NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

In FortiSIEM automation policies, the 'Run Remediation/Script' action executes a remediation script (e.g. the built-in FortiOS API-based 'Block Source IP' script) that calls the FortiGate REST API to add a banned/quarantined IP, and the 'Invoke an Integration Policy' action calls a configured external-system integration policy, which can likewise perform an API-based remediation action such as blocking a source IP on a FortiGate. The other listed actions only notify users, trigger a SOAR playbook, or open a ticket — none of them themselves execute the FortiGate blocking API call.