Aviz Networks details Network Copilot for FortiGate
Companies mentioned
Aviz Networks describes a Network Copilot deployment that connects FortiGate firewall telemetry with Splunk logs to answer operator questions in natural language and support root-cause analysis. The blog says the setup is intended to reduce manual correlation work and shorten resolution times for L1 and L2 teams.
Research Overview
The post frames the current challenge as fragmented telemetry across firewalls, SIEMs, routers, switches, and application systems. It says operators still spend time correlating logs by hand across these sources, especially when trying to identify causes for access, authentication, or policy issues.
To address that, Aviz Networks presents Network Copilot as an agent-based system that ingests and normalizes log data from multiple devices. The company says the platform can also use native telemetry storage for real-time analysis of historical data.
Technical Breakdown
The reference deployment places a FortiGate firewall in the traffic path and exports traffic, authentication, threat, system, configuration, and audit logs to Splunk. Network Copilot then queries that data and returns explanations in plain English.
The blog says the system is designed to correlate live and historical telemetry from several sources, including firewalls, SIEMs, switches, routers, and application platforms. It also says the platform provides guided remediation rather than automatic fixes.
Key Findings
Aviz Networks says the agent can help identify recent configuration changes, explain failed login attempts, and trace blocked internet access to missing or misconfigured policy rules. Each example is tied to a natural-language question asked by an operator.
The post says the system is intended to attribute changes to an administrator, identify the affected policy or user, and connect the event to downstream traffic effects when possible. It also says the approach can make root-cause analysis three to seven times faster.
Operational Impact
The blog says the main operational benefit is reduced dependence on senior engineers for routine troubleshooting. It also says the system makes troubleshooting more explainable and auditable for L1 and L2 teams.
According to the post, Network Copilot is meant to augment engineers rather than replace them. The company says the goal is to turn stored operational knowledge into answers that are easier to use during day-to-day work.
This Blog Signals brief is a fact-based summary of the vendor blog and its stated use of agentic AI to correlate FortiGate and Splunk data for network operations.
Blog post, originally published by Khurram Khani, Amrit Singh Sardar at aviznetworks.com.