Skip to content

movinalot/shift-left

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

28 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Shift Left with Fortinet

FortiDevSec and FortiDAST

FortiGate Automation Stitch with Azure Runbook

  1. Run terraform in the terraform/azure directory
  • Deploys a single FortiGate and a 2 Linux VMs.

    • Linux VM vm-linux-1 is tagged ComputeType=unknown
    • Linux VM vm-linux-2 is tagged ComputeType=WebServer
  • Deploys an Azure Automation Account and Runbook to update the route table rt-protected

  1. Run terraform in the terraform/fortios directory
  • Creates FortiGate Dynamic Addresses

    • AppServers - ComputeType=AppServers
    • DbServers - ComputeType=DbServers
    • WebServers - ComputeType=WebServers
  • Creates an Azure SDN Connector with Reader access to the Resource Group where the FortiGate is deployed

  • Creates an Automation Stitch that is triggered on the VMs with tag ComputeType=WebServer

The Azure SDN Connector retrieved values may trigger the Automation Stitch to send a webhook to Azure Automation to execute the Runbook and the route rt-protected with a host route.

  1. Change the value of the ComputeType tag on Linux VM vm-linux-1 to AppServer, WebServer, or DbServer. In 2-3 minutes a host route will be added to the route table rt-protected, ensuring that all traffic to the VM will traverse the FortiGate.

About

Fortinet Shift Left Security

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published