FortiSIEM Setting Device Location Information

Setting Device Location Information

In the Admin > General Settings > Discovery screen, you can set device locations based on IP range and organization. You can do this manually for each organization or IP range, or upload a CSV file that contains location information. This information can then be applied to devices already in the CMDB, or during the discovery process, to set their location.

Manually Creating Location Information

Uploading Location Information from a CSV File

Prerequisite

Procedure

Manually Creating Location Information

  1. Log into your Supervisor node.
  2. Go to Admin > General Settings > Discovery.
  3. Under Location, click Add.
  4. For Multi-Tenant deployments, enter the Organization you want to associate with the IP range and devices.
  5. Enter the IP/IP Range you want to associate with the location.

This can be in either CIDR notation, such as 192.168.64.0/24, or range notation, such as 192.168.64.0-192.168.64.255.

  1. Enter the Display Name you want to use for this location.

For example, San Jose Office, Northern California Campus, etc.

  1. Enter any additional location information that is relevant for your location.
  2. Click OK.
  3. In the Location Definition dialog, select Update Manual Devices if you want to update devices that have had their locations set manually in the CMDB.
  4. Click OK.

The location information will appear in the Location pane.

  1. Select a location in the Location pane, and then click Apply to associate all devices in the CMDB with that IP/IP range to that organization and location.

A dialog will indicate how many devices have been updated.

  1. Click OK.
  2. Go to CMDB > Devices and check that your device locations have been updated.

Uploading Location Information from a CSV File

Prerequisite

Before you can upload it, you must first create a CSV file with this format.

Comma-separated IP address, Range, or Subnet Location Display

Name

Update Manual Devices

(False/True)

Geographic Information

(“region:;country:;state:;city:;building:;floor:;latitude:;longitude:;”)

Example

“10.1.1.1/24,20.1.1.1-20.1.1.10” San Jose

Datacenter

USA

true  
“30.1.1.10” Fremont

Datacenter

USA

true “region:North America;country:United

States;state:California;city:Fremont;building:10;floor:4;latitude:3

Procedure

  1. Log into your Supervisor node.
  2. Go to Admin > General Settings > Discovery.
  3. Under Location, click Import.
  4. Browse to your CSV file and select it.
  5. Click Upload.

 

This entry was posted in Administration Guides, FortiSIEM on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.