Purpose
This section explains the process for configuring the Integration Engine to connect to your Fortinet environment. It explains, at a high level, how COMPASS connects to a customer's Fortinet/FortiGate environment using Cloudflare Zero Trust Tunnel.
The goal of this approach is to allow COMPASS to securely fetch required Fortinet data without requiring the customer to expose their Fortinet server directly to the public internet.
Business Outcome
This integration enables customers to connect their Fortinet environment to COMPASS with a guided setup flow. Once configured, COMPASS can retrieve Fortinet data through a secure tunnel and use it for compliance, risk, monitoring, and integration workflows.
Why Cloudflare Tunnel Is Used
Cloudflare Tunnel provides a secure outbound connection from the customer environment to Cloudflare. This avoids the need for inbound firewall rules, public IP exposure, or direct internet access to the customer's Fortinet service.
Customers can also review Cloudflare's official documentation for the same tunnel approach:
· Create a remotely-managed tunnel
· cloudflared installation downloads
Key benefits:
· No public exposure of the Fortinet server.
· Customer controls where the tunnel connector runs.
· COMPASS manages tunnel provisioning through Cloudflare APIs.
· Each customer/device can receive a unique tunnel hostname.
· The setup can be completed through the COMPASS UI with minimal manual steps.
Related Topics: