Skip to main content
You connect FortiGate once at the MSP level, with a FortiCloud IAM API user and the FortiGate Cloud region of your FortiGates. Neo signs in to FortiCloud with the API user for each Fortinet service it reaches.

​
Before you start

  • Your FortiGates are in FortiGate Cloud, with FortiGate Cloud management on. Changes to a FortiGate through FortiGate Cloud need a paid FortiGate Cloud subscription; reads work without one.
  • You can sign in to the FortiCloud IAM portal as an administrator.

​
1. Create the API user in FortiCloud

1

Add an API user

Sign in to FortiCloud IAM, open Users, and add an API user. If you manage clients as accounts in a FortiCloud organization, create it at the organization level so it reaches every client account.
2

Give it the portals Neo uses

Under the API user’s portal permissions, give it:A read-only permission lets Neo report but not change.
3

Download the credentials

Download the credentials file. It holds the API ID and the password. Keep it somewhere safe, such as your password manager.

​
2. Add the API user in Neo

1

Open Integrations

In the Neo Dashboard, open Integrations → FortiGate, under Networking.
2

Save the API user

Pick your FortiGate Cloud region, paste the API ID and the password, and click Save settings. Neo signs in and lists your FortiGates before saving, so a wrong password, a missing FortiGate permission or a wrong region is rejected straight away.
FortiCloud locks an API user out for up to 30 minutes after repeated failed sign-ins. When FortiCloud refuses the saved password, your agents wait ten minutes before they sign in again. Each Save settings signs in at once, so check the password against the credentials file before you save again.

​
3. Turn FortiGate on per agent

1

Open the agent's tools

Open the agent in the Neo Dashboard, go to its Tools & Settings tab and click Networking.
2

Pick a preset

Expand the FortiGate block and pick one of its Presets, or set each permission group by hand.See FortiGate API for every permission group.
3

Tell the agent what to do

Add an instruction, for example: “On the first of each month, list for every client the FortiGate, FortiSwitch and FortiAP contracts and FortiGuard services that expire in the next 60 days, update the warranty date on each matching configuration item, and open one renewal ticket per client.” Or: “Every morning, check each client’s FortiGates, switches and access points for status, firmware and configuration backup, and open a ticket in the NOC queue for each failure.”