QuestionQ48

VerifiedRules and subpatterns

Which two ways are rule tags used in FortiSIEM?

Choose two
Explanation

Rule tags can map correlation rules or incidents to Automation Services playbooks by matching rule tags with playbook tags, pre-filtering the available playbooks. When a triggered incident involves a FortiClient endpoint managed by FortiClient EMS, a rule tag can also be associated with that endpoint for ZTNA enforcement.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!