Testing The Fortianalyzer Configuration - Fortinet Gate 60D Administration Manual

Storing logs

Testing the FortiAnalyzer configuration

652
The Automatic Discovery feature must be enabled on the FortiAnalyzer side to work
properly. The FortiAnalyzer unit requires 3.0 firmware (and higher) to use this feature.
Fortinet recommends contacting a FortiAnalyzer administrator to verify Automatic
Discovery is enabled on the FortiAnalyzer unit before using this feature.
To enable automatic discovery
1 Go to Log&Report > Log Config > Log Setting.
2 Select the Expand Arrow beside Remote Logging to reveal the available options.
3 Select FortiAnalyzer.
4 Select Automatic Discovery.
5 Select a FortiAnalyzer unit from the Connect To list, if available.
If no FortiAnalyzer unit is available, contact a FortiAnalyzer administrator to verify if
there is one on the network.
6 Select Discover.
The FortiGate unit searches within the same subnet for a response from any available
FortiAnalyzer units.
7 Select Apply.
Note: If your FortiGate unit is in Transparent mode, you must modify the interface in the
CLI before Automatic Discovery can carry traffic. Use the procedure in the Fortinet
Knowledge Center article,
interface to also carry traffic when using the Automatic Discovery feature.
After configuring FortiAnalyzer settings, test the connection between the FortiGate unit
and FortiAnalyzer unit to verify both devices are communicating properly. During testing,
the FortiGate unit displays information about specific settings for transmitting and
receiving logs, reports, content archive and quarantine files.
The FortiGate unit must learn the IP address of the FortiAnalyzer unit before testing the
connection. A false test report failure may result if testing the connection occurs before the
FortiGate unit learns the IP address of the FortiAnalyzer unit.
To test the connection, go to Log&Report > Log Config > Log Setting, expand Remote
Logging options, and then select Test Connectivity.
Figure 431: Test Connectivity with FortiAnalyzer
Fortinet Discovery Protocol in Transparent
FortiGate Version 4.0 Administration Guide
Log&Report
mode, to enable the
01-400-89802-20090424
http://docs.fortinet.com/ • Feedback