Configuring Log Filters; Enabling Traffic Logging - Fortinet FortiGate FortiGate-60M Administration Manual

Log config

Configuring log filters

Enabling traffic logging

350
Spam filter log
The Spam Filter Log records blocking of address patterns and content in IMAP and
POP3 traffic. You can apply the following filters:
SMTP
POP3
IMAP
Configure log filters for each location to which you are saving logs.
To configure log filters
1 Go to Log&Report > Log Config > Log Filter.
2 Enable the logging type for each location to which you want to log messages.
3 Select the specific log sub-types to log for each location.
4 Select Apply.
To enable traffic logging for an interface or VLAN subinterface
You can enable traffic logging for an interface or VLAN subinterface. All connections
to and through the interface are recorded in the traffic log.
Note: To record traffic log messages you must set the logging severity level to Notification when
configuring the logging location. Traffic log messages do not generally have a severity level
higher than Notification.
1 Go to System > Network > Interface.
2 Select the Edit icon for an interface.
3 Select Log.
4 Select OK.
5 Repeat steps 1 through 4 for each interface for which you want to enable logging.
6 Make sure you enable traffic logs for a logging location and set the logging severity
level to Notification or lower.
To enable traffic logging for a firewall policy
You can enable traffic logging for a firewall policy. All connections accepted by the
firewall policy are recorded in the traffic log.
1 Go to Firewall > Policy.
2 Select the Edit icon for a policy.
3 Select Log Traffic.
4 Select OK.
The FortiGate unit logs all instances of blocked email in SMTP traffic.
The FortiGate unit logs all instances of blocked email in POP3 traffic.
The FortiGate unit logs all instances of blocked email in IMAP traffic.
01-28007-0144-20041217
Log & Report
Fortinet Inc.