--- title: FortiGate Fortinet EDL description: Fortinet is an American multinational corporation headquartered in Sunnyvale, California. The company develops and sells cybersecurity solutions, such as physical firewalls, antivirus software, intrusion prevention systems, and endpoint security components. --- [Skip to content](https://content.sirp.io/knowledge-base/fortigate-fortinet-edl-help-center-sirp#main-content) English Show submenu for translations [Customer portal](https://content.sirp.io/customer-portal?hsLang=en) [![SIRP-Logo-4c-KO](https://content.sirp.io/hs-fs/hubfs/SIRP-Logo-4c-KO.png?width=200&height=90&name=SIRP-Logo-4c-KO.png)](https://sirp.io/) Open main navigation Close main navigation - English Show submenu for translations - [Customer portal](https://content.sirp.io/customer-portal) - [Contact us](https://content.sirp.io/customer-portal/new) [Contact us](https://content.sirp.io/customer-portal/new?hsLang=en) What would you like to automate today? - There are no suggestions because the search field is empty. 1. [SIRP Help Center](https://content.sirp.io/knowledge-base?hsLang=en) 2. [Integration Guide](https://content.sirp.io/knowledge-base/integration-guide?hsLang=en) # FortiGate Fortinet EDL **About FortiGate EDL** Fortinet is an American multinational corporation headquartered in Sunnyvale, California. The company develops and sells cybersecurity solutions, such as physical firewalls, antivirus software, intrusion prevention systems, and endpoint security components. External Block List (Threat Feed) for web filtering and DNS. You can also use External Block List (Threat Feed) in firewall policies. ### **Supported Action** | **S.no** | **Action** | **Description** | | --- | --- | --- | | 1 | Block IP | Block IP on FortiGate | | 2 | Unblock IP | Unblock IP on FortiGate | | 3 | Block Domain | Block domain on FortiGate | | 4 | Unblock Domain | Unblock the domain on FortiGate | | 5 | Block URL | Block URL on FortiGate | | 6 | Unblock URL | Unblock URL on FortiGate | | 7 | Block Hash | Block Hash on FortiGate | | 8 | Unblock Hash | Unblock Hash on FortiGate | **Enable FortiGate EDL App in SIRP** 1. First, log in to SIRP, then go to **Apps** from the left navigation bar. 2. Locate the app named **FortiGate EDL**. 3. **Enable** the FortiGate app by clicking on the toggle button under the Status. [![](https://downloads.intercomcdn.com/i/o/622130762/1643f05f7a469bc200f12867/image.png?expires=1752237000&signature=1ad3903e9eca76d0d1ba525e3209f04bd40758aec879bce3935d00a2146c5dee&req=ciIlF8p%2BmoddFb4f3HP0gHmTHEvBkHs3XGMgIIiZGeQJciBCWCpwo6sk190R%0ANVU%3D%0A)](https://downloads.intercomcdn.com/i/o/622130762/1643f05f7a469bc200f12867/image.png?expires=1752237000&signature=1ad3903e9eca76d0d1ba525e3209f04bd40758aec879bce3935d00a2146c5dee&req=ciIlF8p%2BmoddFb4f3HP0gHmTHEvBkHs3XGMgIIiZGeQJciBCWCpwo6sk190R%0ANVU%3D%0A) 4. Once enabled, click on the configuration button to add the following configuration: 1. Configuration Name \ 2. EDL-Name \ [![](https://downloads.intercomcdn.com/i/o/622130892/a07e1db0ec8a2f0a2028430e/image.png?expires=1752237000&signature=2d1bce7271e406c8b724bce40712ba846370ee98503769b46438318eab83c427&req=ciIlF8p%2BlYhdFb4f3HP0gKYYx42Ko%2BWyyrd5Dq231WGnywkSw0PnkjWtcTdH%0APg8%3D%0A)](https://downloads.intercomcdn.com/i/o/622130892/a07e1db0ec8a2f0a2028430e/image.png?expires=1752237000&signature=2d1bce7271e406c8b724bce40712ba846370ee98503769b46438318eab83c427&req=ciIlF8p%2BlYhdFb4f3HP0gKYYx42Ko%2BWyyrd5Dq231WGnywkSw0PnkjWtcTdH%0APg8%3D%0A) 5. Execute the following supported actions one by one on any particular container (incident or alert) or from Automation Playground: Block IP Block URL Block Domain Block Hash 6. As each action gets executed, you will get unique URLs of the EDL files. For example: [https://](https://192.168.1.119/2/Fortigate/fortigate-edl/ip_list.txt)[\](https://192.168.1.119/2/Fortigate/fortigate-edl/sha256_list.txt)[/2/Fortigate/fortigate-edl/ip\_list.txt](https://192.168.1.119/2/Fortigate/fortigate-edl/ip_list.txt) [https://](https://192.168.1.119/2/Fortigate/fortigate-edl/domain_list.txt)[\](https://192.168.1.119/2/Fortigate/fortigate-edl/sha256_list.txt)[/2/Fortigate/fortigate-edl/domain\_list.txt](https://192.168.1.119/2/Fortigate/fortigate-edl/domain_list.txt) [https://](https://192.168.1.119/2/Fortigate/fortigate-edl/url_list.txt)[\](https://192.168.1.119/2/Fortigate/fortigate-edl/sha256_list.txt)[/2/Fortigate/fortigate-edl/url\_list.txt](https://192.168.1.119/2/Fortigate/fortigate-edl/url_list.txt) [https://\/2/Fortigate/fortigate-edl/sha256\_list.txt](https://192.168.1.119/2/Fortigate/fortigate-edl/sha256_list.txt) Use