FortiGate Administration Guide - FirewallShop.com

Log&Report
FortiGate Logging
Log&Report
This section provides information on how to enable logging, viewing of log files
and the viewing of reports available through the web-based manager. FortiGate
units provide extensive logging capabilities for traffic, system and network
protection functions. Detailed log information and reports provide historical as well
as current analysis of network activity to help identify security issues and reduce
network misuse and abuse.
This section describes:
• FortiGate Logging
• FortiGuard Analysis Service
• Log severity levels
• High Availability cluster logging
• Storing Logs
• Configuring FortiGuard Analysis Service
• Log types
• Accessing Logs
• Viewing log information
• Customizing the display of log messages
• Content Archive
• Alert Email
• Reports
Note: VDOMs may affect logging and reporting features in FortiOS 3.0MR5. Before
configuring logging and reporting features in FortiOS 3.0MR5, make sure these features
are accessible in the VDOM where you want to configure logging and reporting features.
FortiGate Logging
A FortiGate unit can log many different network activities and traffic including:
• overall network traffic
• system-related events including system restarts, HA and VPN activity
• anti-virus infection and blocking
• web filtering, URL and HTTP content blocking
• signature and anomaly attack and prevention
• spam filtering
• Instant Messaging and Peer-to-Peer traffic
• VoIP telephone calls
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 469