FortiGate Administration Guide - FirewallShop.com

Log&Report
Storing Logs
Figure 326:Configuring a connection to the FortiAnalyzer unit
To configure the FortiGate unit to send logs to the FortiAnalyzer unit
1 Go to Log&Report > Log Config > Log Setting.
2 Select FortiAnalyzer.
3 Select the blue arrow to expand the FortiAnalyzer options.
4 Set the level of the log messages to send to the FortiAnalyzer unit.
5 Enter the Server IP address of the FortiAnalyzer unit.
6 Select Apply.
The FortiAnalyzer unit needs to be configured to receive logs from the FortiGate
unit after configuring log settings on the FortiGate unit. Contact a FortiAnalyzer
administrator to complete the configuration.
Note: The FortiGate unit can log up to three FortiAnalyzer units. The FortiGate unit sends
logs to all three FortiAnalyzer units where the logs are stored on each of the FortiAnalyzer
units. This provides real-time backup protection in the event one of the FortiAnalyzer units
fails. This feature is only available through the CLI. See the FortiGate CLI Reference for
more information.
Connecting to FortiAnalyzer using Automatic Discovery
You can connect to a FortiAnalyzer unit by using the Automatic Discovery feature.
Automatic discovery is a method of establishing a connection to a FortiAnalyzer
unit.
When you select Automatic Discovery, the FortiGate unit uses HELLO packets to
locate any FortiAnalyzer units available on the network within the same subnet.
When the FortiGate unit discovers the FortiAnalyzer unit, the FortiGate unit
automatically enables logging to the FortiAnalyzer unit and begins sending log
data, if logging is configured for traffic and so on, to the FortiAnalyzer unit.
The Automatic Discovery feature is disabled by default on the FortiAnalyzer unit
and must be enabled on the FortiAnalyzer unit. The FortiAnalyzer unit requires 3.0
firmware to use this feature. It is recommended to contact a FortiAnalyzer
administrator to verify that the Automatic Discovery feature is enabled on the
FortiAnalyzer unit before using this feature.
To enable automatic discovery
1 Go to Log&Report > Log Config > Log Setting.
2 Select the blue arrow for FortiAnalyzer to expand the options.
3 Select Automatic Discovery.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 473