Fortigate Firewalls Integration Using Syslog Forwarder + SSL

Juan Romero

26-May-2025

Fortigate Firewalls Integration Using Syslog Forwarder + SSL

Import the Root CA (.crt) in the Fortigate firewall

The root CA public key is available in your Onehub folder (CERTS): rootCA.yourcompany.local.crt

It is necessary to Import the CA certificate that has signed the syslog SSL/server certificate.
Once it is imported: under the System -> Certificate -> remote CA certificate section, the same one will be used by the Firewall to validate the server certificate during the TLS/SSL handshake.

Create a Syslog forwarder in the Fortigate firewall

Using Fortigate's CLI:

config log syslogd setting
    set status enable
    set server {string}
    set mode reliable
    set port {integer}
    set format rfc5424
    set enc-algorithm high-medium
end

NOTE: The parameters server and port will be provided by the SOCFOrtress Team.