FortiManager forward Logs to FortiAnalyzer

 Problem

How to forward FortiManager local Logs to an FortiAnalyzer in realtime?

Solution

Over GUI options it isn't possible to configure. This function is only available over CLI:
config system locallog fortianalyzer settings
    set status realtime
    set server 192.168.1.10
end
Afterwards you see an "unathorized device" in the FortiAnalyzer.

Verify



Comments

Post a Comment

Popular posts from this blog

FortiMail - Server Basic Configuration

Image
 Problem Nowhere is it written exactly how FortiMail must be configured in Server Mode to run a secure Basic Mail Server. Here is a summary of most of the settings: Solution System Network Configure your Interfaces Be sure that you have configured an default Gateway Port Forwarding FortiMail are able to forward Traffic from a the internet to the local LAN (DNAT). For more information:  FortiMail Doc FortiGate The FortiGate are able to send SMTP traffic through an WCCP Tunnel to the FortiMail for scanning. See for more information:  FortiDoc Configuration Set the correct Time Zone Configure your Password Policy Change the Admin Ports  to non default ports If you need configure the SNMP settings Mail Settings Set the Hostname  and the Local domain name . Togther there are the FQDN of the FortiMail. Activate the SMTP MA service  (use other ports for mail submiting by clients as mail transfer to other Mail servers.  Relay Host If you run the FortiMail behind another Mailserver which acts a
Read more

FortiGate BGP dual-home with multiple ISP

Image
Problem Design with two ISPs and an RIPE Routed public IP Ranges. How to solve, that the public Range is available over both ISPs but without asymetric Routing and ISP-1 is the primary. Solution FortiGate Basic BGP configuration First start with basic BGP configuration config router bgp set as 65301 set router-id 100.200.100.254 set keepalive-timer 45 set holdtime-timer 120 set bestpath-med-missing-as-worst enable set graceful-restart enable     config redistribution connected          set status enable     end end bestpath-med-missing-as-worst :  The route without MED is automaticly the worst destination. gracefule-restart :  Advertise reboots to neighbors so they don't see the router as offline, wait before declaring them offline, and how long to wait when they reboot before advertising updates. These commands apply to neighbors and are part of the BGP capabilities. This prevents unneeded routing updates. holdtime-timer: How long the router will wait for
Read more

FortiGate Broadcast Forwarding

Image
 Problem In today's time still rare and nevertheless there is the requirement from time to time that broadcast packets must be transported across the subnet boundary. This example shows how WoL packets can be transported across the subnet boundary. Solution The solution is quite simple. The following configuration is necessary on the Fortigate: Enable Multicast-Policy Feature config system settings     set gui-multicast-policy enable end Or over GUI Broadcast Forwarding Configuration After the Feature is enabled we need the following configuration. The easiest way is to do over CLI: config firewall multicast-address     edit Broadcast          set type broadcastmask          set subnet 255.255.255.255/32     next end config firewall multicast-policy     edit 0          set name "Forward WoL Packet"          set logtraffic enable          set srcintf "lan"          set dstintf "clients"          set srcaddr "net_192.168.10.0/24" <-- Our Su
Read more