Device
FortiAnalyzer Version 3.0 MR7 Administration Guide
05-30007-0082-20080908
•
•
For more information about on configuring device connection
permissions, see
Secure Connection
Indicates whether an IPSec VPN tunnel has been enabled for
secure transmission of logs, content and quarantined files. A
locked icon indicates that Secure Connection is enabled.
Enable and configure secure connections in the CLI. The secure
tunnel must be configured on both ends of the tunnel: the
FortiAnalyzer unit and the device.
Secure Connections cannot be configured with FortiMail units,
FortiClient installations, or Syslog devices. For more information
on the CLI command, see the
On a FortiAnalyzer unit:
config log device
end
On a FortiGate unit:
config system fortianalyzer
end
On a FortiManager unit:
config fmsystem log fortianalyzer
end
Caution: The locked icon does not indicate successful secure
transmission — it only indicates whether the Secure Connection
feature is enabled.
For example, if Secure Connection is enabled but not yet
configured, the locked icon will appear, but the FortiAnalyzer unit
cannot create a secure tunnel without being configured first.
For more information on the secure connection and fallback
behavior, see
Caution: Changing a device's FortiAnalyzer settings clears
sessions to its FortiAnalyzer unit's IP address. If the FortiAnalyzer
unit is behind a NAT device, such as a FortiGate unit, this also
resets sessions to other hosts behind that same NAT.
To prevent disruption of other devices' traffic, on the NAT device,
create a separate virtual IP for the FortiAnalyzer unit.
Disk Space (MB)
The amount of the FortiAnalyzer disk space allocated for the
device and how much of that space is used. For more information
Used/Allocated
about on disk space usage by quarantine files, see
quarantined files" on page
Action
Select Edit to reconfigure the device connection.
Select Delete to remove a device from the list. If the Delete option
does not appear for the device, first remove it from all device
groups, then delete the device.
Tx indicates logging access for all devices managed by the
FortiManager system.
Rx indicates that the FortiManager system can remotely
administer the FortiAnalyzer unit.
"Devices Privileges" on page
FortiAnalyzer CLI
edit <devname_str>
set secure psk
set psk <presharedkey_str>
set id <devid_str>
set encrypt enable
set psksecret <presharedkey_str>
set localid <devname_str>
set secure_connection enable
set psk <presharedkey_str>
set localid <devname_str>
"Unregistered vs. registered devices" on page 77
131.
Viewing the device list
82.
Reference.
"Viewing
75