--- title: FortiGate NGFW Integration  description: FortiGate NGFWs enable security-driven networking and consolidate industry-leading security capabilities such as intrusion prevention system (IPS), web filtering, secure sockets layer (SSL) inspection, and automated threat protection. Fortinet NGFWs meet the performance needs of highly scalable, hybrid IT architectures, enabling organizations to reduce complexity and manage security risks. --- [Skip to content](https://content.sirp.io/knowledge-base/fortigate-ngfw-integration-help-center-sirp#main-content) English Show submenu for translations [Customer portal](https://content.sirp.io/customer-portal?hsLang=en) [![SIRP-Logo-4c-KO](https://content.sirp.io/hs-fs/hubfs/SIRP-Logo-4c-KO.png?width=200&height=90&name=SIRP-Logo-4c-KO.png)](https://sirp.io/) Open main navigation Close main navigation - English Show submenu for translations - [Customer portal](https://content.sirp.io/customer-portal) - [Contact us](https://content.sirp.io/customer-portal/new) [Contact us](https://content.sirp.io/customer-portal/new?hsLang=en) What would you like to automate today? - There are no suggestions because the search field is empty. 1. [SIRP Help Center](https://content.sirp.io/knowledge-base?hsLang=en) 2. [Integration Guide](https://content.sirp.io/knowledge-base/integration-guide?hsLang=en) # FortiGate NGFW Integration ### About FortiGate NGFW FortiGate NGFWs enable security-driven networking and consolidate industry-leading security capabilities such as intrusion prevention system (IPS), web filtering, secure sockets layer (SSL) inspection, and automated threat protection. Fortinet NGFWs meet the performance needs of highly scalable, hybrid IT architectures, enabling organizations to reduce complexity and manage security risks. SIRP’s integration with FortiGate NGFW allows security teams to execute response actions right from SIRP. ### Supported Actions SIRP’s FortiGate integration app allows you to execute the following actions: | **Action** | **Description** | | --- | --- | | Block IP as Source | Block an IP address as Source on NGFW | | Block IP as Destination | Block an IP address as Destination on NGFW | | Unblock IP as Source | Whitelist an IP Address as Source on NGFW | | Unblock IP as Destination | Whitelist an IP Address as Destination on NGFW | ### Enable and Configure the FortiGate Firewall ### Create API Admin User on FortiGate Firewall 1\. Log in to the **FortiGate**. 2\. Create new **API Admin** role with permissions: **Policy configuration** and **Address Configuration.** Enable Read Write Permissions on both. 3\. Create a new Admin account with the **API Admin** role. [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-54-46-3525-AM.png)](https://downloads.intercomcdn.com/i/o/421500289/87879a28879124112ca713e9/image.png?expires=1752237000&signature=30abe6e22dc4ea828e6eedae1bfe22354b91b7bbb221987f869da2ae18064a22&req=cCImE8l%2Bn4lWFb4f3HP0gBO%2B7ns513HLdH3s2g9mWoWNLG4tNluvZPzjADmU%0AzrHBT6Qb08Zbjyrwhg%3D%3D%0A)[![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-54-51-8316-AM.png)](https://downloads.intercomcdn.com/i/o/421500656/b90a1543edd28b71b3adf254/image.png?expires=1752237000&signature=15226323fecda2efb407e79f4cdf0cd3f2de27690a238d7b9c190436efbd0288&req=cCImE8l%2Bm4RZFb4f3HP0gHtwavVINYZeCvNXtQqr4w8KZ0lwA2q6Z3hJVjj3%0Az89InK99IJnJi0rC9g%3D%3D%0A) ### Collect Policy ID from FortiGate Firewall Go to Policy & Objects to copy Policy **Sequence Number** which is equivalent to **Policy ID.