Sentinel_Not able to create playbook 'Fortinet-FortiGate-ResponseOnBlockIP' using in-built Data Connector

Austin Smith 0 Reputation points
2025-04-27T10:56:46.32+00:00

Hi,

I am trying to create a playbook that uses the built-in template 'Fortinet-FortiGate-ResponseOnBlockIP'.

I was able to create the connector/API and it seems to be connected as shown in the image..

The location of the connector is Australia East.

User's image

Now when I am trying to create the playbook using the above mentioned connector and template, I get the error shown in the image.

User's image

Could someone please tell me what I am doing wrong here.

Thanks,

Austin

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,268 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Luis Arias 8,591 Reputation points
    2025-04-29T08:03:04.6166667+00:00

    Hi Austin,

    It looks like the issue you're facing is probably due to a mismatch between the location of your connection and the managed API. Your connection is set to "Australia East," but the managed API seems to be in a different region, which is why you're getting that error.

    To fix it, start by checking the region where the managed API is deployed. It needs to be the same as the region of your connection. If the API isn't in "Australia East," you'll need to create a new connection in the correct region. Another option is to modify the resource group's location to match the API's region, if that's an option for you.

    Here another issues related to fortigate and playbooks:

    If the information helped address your question, please Accept the answer.

    Luis

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.