Fortinet Security Integration

[_up__bb_]

I have found a Solution Brief about a security integration about Extreme Networks and Fortinet,
http://learn.extremenetworks.com/rs/extreme/images/Fortinet-SB.pdf
We have a lot of customer with this two vendor and this type of integration can add value at our works, but I cannot find any doc that explain HOW TO deploy this type of scenario/integration ...
Is only a marketing doc or there are behind this partnership a real integration?
Someone have already made somthing similar?

Roberto

[Zdeněk_Pala]

Hi. The integration gives of two benefits: Inform the firewall about user-ip or location-&user-ip mapping. For this we need NAC (extreme control) If the firewall/ips/anti-anything detects the security issue then it send syslog/trap to the NetSight (extreme management) and management does perform reaction. This can be done through ASM (Autometed Security Manager) or through NAC. ASM is available with NetSight version 7. Actualy there is no plan to support ASM in the NetSight / EMC version 8. There are some limits what ASM can do and in what network. Sales answer for your question is: you do not need NAC for the integration to work. But with NAC it is much more powerfull and much easier and flexible. Regards Zdenek

[Ilya_Semenov]

Thanks, Zdenek!

Could you please clarify something for me....

What means: "ASM is available with NetSight version 7. Actualy there is no plan to support ASM in the NetSight / EMC version 8".

Extreme Networks is going to stop supporting Security Integration with Fortinet?

[Ilya_Semenov]

Hello, gentlemen!

Could you please answer me: is the integration between NMS-ADV and Fortinet (FG-600D in my case) possible without NAC?

I've found two articles:
https://www.fortinet.com/content/dam/fortinet/assets/alliances/Extreme-Network-Fortinet-SB.pdf

and

https://drive.google.com/file/d/0B5bMj99cONofd19hanpLdUpFQ1U/view

But they are old and may be something changed?

Thanks!

[Luca_Messori]

Hi Zdenek,

thank you very much, I think that now I'm understanging.

The bad news is that I cannot do it without OneFabric Connect that require Advanced license.

Is this correct?

Is it possible to inform the Fortigate about connected users without using OneFabric Connect?

Thank you very much for the time spent,

have a nice weekend,

Luca