Connecting On Prem Fortigate Firewall to Azure Sentinel (SIEM) - Lab | Syslog | Data Connector

In this demo, I will walk you through the step-by-step configuration, ensuring seamless integration between your FortiGate Firewall and Azure Sentinel, empowering you with enhanced threat visibility, detection, and response capabilities
For complete Self-paced training materials visit at
nettechcloud.com/courses/micr...
nettechcloud.com/courses/micr...
----------------------------------------------------------------------------------------------------------------------------------------------
COURSE 1 : Microsoft Azure Administrator (AZ104)
Trainer : Manoj Verma , CCIE 43923
_______________________________________________________________________________________
TOPICS:
Section1: Azure Fundamentals
1.1 - Introduction to Cloud Computing
1.2 - Cloud Computing with Azure and Azure Services
1.3 - Get started with Azure accounts
1.4 - Start Your First Azure Virtual Machine
1.5 - Troubleshooting RDP Connections to VM
Section2: Manage identity and access
2.1 - Azure Active Directory
2.2 - Manage Azure Active Directory Identities
2.3 - Manage secure access by using Azure AD
2.4 - Manage Role Based Access Control - RBAC
2.5 - Azure AD Connect
2.6 - Azure Management Group
2.7 - Azure Lock
Section3: Implement and manage storage
3.1 - Secure Storage
3.2 - Configure Azure Files and Blob storage
3.3 - Manage storage
Section4: Deploy and manage Azure Compute resources
4.1 - Configure Virtual Machines
4.2 - Create and configure containers
4.3 - Azure App service and Plan
Section5: Configure and manage virtual networking
5.1 - Implement and manage virtual networking
5.2 - Network Security Group (NSG)
5.3 - Azure Firewall
5.4 - Azure Bastion
5.5 - Azure Load Balancer
5.6 - Azure Application Gateway
5.7 - Azure DNS
5.8 - Service and Private endpoint
Section6: Monitor and backup Azure Resources
5.1 - Azure Backup service
5.2 - Azure Site Recovery
nettechcloud.com/courses/micr...
----------------------------------------------------------------------------------------------------------------------------------------------
COURSE 2 : Microsoft Azure Security (AZ500)
Trainer : Manoj Verma , CCIE 43923
_______________________________________________________________________________________
TOPICS:
Section1: Azure Fundamentals
1.1 - Introduction to Cloud Computing
1.2 - Cloud Computing with Azure and Azure Services
1.3 - Get started with Azure accounts
1.4 - Start Your First Azure Virtual Machine
1.5 - Troubleshooting RDP Connections to VM
Section2: Manage identity and access
2.1 - Azure Active Directory
2.2 - Manage Azure Active Directory Identities
2.3 - Manage secure access by using Azure AD
2.4 - Manage Role Based Access Control - RBAC
Section3: Implement Platform Protection
3.1 - Implement and manage virtual networking
3.2 - Network Security Group (NSG)
3.3 - Azure Firewall
3.4 - Azure Application Gateway
3.5 - Azure Traffic Manager
3.6 - Azure Front door
3.7 - Implement advanced network security ( WAF )
3.8 - Azure Bastion
3.9 - just-in-time access (JIT)
3.10 - Microsoft Antimalware
3.11 - Service and Private end Point
3.12 - Azure DDoS Protection
Section4: Manage Security operations
4.1 - Microsoft Sentinel (Theory)
4.2 - Microsoft Sentinel (Lab)
4.3 - Configure and manage threat protection
4.4 - Azure Management Group and Policy
4.5 - Azure Monitor
Section5: Secure Data and Applications
5.1 - Manage Storage
5.2 - Secure Storage
#SIEM #azurecloud #sentinel

[@sunilshripad9501]

This is what i was looking for ...Awesome!!! Information and explanation is precise and covered everything , Please make more videos on sentinel specially creating custom connectors and parsing .Thank you very much

[@NettechCloud]

Thanks, will do!

[@ramansharma2099]

Awesome !! Much Appreciated . Big Thanks

[@NettechCloud]

You're welcome!

[@dhanunjayaannam319]

Whaaaaa video, very much useful, thank you so much

[@NettechCloud]

Glad it was helpful!

[@fersalalberca3577]

Hello, Did you use Data Collection Rule to get logs from the syslog server?

[@SidraRaza-cc4yc]

How to send FW logs by specifying severity levels?

[@nasyaramadhana6788]

Tq sir

[@NettechCloud]

Welcome

[@sdeepak30]

Hi, is it same for ama agent aswell?

[@rdiesel84]

Is the process same with AMA?

[@gabbware]

what distro linux did you use?

[@NettechCloud]

I used Azure Cloud Linux VM

[@gabbware]

@@NettechCloud I've try on-premise linux machine, but dit not work. I'l try Azure Linux VM. Thanks.

[@jase4772]

@@NettechCloud but is that Red Hat, Ubuntu etc...

[@NettechCloud]

Ubuntu Server 20.04 LTS -x64 Gen2

[@NettechCloud]

Not necessarily you should have Syslog configured in cloud. Even you can have on-prem Syslog server. Any Linux server can be configured as syslog server but I used ubuntu Server.