QuestionQ61Verified/Rules and subpatternsCopy linkReport a problemAsk AstroTutorSave questionRefer to the exhibit. What does the Group: VPN Gateway value refer to?AA FortiGate address groupBA FortiSIEM rule folderCA configuration management database (CMDB) device groupDA FortiSIEM watchlistShow AnswerAnswerExplanationIn FortiSIEM, a value labeled Group in an event search filter is a CMDB device group. CMDB groups organize discovered or defined devices, and the IN filter can use that group to match the Source IP against its member devices. CMDB Groups | FortiSIEMLearn moreCMDB Groups | FortiSIEMUnderstanding Search Components | FortiSIEMShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion