background image

Appliance Setup

9.

Click

Save

.

10.

Repeat steps 1-9 to add any additional instances to Manager.
Now, follow the instructions in

Register the Instance Itself to Manager

for each instance.

Register the Instance Itself to Manager

To register your instance with Manager, take the following steps.

1.

From your FortiSIEM Supervisor/Instance, navigate to

ADMIN > Setup > FortiSIEM Manager

, and take the

following steps.

a.

In the

FortiSIEM Manager FQDN/IP

field, enter the FortiSIEM Manager Fully Qualified Domain Name

(FQDN) or IP address.

b.

In the

FortiSIEM Instance Name

field, enter the instance name used when adding the instance to Manager.

c.

In the

Account

field, enter the Admin User name used when adding the instance to Manager.

d.

In the

Password

field, enter your password to be associated with the Admin User name.

e.

In the

Confirm Password

field, re-enter your password.

f.

Click

Test

to verify the configuration.

g.

Click

Register

.

A dialog box displaying "Registered successfully" should appear if everything is valid.

FortiSIEM 6.6.2 2000G Hardware Configuration Guide

19

Fortinet Inc.

Summary of Contents for FortiSIEM 2000G

Page 1: ...2000G Hardware Configuration Guide FortiSIEM 6 6 2...

Page 2: ...ps support fortinet com FORTINET TRAINING CERTIFICATION PROGRAM https www fortinet com training certification NSE INSTITUTE https training fortinet com FORTIGUARD CENTER https www fortiguard com END U...

Page 3: ...FortiCare 13 Step 6 Register FortiSIEM License 13 Step 7 Accessing FortiSIEM UI 14 Step 8 Choose an Event Database 14 Cluster Installation 14 Installing the Supervisor 14 Installing Workers 16 Registe...

Page 4: ...Change Log Change Log Date Description 10 11 2021 Initial release of this guide FortiSIEM 6 6 2 2000G Hardware Configuration Guide 4 Fortinet Inc...

Page 5: ...M 2000G License Key File l Step 6 Register the FortiSIEM License l Step 7 Accessing FortiSIEM UI l Step 8 Choose an Event Database Step 1 Rack Mount the FSM 2000G Appliance 1 Follow FortiSIEM 2000G Qu...

Page 6: ...le FortiSIEM commands 4 Use these commands to check the hardware information After running each command ensure that there are no errors in the displayed output Command Description get system status Di...

Page 7: ...r Region and press Next 5 Select your Country and press Next 6 Select the Country and City for your timezone and press Next 7 If installing a Supervisor select 1 Supervisor and press Next If installin...

Page 8: ...nless noted otherwise 8 If you want to enable FIPS then choose 2 Otherwise choose 1 You have the option of enabling FIPS option 3 or disabling FIPS option 4 later Note After Installation a 5th option...

Page 9: ...work by entering the following fields Note the IP Address you will need it in a later step Press Next Option Description IPv4 Address The Manager Supervisor Worker Collector s IPv4 address NetMask The...

Page 10: ...you configure 2 DNS servers for IPv4 and IPv6 the system will only use the first DNS server from IPv4 and the first DNS server from the IPv6 configuration Note In many dual stack networks IPv4 DNS ser...

Page 11: ...ved IPv6 DNS server for example ipv6 dns fortinet com Note When configuring both IPv4 and IPv6 only testing connectivity for the IPv6 DNS is required because the IPV6 takes higher precedence So update...

Page 12: ...acific Asia Shanghai Europe London or Africa Tunis testpinghost The host used to test connectivity 16 It will take some time to complete the FortiSIEM installation If the installation is successful th...

Page 13: ...Upload the license file obtained from Step 5 and select the License Type based on your deployment note this choice can only be made once and is not reversible For FortiSIEM Manager License Type is not...

Page 14: ...ation you will be taken to the Event Database Storage page From the Event Database drop down list choose EventDB on Local Disk EventDB on NFS ClickHouse or Elasticsearch For more details see Configuri...

Page 15: ...hardware you do not need an event database l Setting up an Event database Configure the cluster for NFS ClickHouse or Elasticsearch NFS ClickHouse Elasticsearch FortiSIEM 6 6 2 2000G Hardware Configu...

Page 16: ...or is installed follow the same steps in All in one Installation to install a Worker except that you choose 2 Worker during Step 4 Configure FortiSIEM via GUI substep 7 Registering Workers Once the Wo...

Page 17: ...ensure that the Workers are up healthy and properly added to the system Installing Collectors Once Supervisor and Workers are installed follow the same steps in All in one Install to install a Collec...

Page 18: ...lowing order l First add the instance to Manager l Then register the instance itself to Manager Note that Communication between FortiSIEM Manager and instances is via REST APIs over HTTP S Adding Inst...

Page 19: ...IP field enter the FortiSIEM Manager Fully Qualified Domain Name FQDN or IP address b In the FortiSIEM Instance Name field enter the instance name used when adding the instance to Manager c In the Ac...

Page 20: ...than using IP addresses a DNS name is recommended The reasoning is should the IP addressing change it becomes a matter of updating the DNS rather than modifying the Event Worker IP addresses in FortiS...

Page 21: ...only used then enter the IP of the Supervisor node Multiple IP addresses can be entered on separate lines In this case the Collectors will load balance the upload of events to the listed Event Workers...

Page 22: ...SH to the Collector and run following script to register Collectors opt phoenix bin phProvisionCollector add user password Super IP or Host Organization CollectorName The password should be enclosed i...

Page 23: ...Appliance Setup 8 Go to ADMIN Health Collector Health and check the status FortiSIEM 6 6 2 2000G Hardware Configuration Guide 23 Fortinet Inc...

Page 24: ...IEM application 5 Reboot the system Step 2 Reinstall FortiSIEM Application 1 Login as root with password ProspectHills You will immediately be asked to change your password 2 To configure RAID run exe...

Page 25: ...d Fortinet disclaims all warranties whether express or implied except to the extent Fortinet enters a binding written contract signed by Fortinet s General Counsel with a purchaser that expressly warr...

Reviews: