Home Integration Guides Blog Get Started →
🛡️ FortiGate

When FortiGate Triggers an Alert
Your Phone Rings

Get voice phone calls for critical events like HA failover, VPN tunnel down, DDoS attack or high CPU. With Automation Stitch webhook integration, FortiGate alerts reach your phone instantly.

HA Failover Happened — You Have No Idea

A failover occurred in your FortiGate HA cluster at night. Logs filled up, email was sent, nobody saw it. When you noticed in the morning, the secondary device had been running as primary for 8 hours without your knowledge.

There's no ready-made solution for FortiGate voice alert, HA failover phone notification or Automation Stitch voice warning — Alertalk was built to fill this gap.

Scenario: A VPN tunnel goes down while you're out of office, cutting remote location access. FortiGate logs the event but nobody is monitoring. With FortiGate voice alert, intervention would have happened in 3 minutes.

How Does It Work?

1

FortiGate Generates an Event

An event such as HA failover, VPN down, high CPU or DDoS occurs. The Automation Stitch trigger fires.

2

Automation Stitch Triggers Webhook

The Alertalk webhook URL defined as a Stitch Action is called. Event type and device information are automatically transmitted.

3

Your Phone Rings

Alertalk calls you. The voice message announces the event type. HA failover, VPN down, DDoS — you are notified within seconds.

Which FortiGate Events Will Call You?

Voice alerts can be configured for all FortiGate events triggerable via Automation Stitch:

HA Failover VPN Tunnel Down DDoS Attack Detected High CPU Usage High Concurrent Sessions Interface Down IPS Critical Signature Admin Login Failure SSL-VPN User Limit Config Change Detected Disk Usage Critical Conserve Mode

FortiGate Automation Stitch Setup

Create a new stitch under Security Fabric > Automation > Stitch. Get your webhook key from the dashboard.

FortiGate Automation Stitch — Webhook Action
Action Type: Webhook
URL: https://tr.alertalk.net/webhook/{YOUR_WEBHOOK_KEY}
Method: POST
Headers: Content-Type: application/json

Body:
{
  "message": "FortiGate: %%log.type%% - %%log.subtype%%"
}

Trigger Örnekleri:
  - Event Type: HA Failover
  - Event Type: VPN Tunnel Down
  - Event Type: System CPU High
  - Event Type: DDoS Attack

💡 See the integration guide for full setup with screenshots.

Frequently Asked Questions

How do I get a voice alert when FortiGate HA failover occurs? +

Register with Alertalk, upgrade to WebApi plan and get your webhook key. In FortiGate, create a stitch with HA Failover trigger and Alertalk webhook Action under Security Fabric > Automation > Stitch. See the FortiGate integration guide for step-by-step setup.

Which FortiOS versions does it work with? +

Works with all FortiOS versions 6.2 and above that support Automation Stitch and Webhook Action. All models from FortiGate 40F to the 3000 series are supported.

Can it be used for multiple FortiGate devices? +

Yes. You can create separate Automation Stitches for each FortiGate device. All devices can use the same Alertalk webhook key, and you can specify the device name in the message.

Does it also work with FortiManager? +

Yes. You can create centralized Automation Stitch policies via FortiManager to receive voice alerts for all managed devices.

Related Resources

FortiGate integration and other system integrations:

Let the Next FortiGate Alert Find You

Setup is completed in 10 minutes. You can run the first voice alert test immediately.

📞 Get Started Free

No credit card required · WebApi plan required for webhooks