# FortiGate Firewall Analyzer · FortiOS

> Analyze Fortinet FortiGate (FortiOS) security policies, NAT/VIPs, objects, routes, and VPNs over the REST API in one self-hosted dashboard. Configuration state, not logs.

Last updated: June 2026

Reads FortiOS over the REST API:

- **Security policies**, **NAT, VIPs & IP pools**, and **address/service objects** resolved recursively to real addresses and ports.
- **Routing tables** and **VPN configuration** (IPsec tunnels, SSL-VPN).
- **Change detection** with admin attribution (time-windowed on FortiOS).
- **Policy Analyzer**: effective access, rule hygiene, and per-rule risk scoring.

Configuration and state analysis, not FortiAnalyzer-style log analytics.

## SAMURAI vs FortiGate log analyzers

| | SAMURAI | FortiGate log analyzers |
|---|---|---|
| Data source | FortiOS configuration read over the REST API | FortiGate traffic and event logs |
| Question answered | What is the policy, and who changed what, when? | What traffic was allowed or blocked? |
| Scope | FortiGate plus Palo Alto, Cisco, Juniper SRX, routers, switches, ACI, ISE, vCenter | Usually FortiGate logs only |
| Deployment | Single self-hosted Docker container, air-gap friendly | FortiAnalyzer appliance or log pipeline |

## Frequently asked questions

### How does SAMURAI connect to FortiGate?

Over the FortiOS REST API with an API token (with a username/password fallback). It reads policies, NAT, address and service objects, routes, and VPN configuration, read-only.

### Does it resolve FortiGate address and service objects?

Yes. Objects and groups are expanded recursively at sync time, so a policy shows the real addresses and "tcp/443"-style services instead of object names you have to chase.

### Is this a Fortinet firewall log analyzer?

No, SAMURAI analyzes FortiOS configuration state, not logs. For traffic-log analytics, FortiAnalyzer or a log tool is the right choice; SAMURAI focuses on the policy and its changes.

### Can I see FortiGate alongside Palo Alto and Cisco?

Yes, that is the point. FortiGate, Palo Alto (PAN-OS), and Cisco FMC/FTD policies share one search and one change timeline, next to the routers, switches, and fabrics around them.

### Can I try it on FortiGate for free?

Yes. A free test license ships with the SAMURAI Docker image on Docker Hub, no email required, so you can point it at your own FortiGate before talking to anyone.

---

Canonical page: https://nometa.az/en/fortigate-firewall-analyzer/
Part of SAMURAI, a self-hosted, multi-vendor network monitoring & security platform. Overview: https://nometa.az/llms.txt
Contact: info@nometa.az · Docker Hub: https://hub.docker.com/r/beyrak44/samurai