FortiAI Mobile — UX Mockup

47

Devices

12

Alerts

3

🔴 Critical

94%

Compliance

🧠

FortiAI Security Insights

⋮

🔴 IKE Mismatch on FortiGate-A

Tunnel tunnel-1 down since 14:32 UTC

🟡 3 IoT devices no firmware update

DMZ segment out of date >90d

🟢 12 firewall rules not used in 30d

Stale rules on FGT-B, FGT-C

Device Status

🟢 FGT-A · 23%

🔴 FGT-B · VPN

🟡 FGT-C · Mem

🟢 FGT-D · 45%

🧠

FortiAI Assistant

Troubleshoot

🧠 FortiAI

Ready to help with VPN, Scripts, IoT, Security. What would you like to do today?

2,450

/ 10,000

👤

You: Check tunnel-1 status, why is it down?

🧠 FortiAI Analyzing... Streaming

Connecting to FortiGate-A (10.0.1.1)... ✓
Running: get vpn ipsec tunnel details tunnel-1
phase1: tunnel-1 → status: up
phase2: tunnel-1 → status: DOWN
Fetching phase2 config... ✓
Comparing: ike real → mismatch

🔴 VPN Tunnel: tunnel-1

Status:DOWN (14:32 UTC)

Issue:IKE P2 proposal mismatch

Local P2:AES256-SHA256

Remote P2:AES128-SHA1

Suggested next:
1. Auto-fix — match both P2 proposals (recommended)
2. Manual edit — modify VPN config on FGT-A
3. Deep analysis — view more logs

🧠 FortiAI (Analyze from Insight)

📊 Traffic Analysis Summary

🔴 Spike: Outbound 185.xxx.xxx.0/24
Normal: 2 Mbps → Now: 45 Mbps (+2150%)

Devices affected:

• server-03 → SSH brute-force to 185.x.x.17
• workstation-07 → DNS tunnel to 185.x.x.88

78/100 High

Connection Graph:

server-03 ──[SSH/22]──→ 185.x.x.17 (127 failed auth)
ws-07 ──[DNS/53]──→ 185.x.x.88 (base64 TXT queries)
Domain: update-check.security[.]ru ⚠️

⚡ Inversion Mode — Confirm Required

1️⃣ BLOCK 185.x.x.17 → Add rule on FGT-DMZ

2️⃣ BLOCK 185.x.x.88 → DNS filter, block domain

3️⃣ QUARANTINE server-03

4️⃣ QUARANTINE workstation-07

⚡ Impact: 2 users will lose network access

✅ Confirm Security Actions

FortiAI will execute 4 actions on FortiManager

+ config firewall address
+ edit "block-185-17"
+ set subnet 185.x.x.17 255.255.255.255
+ next
+ end
+ config firewall policy
+ edit 0
+ set dstaddr "block-185-17"
+ set action deny
+ next
+ end

Schedule execution for off-peak (02:00 UTC) Email post-execution report to admin Rollback if connectivity loss detected

🔔 Notifications Mark all read

🚨 VPN Tunnel Down

tunnel-1 on FGT-A — IKE P2 mismatch detected. FortiAI recommends auto-fix.

🟡 Firmware Audit

3 IoT devices in DMZ segment out of date >90 days

📊 Traffic Anomaly

+2150% outbound to 185.xxx.xxx.0/24 — possible data exfiltration

✅ Policy Cleanup

12 unused firewall rules identified on FGT-B, FGT-C. Ready for review.

🔒 Compliance Pass

Weekly PCI-DSS scan complete — 94% compliant (3 minor findings)

🧠 FortiAI Actions

🔍 Analyze Traffic — deep inspect current anomalies

📋 Show connection graph for suspicious IPs

📊 Compare with 7-day baseline

🛡️ Security Posture — full audit / risk score

📋 Run PCI-DSS compliance scan

📊 Generate executive summary

🔧 VPN Diagnostics — test all tunnels

📋 Batch tunnel connectivity check

📊 Phase2 proposal audit

📝 Run Script — custom FortiAI TCL script

📋 Block IP — add address & policy rule

📋 Config Diff — compare devices

📋 Quarantine device — disable all interfaces

💬 Chat History — previous FortiAI sessions

⚙️ Settings — FortiAI preferences, token limits, ADOM scope