How keith0517/fortigate-utm-analyzer works
FortiGate UTM Security Analyzer is a single-file Python auditor: a user supplies a FortiGate full-configuration backup and receives severity-tagged security findings. The README documents broad audit coverage, including policy intelligence, unused objects, VIP exposure, DoS, SD-WAN, interface exposure, certificates, fabric integrations, and AI/LLM security. The repository has no separate implementation modules, so these capabilities are represented as responsibilities within utm.py. Internal dispatch and report-generation details are not established by the sampled excerpts.
Main entry points: utm.py Config parsing
Components 15
Audit workflow
- Analyzer
utm.py - Config parsing
utm.py - Findings
utm.py
Security audits
- Policy intelligence
utm.py - Unused objects
utm.py - Certificate audit
utm.py
Network and exposure
- Anti-DoS audit
utm.py - SD-WAN audit
utm.py - Interface exposure
utm.py - VIP exposure
utm.py
Integrations and profiles
- Fabric integration
utm.py - AI/LLM security
utm.py - UTM profile checks
utm.py
Other components
- Operator
- Config backup
Connections 24
- Operator → Analyzer: runs
README.md - Config backup → Analyzer: supplies config
README.md - Analyzer → Config parsing: parses config
README.md - Analyzer → Findings: produces findings
README.md - Config parsing → Policy intelligence: audits policies
utm.py - Config parsing → Unused objects: cross-references objects
utm.py - Config parsing → Certificate audit: checks certificates
utm.py - Config parsing → Anti-DoS audit: audits DoS
utm.py - Config parsing → SD-WAN audit: audits SD-WAN
utm.py - Config parsing → Interface exposure: scores exposure
utm.py - Config parsing → VIP exposure: audits VIPs
utm.py - Config parsing → Fabric integration: audits connectors
utm.py - Config parsing → AI/LLM security: audits AI profiles
utm.py - Config parsing → UTM profile checks: checks profiles
utm.py - Policy intelligence → Findings: reports issues
utm.py - Unused objects → Findings: reports orphans
utm.py - Certificate audit → Findings: reports risks
utm.py - Anti-DoS audit → Findings: reports risks
utm.py - SD-WAN audit → Findings: reports gaps
utm.py - Interface exposure → Findings: reports scores
utm.py - VIP exposure → Findings: reports exposure
utm.py - Fabric integration → Findings: reports risks
utm.py - AI/LLM security → Findings: reports risks
utm.py - UTM profile checks → Findings: reports weaknesses
utm.py