> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# FortiGate

> Connect a Fortinet FortiGate firewall to Myrmex over SSH — create the access account and add the integration.

import { Frame, Note, Steps, Step, CardGroup, Card, Tip } from '@mintlify/components';

Connect your **Fortinet FortiGate** (FortiOS 7.x) so Myrmex can read its configuration, audit its hardening, help you clean up policies, and — with approval — apply changes. Myrmex reaches the device over **SSH** through a [Collector](/documentation/agent-endpoint-security/collector-mode) on your network.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Read and diagnose" icon="magnifying-glass">
    Inspect system status, interfaces, routing, sessions, policies, VPNs, and HA — read-only diagnostics.
  </Card>

  <Card title="Hardening audit" icon="shield-halved">
    Run a [Security Posture](/documentation/security-posture/overview) audit across roughly 130 FortiGate controls.
  </Card>

  <Card title="Policy hygiene" icon="broom">
    Find shadowed, unused, or zero-hit firewall policies and propose cleanups.
  </Card>

  <Card title="Configuration management" icon="floppy-disk">
    Back up, restore, and diff the device configuration; apply rule and VPN changes with approval.
  </Card>
</CardGroup>

## Before You Start

* A **Collector** deployed on a network that can reach the FortiGate management IP over SSH. See [Deploying the agent](/documentation/agent-endpoint-security/installation).
* **SSH enabled** on the FortiGate management interface.
* An **administrator account** Myrmex can use to log in (a read-only profile is enough for analysis; a read-write profile is required to apply changes).

## Step 1 — Create the Access Account on the FortiGate

<Steps>
  <Step title="Enable SSH on the management interface">
    Under **Network → Interfaces**, edit the management interface and enable **SSH** under Administrative Access.
  </Step>

  <Step title="Create an admin profile (optional, recommended)">
    Under **System → Admin Profiles**, create a profile scoped to what Myrmex should do — read-only for analysis, or read-write to allow changes.
  </Step>

  <Step title="Create the administrator">
    Under **System → Administrators**, add an administrator with a strong password and assign the profile above. Note the **username** and **password** — you'll enter them in Myrmex.
  </Step>
</Steps>

<Tip>
  Prefer least privilege: start with a read-only account and only grant read-write when you want the agents to apply changes for you.
</Tip>

## Step 2 — Add the Integration in Myrmex

In the **Directory**, choose **Add Integration → FortiGate** and fill in:

| Field           | Description                                                                                                             |
| --------------- | ----------------------------------------------------------------------------------------------------------------------- |
| **Name**        | A unique name for this FortiGate instance.                                                                              |
| **Description** | Optional note to identify the device.                                                                                   |
| **Collector**   | The [Collector](/documentation/agent-endpoint-security/collector-mode) that will open the SSH connection to the device. |
| **IP**          | The FortiGate management IP or hostname the Collector can reach.                                                        |
| **SSH Port**    | The SSH port (default `22`).                                                                                            |
| **Username**    | The administrator username created in Step 1.                                                                           |
| **Password**    | The password for that account.                                                                                          |

## Connect

Click **Connect** to validate the SSH connection and finish. The FortiGate then appears under **Environment → Integrations**, and you can start asking the AI about it in the Workspace.

## Configuration Backup and Change Tracking

Myrmex keeps a **daily backup** of the FortiGate configuration and can **diff those backups over a period**, so you can see exactly what changed on the device and when. Ask for it in the Workspace — for example, *"show me what changed on this FortiGate in the last 7 days."*

<Note>
  Myrmex does not store logs. It reads the device in real time and collects only
  the data you ask for; the daily configuration backups are the exception that
  makes point-in-time comparisons possible.
</Note>