Network plane
FortiGate
Discover sanctioned and unsanctioned GenAI traffic, application control, TLS inspection, and DLP.
Not checked
Fortinet Security Fabric
AI application protection, end to end
Use each control independently, or route one live transaction through the complete protection path.
Tool plane
FortiWeb
Proxy MCP JSON-RPC and test tool poisoning, schema abuse, command injection, and dangerous arguments.
Not checked
Model plane
FortiAIGate
Apply AI Guard to prompts and responses with DLP, injection, content, and regulatory policy tests.
Not checked
Live protected path
User / AgentPrompt or tool intent
FortiGateApp control + DLP
FortiWebMCP protocol security
FortiAIGateLLM guardrails
Results come from actual HTTP responses, certificates, and Fortinet API logs. A connection failure is shown as an error—not converted into a security block.
Secure AI Assistant
Configured model
Route to model
Network plane
FortiGate · Shadow AI
Probe GenAI services from this VM and correlate reachability, TLS inspection, and FortiGate application-control logs.
This is the actual network path from the VM. The app does not claim a FortiGate bypass. To demonstrate before/after enforcement, use separate network paths or change the FortiGate policy outside this application.
No live probe has been run.
Tool plane
FortiWeb · MCP security
Send real MCP JSON-RPC traffic through the FortiWeb virtual server and observe the enforcement response.
Select an MCP security test.
Model plane
FortiAIGate · Security tests
Run OWASP LLM attacks separately from country and regulatory guardrail policies.
Select an OWASP LLM test.
Preconfigured routes
Application connections
These values control where this demo app sends requests. They do not modify Fortinet product configuration. Blank secret fields preserve the current secret.