Connecting To Fortianalyzer Using Automatic Discovery - Fortinet Gate 60D Administration Manual

Log&Report

Connecting to FortiAnalyzer using Automatic Discovery

FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
http://docs.fortinet.com/ • Feedback
Figure 430: Configuring a connection to the FortiAnalyzer unit
Expand
Arrow
To configure the FortiGate unit to send logs to the FortiAnalyzer unit
1 Go to Log&Report > Log Config > Log Setting.
2 Select the Expand Arrow beside Remote Logging to reveal the available options.
3 Select FortiAnalyzer.
4 From the Minimum log level list, select one of the following:
Emergency The system in unusable.
Alert Immediate action is required.
Critical Functionality is affected.
Error An erroneous condition exists and functionality is probably affected.
Warning Functionality might be affected.
Notification Information about normal events.
Information General information about system operations.
Debug Information used for diagnosing or debugging the FortiGate unit.
5 Select Static IP Address.
6 Enter the static IP address of the FortiAnalyzer unit in the Static IP Address field.
7 Select Apply.
The FortiAnalyzer unit needs to be configured to receive logs from the FortiGate unit
after you have configured log settings on the FortiGate unit. Contact a FortiAnalyzer
administrator to complete the configuration.
Note: You cannot configure a FortiAnalyzer unit to be a backup solution for the FortiGuard
Analysis server, and vice versa. If you require a backup solution for one of these logging
devices, using a Syslog server or WebTrends server is preferred.
You can connect to a FortiAnalyzer unit by using the Automatic Discovery feature. This
feature allows the FortiGate unit to find a FortiAnalyzer unit that is on the network within
the same subnet.
When you select Automatic Discovery, the FortiGate unit uses HELLO packets to locate
any FortiAnalyzer units available on the network within the same subnet. When the
FortiGate unit discovers the FortiAnalyzer unit, the FortiGate unit automatically begins
sending log data, if logging is configured for traffic and other events, to the FortiAnalyzer
unit.
Storing logs
651