager today; Panorama, Check Point management or FMC later) are never counted. See Licensing.