...
Inform Blue Hexagon Customer Support at support@bluehexagon.ai to enable Fortinet FortiGate FW integration on your BlueHex Secure appliance.
BlueHex Secure appliance includes a web server that hosts block list files at http://<Appliance IP>:8081 This is the External Block List that enables Fortinet FortiGate FW to block the web malware from getting downloaded. Malware: /hash_list URLs: /url_list Domains: /domain_list IPs: /ip_list
Configure External Block List policy on FortiGate - for blocking. Set refresh rate to desired minimum e.g. 5 minute minutes
Verify that BlueHex Secure is updating new SHA256 malware threats in the External Block List.
Verify that Forti FW is blocking the payloads corresponding to the SHA256 published by BlueHex Secure.