FortiGate Administration Guide - FirewallShop.com

Log&Report
Content Archive
Content Archive
The Content Archive menu enables you to view archived logs stored on the
FortiAnalyzer unit from the FortiGate web-based manager. The Content Archive
menu has four tabs, HTTP, FTP, Email, and IM where you can view each of these
archived log types.
Before viewing content archives, you need to enable this feature on your
FortiGate unit. Content archiving is enabled from within a protection profile. See
“Firewall Protection Profile” on page 329 for more information about enabling
content archiving in a protection profile.
You need to enable the following in the protection profile when configuring content
summary/archive:
• Antivirus for HTTP
• HTTPS
• Web URL Filter
• HTTPS for Web Filter HTTPS
The FortiGate unit only allows one sixteenth of its memory for transferring content
archive files. For example, for FortiGate units with 128RAM, only 8MB of memory
is used when transferring content archive files. It is recommended not to enable
full content archiving if antivirus scanning is also configured.
Note: NNTP options will be supported in future releases.
Configuring content archiving
Content archiving is configured and enabled in the Firewall menu. Content
archiving is only available when the FortiGate unit is configured to log to a
FortiAnalyzer unit. The FortiGuard Analysis Service only provides content
summary. If you are logging to the FortiGuard Analysis server, only None and
Summary are available in the Archive to FortiAnalyzer/FortiGuard drop-down list.
To enable content archiving for your FortiGate unit
1 Go to Firewall > Protection Profile.
2 Select the Edit icon beside a protection profile.
3 Select the blue triangle to expand the Content Archive option.
4 Select the check boxes you require for Display content meta-information on the
system dashboard.
5 Select None, Summary or Full from each drop-down list you require for Archive to
FortiAnalyzer/FortiGuard.
6 Select the checkbox for Archive SPAMed email to FortiAnalyzer, if required.
7 Select OK.
If you are logging to a FortiGuard Analysis server, you can only select None or
Summary for the option, Archive to FortiAnalyzer/FortiGuard. FortiGuard Analysis
Service only allows summary content archiving.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 491