You created a playbook on FortiAnalyzer that uses a FortiOS connector. When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation stitch are…

The correct answer is D. Incoming webhook. FortiOS connector will be listed as soon as the first FortiGate is added to FortiAnalyzer. However, in order to see the actions related to that FortiOS connector, you must enable an automation rule using the Incoming Webhook Call trigger on the FortiGate side.

SOC Features (Playbooks, Incident Response)

Question

You created a playbook on FortiAnalyzer that uses a FortiOS connector. When configuring the FortiGate side, which type of trigger must be used so that the actions in an automation stitch are available in the FortiOS connector?

Options

AFortiAnalyzer Event Handler
BFabric Connector event
CFortiOS Event Log
DIncoming webhook

How the community answered

(46 responses)

A
2% (1)
B
13% (6)
C
7% (3)
D
78% (36)

Explanation

FortiOS connector will be listed as soon as the first FortiGate is added to FortiAnalyzer. However, in order to see the actions related to that FortiOS connector, you must enable an automation rule using the Incoming Webhook Call trigger on the FortiGate side.

Topics

#playbooks#FortiOS connector#automation stitch#incoming webhook

Community Discussion

No community discussion yet for this question.

Full FCP_FAZ_AN-7.4 Practice