** [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-54-57-5593-AM.png)](https://downloads.intercomcdn.com/i/o/421505250/012dd464cdc2a707d187fb68/image.png?expires=1752237000&signature=9f3409841d41aa6ae980ea606cbbf732716152c5772f9987b96095dd9758229d&req=cCImE8l7n4RfFb4f3HP0gHL%2BogjdiY7m7wXkm9BON6wADIjJubJbZiEKGBjH%0A5TzYqcH51OcO%2FIKm3Q%3D%3D%0A) - **Source-Policy-ID** has to be the policy where traffic direction is incoming from **Destination to Source.** - **Destination-Policy-ID** must be the policy where traffic direction is outgoing from **Source to Destination** ### Configure SIRP App 1\. Next, log in to SIRP, then go to **Apps** from the left navigation bar 2\. Locate the app named **FortiGate Firewall** 3\. Enable the FortiGate app by clicking on the toggle button under the **Status** [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-55-08-8512-AM.png)](https://downloads.intercomcdn.com/i/o/599819561/ddec136ba4dc4ab58838f5a1/image.png?expires=1752237000&signature=3a730718848f0f0a9bb11e8bedd38e8077af9069259cbc45a6f2615320f1ca84&req=cSkuHsh3mIdeFb4f3HP0gHo%2BB2UF%2BFvHV4e9e77gbNrMN9ka9JmlslwGDBLp%0A76qlzjVWRbqWKmC5vA%3D%3D%0A) 4\. As soon as you enable the App, you will get an option to add the configuration details. 5\. Add following details and click **Save**: 1. **IP:** \ 2. **Port: \<**Fortigate Web Console Port\> 3. **Username:** \ 4. **Password:** \ 5. **Source-Policy-ID:** \ 6. **Destination-Policy-ID:** \ 7. **VDOM** by default is root. Different customer uses different value use correct VDOM. [![](https://content.sirp.io/hubfs/Knowledge%20Base%20Import/image-Jul-11-2025-11-55-15-2413-AM.png)](https://downloads.intercomcdn.com/i/o/599819945/078f64850a9b60040aae2ea1/image.png?expires=1752237000&signature=b33e2cd82f39162ca22d1e12fdc92b3b83745c81ecb88e9d2e198cb3b2192327&req=cSkuHsh3lIVaFb4f3HP0gNNMC3EtofoV8Y%2BasJjTsOOUIvuJGYlDaTjr9T8H%0A%2BsTLNd%2BwLCVLdHA%2F5Q%3D%3D%0A) 6\. After the last step, you should be able to execute the FortiGate actions on-demand or through Playbooks to block and unblock IP addresses. ​ - [SIRP Community](https://content.sirp.io/knowledge-base/sirp-community?hsLang=en) - [Playbook Guide](https://content.sirp.io/knowledge-base/playbook-guide?hsLang=en) - [User Guide](https://content.sirp.io/knowledge-base/user-guide?hsLang=en#main-content) - [IM Guide](https://content.sirp.io/knowledge-base/user-guide?hsLang=en#im-guide) - [Admin Guide](https://content.sirp.io/knowledge-base/admin-guide?hsLang=en) - [Integration Guide](https://content.sirp.io/knowledge-base/integration-guide?hsLang=en) - [Release Notes](https://content.sirp.io/knowledge-base/release-notes?hsLang=en) - [Add on Apps](https://content.sirp.io/knowledge-base/add-on-apps?hsLang=en) - [Architecture](https://content.sirp.io/knowledge-base/architecture?hsLang=en) - [Use Cases](https://content.sirp.io/knowledge-base/use-cases?hsLang=en) [![SIRP-Logo-4c-KO](https://content.sirp.io/hs-fs/hubfs/SIRP-Logo-4c-KO.png?width=200&height=90&name=SIRP-Logo-4c-KO.png "SIRP-Logo-4c-KO")](https://sirp.io) ### Global Headquarter ##### United States 7735 Old Georgetown Rd, Suite 510 Bethesda, MD 20814 [+1 888 701 9252](tel:+18887019252) [mailto:email@email.com](mailto:email@email.com) Copyright © 2025, SIRP Labs Inc