FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
llim
Staff
Staff
Article Id 196982

Purpose

Summary

 

 

The FortiSIEM Consumption Model (FSM-PAYG) allows you to build and grow your SIEM services on a per device basis. For the licensing to work properly, your distributor requires a monthly device count report. This reporting tool automates reporting and is required for the FortiSIEM Consumption Licensing.

 

 

Contact the local Fortinet sales representative if you have questions.

Diagram
n/a
Expectations, Requirements
n/a

 


Configuration

Configure Email

 

 

As FortiSIEM sends billing information to the distributor and Fortinet via email, it is first required to configure the email settings within FortiSIEM. Please see the documentation for steps on how to configure this.

 

 

https://help.fortinet.com/fsiem/6-2-1/Online-Help/HTML5_Help/System_Settings.htm#Email

 

 

 

Configure the PAYG Report

 

 

·      In the FortiSIEM GUI go to Admin > Settings > System > PAYG Report

 

o   In the email field, please include three email addresses:

 

1.     The Fortinet email is siem4mssp@fortinet.com

 

2.     Your Distributor billing address.

 

3.     An internal email address (or alist) for the MSSP to obtain a copy of the email

 

·       For the Partner ID, this should be provided by Fortinet account team.

 

·       Check both the Daily and Monthly check boxes.

 

 

Should there be any questions, please contact your Fortinet account representative.

 



 

Test Report Email

 

Perform a “Test” to confirm that emails are send and received correctly.

 

 

The Test Report Email is a pre-run of the real monthly report. It indicates it is not the official monthly report by the TEST_REPORT status.

 

Monthly Report Email

 

 

The monthly report will have an “OK” status. This is what will occur each month if the report runs as expected.

Contributors