Create custom reports to process additional analytic searches: FortiSIEM allows you to create custom reports tailored to specific requirements. This is useful if the preloaded analytic searches do not completely fulfill your reporting needs or if additional data processing is required.
Save the analytic searches and turn them into report definitions: FortiSIEM enables you to save analytic searches and convert them into reusable report definitions. These report definitions can then be used to generate consistent reports based on the same criteria in the future.

Since PLC1 and PLC2 are segmented into two VLANs on a Layer 2 switch, traffic between them requires inter-VLAN routing.
The Layer 2 switch handles VLAN segmentation but does not route traffic between VLANs.
For communication between VLANs, traffic must be sent to a router or Layer 3 device-in this case, the FortiGate device in the Layer 2 supervisory control network.
The traffic flows from PLCs to the Layer 2 switch and then over a trunk link (carrying VLAN tags) to the FortiGate, which performs inter-VLAN routing.
The trunk link allows multiple VLAN-tagged traffic to be carried between the Layer 2 switch and the FortiGate for routing.
Options regarding VLAN tags rewriting or requiring PLCs to be in the same VLAN are incorrect because VLAN tagging remains consistent on trunk links and PLCs are intentionally segmented.

Application control inspection in Fortinet firewalls utilizes a hierarchical structure where applications are categorized and classified. A parent signature encompasses a group of related child applications. If a security action is defined on the parent signature, it will apply to all child applications within that group. Therefore, the parent signature takes precedence over the child application signature, meaning if a child application is allowed access based on its own signature but the parent signature has a blocking rule, the child application will still be blocked.

IEC 104 is a widely used protocol in the field of Supervisory Control and Data Acquisition (SCADA) for electrical engineering applications, specifically telecontrol. It's designed to facilitate communication between control stations and substations in power grids.

SL 1 → Protects against unintentional operator error or casual mistakes.
SL 2 → Protects against intentional misuse by attackers with low resources.
SL 3 → Protects against skilled and malicious attackers with moderate resources.
SL 4 → Protects against highly skilled attackers with substantial resources (e.g., nation-state level).