How to push updates to external threat feeds using Postman REST client

This article describes and demonstrates how to use Postman REST client with external threat feeds.

Scope

FortiGate v7.2.0 +.

Solution

Assuming the API Administrator has been configured and the token has been generated. For this example, an IP Address External Connector is used.

Step 1: Configure the Bearer Token on Postment Client:

This API Token is generated Token from the FortiGate REST API administrator.

Step 2: Select the ‘Body’ tab, select the raw and change the input TYPE to JSON:

For this test, the following IP address will be added:

Step 3: Select ‘Send to POST’ a request. If succeed, the return result will be shown as follows:

Step 4: Update on Threat feed:

Step 5: Logs:

Enable logs command:

config log setting
set rest-api-set [enable|disable]
set rest-api-get [enable|disable]
end

Working with VDOM

Step 1: Make sure that the API Administrator profile has been set to global:

Error: Insufficient permission to access a global external resource:

Step 2: Params key:

Make sure the Params have been added with the VDOM key and the Value is the respective VDOM name.

Step 3: Click Send to POST a request, If success the return result will be shown as follows:

Step 4: To troubleshoot issues related to VDOM:

diag de application httpsd -1
diag de en