FortiGate Administration Guide - FirewallShop.com

Log&Report
Log types
Page
Navigation
Report Files
Started
Finished
Size (bytes)
Other Formats
Action
Select from the various arrows to go to the next page, previous
page, last or first page. You can also enter a number to view that
page of log messages. For example, entering the number 5
displays the fifth page.
Displays the generated reports. Select the report name to view a
roll up of all reports in HTML format.
The report appears in the reports list with the report name, date
and time the report was generated.
Select the blue arrow to expand the report to view the individual
reports in HTML format.
Indicates the date and time when the FortiGuard Analysis server
generated the report.
Indicates the date and time when the FortiGuard Analysis server
completed the report. If the FortiGuard Analysis server is in the
process of generating a report, a progress bar will appear in this
column.
The file size of the report in HTML format. The generated reports
are available in HTML, PDF, RTF and ASCII text formats,
depending on the output configuration.
Select a file format to view the generated report.
Select Edit to rename the report.
Select Delete to remove the report from the FortiGuard Analysis
server.
You can also view sample reports to see how log data is displayed in a report by
selecting Sample Reports on the Report Browse page.
Log types
The FortiGate unit provides a wide range of FortiGate features to log, enabling
you to better monitor activity that is occurring on your network. For example, you
can enable logging IM/P2P. These log messages provide detailed information on
the activity occurring on your network of IM/P2P programs and their users.
This topic also provides details on each log type and how to enable logging of the
log type.
Before enabling FortiGate features, you need to configure what type of logging
device will store the logs. See “Storing Logs” on page 472 for more information.
Traffic log
The Traffic Log records all the traffic to and through the FortiGate interfaces. You
can configure logging of traffic controlled by firewall policies and for traffic
between any source and destination addresses. You can apply the following
filters:
Allowed traffic
Violation traffic
The FortiGate unit logs all traffic that is allowed according to the
firewall policy settings.
The FortiGate unit logs all traffic that violates the firewall policy
settings.
Note: You need to set the logging severity level to Notification when configuring a logging
location to record traffic log messages. Traffic log messages generally have a severity level
no higher than Notification. If VDOMs are enabled, make sure the VDOM you are currently
in allows access for enabling traffic logs.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 481