these URLs to configure the EDL in the Sophos Firewall by following these steps: - Login to the FortiGate web console - Navigate to Security Fabrics \> External Connectors - To create a new external connector click **Create new** - In **Threat Feeds** click on **IP address**: - Set the name of the connector - Set **Status** to **Enabled** - Set **Update method** to **External feed** - Paste the URL of IP-EDL in the field, **URI of an external resource,** and click **OK**. [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-57-40-2065-AM.png)](https://downloads.intercomcdn.com/i/o/622131513/28f9a76acaa5306d49bfb34a/image.png?expires=1752237000&signature=9f3b0d1b4764ea5c9feae9eac835fe92e053dd4a3acea0cafb9605784cf91012&req=ciIlF8p%2FmIBcFb4f3HP0gMXm804pPE9fYtBeTQau%2BoOB5AX%2FlcahUzgA7Hwo%0AYycpTraHr%2B3SJnkAqA%3D%3D%0A) - Create a new connector in the same way for Domain EDL. - To create a new external connector, click **Create new** - In **Threat Feeds,** click on **Domain name**: - Set the name of the connector - Set **Status** to **Enabled** - Set **Update method** to **External feed** - Paste the URL of Domain-EDL in the field, **URI of an external resource,** and click **OK**. [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-57-42-7979-AM.png)](https://downloads.intercomcdn.com/i/o/622131640/78ef64d3a794e4ce72c350b4/image.png?expires=1752237000&signature=a41b7a604f009f8bf3fca339bc1b4cd948b750ba5c66d1f544c92f8a74aa462c&req=ciIlF8p%2Fm4VfFb4f3HP0gFyr%2F1ZI7HBUycqD01C4BVhq0rTtx1u4KtxNTNdj%0AOF%2Bo8E75ZyeR8gJj9Q%3D%3D%0A) - Create a new connector in the same way for Domain EDL. - To create a new external connector click **Create new** - In **Threat Feeds** click on **Malware Hash**: - Set the name of the connector - Set **Status** to **Enabled** - Set Update method to **External feed** - Paste the URL of Domain-EDL in the field, **URI of an external resource,** and click **OK**. [![](https://downloads.intercomcdn.com/i/o/622131795/d75ec8a24da44e55dbba3555/image.png?expires=1752237000&signature=0b43d48ef684ab6510bebb7899a1df3a06e945cfab7d7307bd155fb05ae314a5&req=ciIlF8p%2FmohaFb4f3HP0gBgJnRSYDwVYPpaey8tHouPYnAaqEd7VrknUqnCD%0AOHI%3D%0A)](https://downloads.intercomcdn.com/i/o/622131795/d75ec8a24da44e55dbba3555/image.png?expires=1752237000&signature=0b43d48ef684ab6510bebb7899a1df3a06e945cfab7d7307bd155fb05ae314a5&req=ciIlF8p%2FmohaFb4f3HP0gBgJnRSYDwVYPpaey8tHouPYnAaqEd7VrknUqnCD%0AOHI%3D%0A) - Create a new connector in the same way for URL EDL. - To create a new external connector click **Create new** - In **Threat Feeds** click on **FortiGuard Category**: - Set the name of the connector - Set **Status** to **Enabled** - Set Update method to **External feed** - Paste the URL of Domain-EDL in the field, **URI of an external resource,** and click **OK**. [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-57-52-3455-AM.png)](https://downloads.intercomcdn.com/i/o/622131899/ae0f4c771e3c1cc56b9adb47/image.png?expires=1752237000&signature=d61726406c5662d82575755c2b2a5be9cdd9e6bf41f270b4369e994a71ec88ac&req=ciIlF8p%2FlYhWFb4f3HP0gJV0A1iL3HBBBN0WYXtk4U2vgESHhBf739FZ7bIT%0A8ZaB5tnvnwHg08ZlTA%3D%3D%0A) After the last step, you should be able to execute the FortiGate actions on-demand or through Playbooks to block and unblock IP, Domains, Hash &URLs. - [SIRP Community](https://content.sirp.io/knowledge-base/sirp-community?hsLang=en) - [Playbook Guide](https://content.sirp.io/knowledge-base/playbook-guide?hsLang=en) - [User Guide](https://content.sirp.io/knowledge-base/user-guide?hsLang=en#main-content) - [IM Guide](https://content.sirp.io/knowledge-base/user-guide?hsLang=en#im-guide) - [Admin Guide](https://content.sirp.io/knowledge-base/admin-guide?hsLang=en) - [Integration Guide](https://content.sirp.io/knowledge-base/integration-guide?hsLang=en) - [Release Notes](https://content.sirp.io/knowledge-base/release-notes?hsLang=en) - [Add on Apps](https://content.sirp.io/knowledge-base/add-on-apps?hsLang=en) - [Architecture](https://content.sirp.io/knowledge-base/architecture?hsLang=en) - [Use Cases](https://content.sirp.io/knowledge-base/use-cases?hsLang=en) [![SIRP-Logo-4c-KO](https://content.sirp.io/hs-fs/hubfs/SIRP-Logo-4c-KO.png?width=200&height=90&name=SIRP-Logo-4c-KO.png "SIRP-Logo-4c-KO")](https://sirp.io) ### Global Headquarter ##### United States 7735 Old Georgetown Rd, Suite 510 Bethesda, MD 20814 [+1 888 701 9252](tel:+18887019252) [mailto:email@email.com](mailto:email@email.com) Copyright © 2025, SIRP Labs Inc