> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrmex.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# FortiSwitch

> Connect a Fortinet FortiSwitch to Myrmex over SSH — create the access account and add the integration.

import { Note, Steps, Step, CardGroup, Card, Tip } from '@mintlify/components';

Connect your **Fortinet FortiSwitch** (FortiSwitchOS) so Myrmex can read its configuration in real time, audit its hardening, document your VLANs and FortiLink setup, and — with approval — apply changes. Myrmex reaches the switch over **SSH** through a [Collector](/documentation/agent-endpoint-security/collector-mode) on your network.

## What Myrmex Can Do

<CardGroup cols={2}>
  <Card title="Read & troubleshoot" icon="magnifying-glass">
    Inspect interfaces, VLANs, port status, PoE, trunks, and FortiLink state — read-only diagnostics, on demand.
  </Card>

  <Card title="Hardening audit" icon="shield-halved">
    Run a [Security Posture](/documentation/security-posture/overview) audit against the switch configuration.
  </Card>

  <Card title="Document the network" icon="sitemap">
    Map VLANs, trunks, and port assignments so your topology stays documented.
  </Card>

  <Card title="Config management" icon="floppy-disk">
    Back up, diff, and — on approval — apply configuration changes.
  </Card>
</CardGroup>

## Before You Start

* A **Collector** deployed on a network that can reach the switch's management IP over SSH. See [Deploying the agent](/documentation/agent-endpoint-security/installation).
* **SSH enabled** on the FortiSwitch management interface. A FortiSwitch in FortiLink mode is managed by a FortiGate — connect it here in standalone/management mode with direct SSH access.
* An **administrator account** Myrmex can use to log in (a read-only profile is enough for analysis; a read-write profile is required to apply changes).

## Step 1 — Create the Access Account on FortiSwitch

<Steps>
  <Step title="Enable SSH on the management interface">
    Under the management interface's administrative access settings, enable **SSH**.
  </Step>

  <Step title="Create an administrator">
    Add an administrator with a strong password. Scope its access profile to what Myrmex should do — read-only for analysis, or read-write to allow changes. The default admin username is `admin`.
  </Step>

  <Step title="Note the credentials">
    Record the **username** and **password** — you'll enter them in Myrmex.
  </Step>
</Steps>

<Tip>
  Prefer least privilege: start with a read-only profile, and grant read-write only once you want the agents to apply changes for you.
</Tip>

## Step 2 — Add the Integration in Myrmex

From the **Directory**, choose **Add Integration → FortiSwitch**, then fill in:

| Field             | Description                                                                                           |
| ----------------- | ----------------------------------------------------------------------------------------------------- |
| **Name**          | A unique name for this switch.                                                                        |
| **Description**   | Optional note to identify the device.                                                                 |
| **IP / Hostname** | The FortiSwitch management IP or hostname the Collector can reach.                                    |
| **SSH Port**      | The SSH port (default `22`).                                                                          |
| **Username**      | The administrator username (default `admin`).                                                         |
| **Password**      | That account's password.                                                                              |
| **Model**         | Select your FortiSwitch model series.                                                                 |
| **Version**       | Select the FortiSwitchOS version.                                                                     |
| **Collector**     | The [Collector](/documentation/agent-endpoint-security/collector-mode) that opens the SSH connection. |

## Connect

Click **Connect** to validate the SSH connection and finish. The switch then appears under **Environment → Integrations**, and you can start asking the AI about it in the Workspace.
