FortiCloud WCF Integration

Overview

This guide sets up the FortiCloud Web Content Filtering (WCF) integration with OneFirewall.

Prerequisites

Install the following on the machine where the agent will run:

Need help installing Docker and Docker Compose? Follow the WCF Installation Guide for a step-by-step walkthrough.

Step 1: Open the WCF Installation Page

Navigate to the WCF installation page in the OneFirewall portal (refer to your on-premises installation if applicable): https://app.onefirewall.com/install-wcf.html

Step 2: Select FortiCloud

On the integration page, select FortiCloud from the list of available connectors.

Step 3: Configure the Integration

Fill in the required fields:

Field	Description
Device Name	A unique name to identify this device within OneFirewall
Type	Select IPv4
Score	Set the threat score threshold to use for filtering
Update Time	How often the agent fetches updated data (e.g. every 5 minutes)

Setting the update time to 5 minutes is recommended for near-real-time threat intelligence updates.

Step 4: Activate FortiCloud

Once all fields are filled in, click Activate FORTICLOUD. OneFirewall generates a ready-to-use docker-compose.yml file with the required environment variables pre-populated for your account.

Step 5: Deploy with Docker Compose

The generated `docker-compose.yml`

docker-compose.yml

services:
  fortiappsec-updater:
    image: registry.onefirewall.com/onefirewall-wcf-agent-fortiappsec:v1
    platform: linux/amd64
    container_name: fortiappsec-updater
    environment:
      - FORTINET_API_KEY=${FORTINET_API_KEY}
      - EP_ID=${EP_ID}
      - OFA_API_URL=${OFA_API_URL}
      - OFA_JWT_TOKEN=${OFA_JWT_TOKEN}
      - OFA_SCORE=${OFA_SCORE}
      - AGID=${AGID}
      - KEEP_DAYS=${KEEP_DAYS:-30}
      - SCRIPT_DIR=/app/backups
      - DEMO_MODE=${DEMO_MODE:-false}
      - IP_LIMIT=${IP_LIMIT:-9999}
    volumes:
      - ./backup:/app/backups
    restart: "always"

The environment variables (e.g. OFA_JWT_TOKEN, AGID) are automatically filled in by OneFirewall after you click Activate FORTICLOUD.

FORTINET_API_KEY and EP_ID are the API key and application ID from your FortiAppSec application, configured from your organization values.

Start the agent

Save the generated docker-compose.yml to a directory on your machine, then run:

docker-compose up -d

The agent starts in the background and begins syncing threat intelligence data with your FortiGate device at the configured update interval.

Verify the Agent Is Running

Check that the container started correctly:

docker ps

You should see fortiappsec-updater listed with a status of Up. To view live logs:

docker logs -f fortiappsec-updater

Troubleshooting

Container exits immediately after starting

Check the logs with docker logs fortiappsec-updater. A missing or invalid environment variable is the most common cause — make sure you copied the exact docker-compose.yml generated after activation.

Cannot pull the Docker image

Make sure Docker is authenticated with the OneFirewall registry. Contact support if you receive a 403 Forbidden or unauthorized error when pulling the image.

Threat data is not updating

Verify the container is running and check that the OFA_JWT_TOKEN is still valid. Tokens may expire — re-activating the integration on the portal will issue a new token.

Get Started

Essentials

Releases

Case Studies

WCF Agent

Products

Updates

Overview

Prerequisites

Step 1: Open the WCF Installation Page

Step 2: Select FortiCloud

Step 3: Configure the Integration

Step 4: Activate FortiCloud

Step 5: Deploy with Docker Compose

The generated `docker-compose.yml`

Start the agent

Verify the Agent Is Running

Troubleshooting

​Overview

​Prerequisites

​Step 1: Open the WCF Installation Page

​Step 2: Select FortiCloud

​Step 3: Configure the Integration

​Step 4: Activate FortiCloud

​Step 5: Deploy with Docker Compose

​The generated docker-compose.yml

​Start the agent

​Verify the Agent Is Running

​Troubleshooting

Overview

Prerequisites

Step 1: Open the WCF Installation Page

Step 2: Select FortiCloud

Step 3: Configure the Integration

Step 4: Activate FortiCloud

Step 5: Deploy with Docker Compose

The generated `docker-compose.yml`

Start the agent

Verify the Agent Is Running

Troubleshooting