NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

By Fortinet · Question Mode

QuestionQ39

VerifiedML, UEBA, and ZTNA

When using user and entity behavior analytics (UEBA) in FortiSIEM, what can you use to dynamically provide FortiGate with a list of suspicious IP addresses for blocking?

Explanation

FortiSIEM watchlists can be populated with IP addresses identified through UEBA detections. FortiGate retrieves the watchlist through a threat-feed integration and uses the resulting IP list in firewall or local-in policies to block access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!