Antivirus Log; Web Filter Log - Fortinet Fortigate-5000 series Administration Manual

Log&Report
3

Antivirus log

1
2
3
4
5

Web filter log

1
2
3
4
5
6
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102
SSL VPN The FortiGate unit logs all administrator events related to SSL
VPN, such as SSL configuration and CA certificate loading and
administrator event
removal.
SSL VPN session The FortiGate unit logs all session activity such as application
launches and blocks, timeouts, verifications and so on.
event
Select Apply.
The Antivirus Log records virus incidents in Web, FTP, and email traffic. For
example, when the FortiGate unit detects an infected file, blocks a file type, or
blocks an oversized file or email that is logged, an antivirus log is recorded. You
can apply the following filters:
Viruses The FortiGate unit logs all virus infections.
Blocked Files The FortiGate unit logs all instances of blocked files.
Oversized Files/ The FortiGate unit logs all instances of files and email messages
exceeding defined thresholds.
Emails
AV Monitor The FortiGate unit logs all instances of viruses, blocked files, and
oversized files and email. This applies to HTTP, FTP, IMAP, POP3,
SMTP, and IM traffic.
To enable antivirus logs
Go to Firewall > Protection Profile.
Select the Edit icon beside the protection profile to enable logging of antivirus
events.
Select the blue arrow to expand the Logging options.
Select the antivirus events you want logged.
Select OK.
The Web Filter Log records HTTP FortiGuard log rating errors including web
content blocking actions.
To enable web filter logs
Go to Firewall > Protection Profile.
Select edit for a protection profile.
Select the blue arrow to expand the Logging options.
Select the web filtering events to log.
Select the FortiGuard Web Filtering Log rating errors (HTTP only), to log
FortiGuard filtering.
Select OK.
Log types
417