FortiGate CIS Benchmark Checker v2.0

Enterprise-grade FortiGate CIS Benchmark v1.3.0 compliance auditing tool.

Features

• 56 CIS Controls – 35 Level 1 (Basic) + 21 Level 2 (Advanced)
• Structured Config Parser – Parses FortiGate .conf backups into structured data
• Compliance Scoring – Overall %, Level 1/L2 scores, severity-weighted scoring
• Multi-Format Reports – HTML (dark-mode enterprise), JSON (SIEM), PDF
• Web Dashboard – Flask-based UI with upload, scores, filters, downloads
• Remediation Engine – Auto-generates FortiGate CLI scripts with dry-run mode
• Threaded Execution – Concurrent rule evaluation for performance
• Unit Tested – 57+ tests covering parser, rules, and scoring

Quick Start

# Install
pip install -r requirements.txt

# CLI Audit
python run_audit.py test_file.txt

# With options
python run_audit.py config.conf --format html,json --level 1 --output-dir ./reports

# Web Dashboard
python run_audit.py --web

Project Structure

├── cis_benchmark/              # Core CIS engine
│   ├── config_parser.py        # FortiGate config parser
│   ├── scoring.py              # Compliance scoring
│   ├── remediation.py          # CLI remediation scripts
│   ├── rules/                  # CIS benchmark rules
│   │   ├── base.py             # Base rule classes
│   │   ├── level1_rules.py     # 35 Level 1 rules
│   │   └── level2_rules.py     # 21 Level 2 rules
│   └── reporting/              # Report generators
│       ├── html_report.py      # Enterprise HTML report
│       ├── json_report.py      # SIEM-compatible JSON
│       └── pdf_report.py       # PDF (optional weasyprint)
├── web/                        # Web UI dashboard
│   ├── app.py                  # Flask application
│   └── templates/dashboard.html
├── tests/                      # Unit tests
├── docs/                       # Documentation
└── run_audit.py                # CLI entry point

Documentation

• Architecture – System overview and module details
• Rule Mapping – Complete CIS rule mapping table
• Usage Guide – Installation, CLI, Web UI, testing

Author

Priyam Patel

License

MIT