Fortinet FortiGate FortiGate-1000A Administration Manual page 363

Log & Report
FortiGate-1000A/FA2 Administration Guide
.
FortiLog A FortiLog unit. The FortiLog unit is a log analyzer and manager that can
combine the log information from various FortiGate units and other firewall
units. To enable content archiving with a firewall
to select the FortiLog option and define its IP address.
Disk The FortiGate disk (if the FortiGate unit has one).
Memory The FortiGate system memory. The FortiGate system memory has a limited
capacity and only displays the most recent log entries. Traffic and content
logs cannot be stored in the memory buffer. When the memory is full, the
FortiGate unit begins to overwrite the oldest messages. All log entries are
deleted when the FortiGate unit restarts.
Syslog A remote computer running a syslog server.
WebTrends A remote computer running a NetIQ WebTrends firewall reporting server.
FortiGate log formats comply with WebTrends Enhanced Log Format (WELF)
and are compatible with NetIQ WebTrends Security Reporting Center 2.0 and
Firewall Suite 4.1.
Figure 190:Log setting options for all log locations
To configure Log Setting
1 Go to Log&Report > Log Config > Log Setting.
2 Select the check box to enable logging to a location.
3 Select the blue arrow beside the location.
The setting options appear.
4 Enter the settings the logging location requires.
5 Repeat steps 2 through 8 to configure other logging locations.
6 Select Apply.
FortiLog settings
IP:
Level:
Enable encryption
The IP address of the FortiLog unit that manages the logs.
The FortiGate unit logs all messages at and above the logging severity
level you select. For example, if you select Error, the unit logs Error,
Critical, Alert and Emergency level messages. See
severity levels," on page
Select to enable encryption of file transfer.
01-28011-0254-20051115
Protection
364.
Log config
profile, you need
Table 38, "Logging
363