This REST-based method uniquely discovers FortiGate VDOMs, unlike the SNMP-based discovery method which does not support VDOM detection.

Key Features

• REST API Integration: Uses specific Fortinet REST APIs to retrieve detailed firewall and VDOM information.
• Multi-VDOM Support: Enables discovery of FortiGate devices operating in multi-VDOM mode.
• Comprehensive CMDB Integration: Introduces new CI classes extending existing CMDB models for detailed representation of Fortinet firewalls, clusters, interfaces, policies, and VDOMs.
• Data Model Extensions: Captures detailed attributes including hostname, serial number, IP addresses, firmware versions, interfaces, and firewall policies for enriched asset management.
• CI Relationships: Establishes relationships between clusters, devices, interfaces, IP addresses, VDOMs, and policies to reflect accurate network topology and ownership.

Prerequisites and Setup

• Ensure the Discovery and Service Mapping Patterns application is updated to the latest version.
• Create an API Token in Fortinet and verify sufficient API permissions for data retrieval.
• Verify MID Server connectivity to Fortinet APIs.
• Disable SNMP-based discovery to avoid conflicts with REST-based discovery.
• Create an alias for API key credentials and configure serverless discovery schedules as needed.

Practical Benefits for ServiceNow Customers

This discovery pattern enables ServiceNow customers to accurately detect and map Fortinet firewall devices and VDOMs within their IT infrastructure. The enriched CMDB data supports improved visibility into Fortinet security assets, detailed network topology understanding, and better governance of firewall policies and configurations.

By integrating Fortinet firewall details into the CMDB with appropriate relationships, customers can enhance incident, change, and asset management workflows tied to firewall infrastructure.

Data Collected

The discovery process collects key configuration and status information such as:

• Device identification: hostname, serial number, model, firmware, OS version
• Network details: IP addresses, MAC addresses, interface types, VLAN IDs
• Firewall policies: policy IDs, source/destination interfaces and addresses, services managed
• VDOM-specific data: VDOM names, descriptions, indexes, associated IP addresses

CI Class Extensions and Relationships

The solution extends the CMDB with specific Fortinet-related classes (firewall devices, clusters, interfaces, policies, VDOMs) and models important relationships such as:

• Clusters hosting firewall devices
• Devices owning network adapters and IP addresses
• VDOMs containing interfaces and policies
• Interfaces belonging to network topologies (e.g., VLANs)

This structured data model supports comprehensive discovery and mapping of Fortinet firewall environments.