The template for monitoring FortiGate Next Generation Firewall by HTTP.

1. On the FortiGate GUI, select System > Admin Profiles > Create New.
2. Enter a profile name (ex. zabbix_ro) and enable all the Read permissions. Please note the profile name, it will be used a bit later.
3. Go to System > Administrators > Create New > REST API Admin.
4. Enter the API-user's name and select the profile name you created in step 2.
5. The trusted host can be specified to ensure that only Zabbix server can reach the FortiGate.
6. Click OK and an API token will be generated. Make a note of the API token as it's only shown once and cannot be retrieved.
7. Put the API token into {$FGATE.API.TOKEN} macro.
8. Set your FortiGate GUI IP/FQDN as {$FGATE.API.FQDN} macro value.
9. If FortiGate GUI uses HTTPS, put "https" value into {$FGATE.SCHEME} macro and "443" into {$FGATE.API.PORT} macro.
10. If FortiGate GUI port differs from the standard one, specify it in {$FGATE.API.PORT} macro.

NOTE: Starting from template version '7.4-1', the API token is used in the request header. For older template versions (where the API token is passed in the URL query parameter), when using FortiGate v7.4.5+, you must enable the following global setting:
https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/940602/using-apis

For added security, it is strongly recommended to use the latest template version, which passes the API token in the request header instead of the URL parameter.

You can discuss this template or leave feedback on our forum https://www.zabbix.com/forum/zabbix-suggestions-and-feedback.

Generated by official Zabbix template tool "Templator"