Overview

Fortinet’s FortiGate Cloud manages your clients’ FortiGates from the cloud, and FortiCloud holds their registrations and support contracts. Connect FortiGate to Neo once, at the MSP level, with one FortiCloud API user. The API user reaches every client account in your FortiCloud organization, so one connection covers all your clients.

​

What Neo can do with FortiGate

• Report each client’s FortiGates, FortiSwitches and FortiAPs with their status, firmware and configuration backup, and open a ticket for each failure
• Report support contracts, FortiGuard services and licences that expire soon, and keep your PSA’s configuration items in step with them
• Read event, traffic and security logs, from FortiAnalyzer too, for an alert ticket
• Return firewall policies, VPN and interface status, and change them
• Upgrade firmware from FortiGuard and restart a FortiGate, switch or access point

Secrets, administrator accounts, FortiTokens, CLI scripts and automation stitches, shutting a FortiGate down and a few other changes always ask a technician; every other change follows the approval setting you choose for the agent. See FortiGate API for the permission groups and access profiles. Neo reaches a FortiGate through FortiGate Cloud. A FortiGate that is not in FortiGate Cloud is out of reach for its own checks; its registrations and contracts in FortiCloud still answer.

​

Your FortiCloud accounts are mapped to clients

Neo matches each client account of your FortiCloud organization to a client in your PSA, by the account’s company name, and keeps the mapping on the FortiGate card’s Organization Mapping tab, refreshed on each PSA metadata sync. With the mapping, an agent works in the right client’s account. Matching starts with the name: exact, then after stripping a legal-form suffix (Ltd, Inc, LLC). Last comes an AI match for the long tail. A name match, or one you confirm, is handed straight to your agents. An AI match is not handed to your agents automatically. It shows on the Organization Mapping tab, where you can confirm or correct it. Anything Neo could not match stays unmapped and visible on the same tab, where you can set the right client by hand. A mapping you set by hand survives every later sync. If you keep every client’s FortiGates in your own FortiCloud account, there is nothing per client to map. Agents then work in your account and find the client’s FortiGates by name.

​

Next steps