Fortinet
Collect a FortiGate
Prepare a FortiGate REST API token or SSH account and check backup permissions.
On this page
Create a REST API credential
Create the API administrator
Open System > Administrators > Create New > REST API Admin.
Assign the profile
Assign permissions for the required reads, including backup access where needed.
Restrict the source
Set Trusted Hosts to the collector source IP or approved subnet.
Save the token
Save the generated token securely; it is displayed once.
Choose API or SSH
| Method | Credential | What to check |
|---|---|---|
| REST API | FortiGate API token or supported account session | API access, source restrictions and configuration-backup permission. |
| SSH | Authorized account and password | SSH reachability and permission to run show full-configuration. |
Run the collector
Choose the FortiGate target or supported generic firewall target, enter its management address and API/SSH credentials, then add the workspace token and collect.
Encrypted backups and VDOMs
Encrypted REST backups cannot be analyzed as plain configuration. A supported app may switch to SSH using account credentials; an API token is not an SSH password. Multi-VDOM backups require VDOM selection when prompted.