NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

By Fortinet · Question Mode

QuestionQ7

VerifiedML, UEBA, and ZTNA

You need FortiSIEM to automatically add three zero trust network access (ZTNA) tags to a device when that device triggers a custom rule. You need FortiSIEM to push these ZTNA tags to multiple FortiClient EMS servers in the organization.

How can you achieve this?

Explanation

FortiSIEM assigns FortiClient EMS tags by using an automation policy that runs the Set tag for device in FortiEMS remediation script. Each remediation action can use a selected FortiEMS credential, which identifies the target EMS server; separate automation policies can therefore push the required tags to different EMS servers.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!