Unregistered Device Options; Fortigate Units Connecting With Fortidiscovery - Fortinet FortiAnalyzer-100A Administration Manual

Devices

Unregistered device options

FortiGate units connecting with FortiDiscovery

1
2
3
FortiAnalyzer Version 3.0 MR3 Administration Guide
05-30003-0082-20060925
FortiAnalyzer-800 250 (FortiGate-50A to
FortiGate-800 only)
FortiAnalyzer-2000 500 (All FortiGate models)
FortiAnalyzer-4000/4000A 500 (All FortiGate models)
The maximums indicate a combined total of added and unregistered devices. If
there are more than the maximum allowed, the FortiAnalyzer unit will not allow
you to add more devices. You must either remove or block some devices.
When new devices attempt to connect to a FortiAnalyzer unit at its maximum
allowed devices, the FortiAnalyzer unit will reject the attempt by the device to
connect and automatically add the device to the list of blocked devices.
For details on blocked devices see
As devices are configured to send log packets to the FortiAnalyzer unit, you can
configure how the FortiAnalyzer unit handles the connection requests until you
can verify that they should be accepted. You can define what the FortiAnalyzer
unit does when it receives a request for a connection from a device.
Unregistered devices are included in the maximum devices available for a
FortiAnalyzer unit. Too many unregistered devices may prevent you from adding
a specific device. For details see
There are two options when configuring the unregistered device options:
• known devices
• unknown devices.
FortiDiscovery is a feature within FortiOS 3.0 for all FortiGate units. It is a protocol
where a FortiGate unit and a FortiAnalyzer unit are able to discover one another
and configure themselves automatically.
On the FortiGate unit, the FortiGate administrator sets the option to use automatic
discovery to connect and send log packets to the FortiAnalyzer unit. On the
FortiAnalyzer unit, you configure the FortiAnalyzer unit to accept the connection
request. Once configured, the FortiGate unit automatically sets up the
FortiAnalyzer connection and begin sending log data and other FortiAnalyzer
reports and log files. For details see
To configure unregistered FortiGate units with FortiDiscovery
Go to Device > All.
Select Unregistered Device Options.
Select from the following options in the Unregistered FortiGates (connect via
Auto-Discovery area:
Ignore Connection and Log Data
Allow connection, add to unregistered
table, but ignore the data
Allow connection, register
automatically, and store up to N MB of
data
1
1
1
"Blocked Devices" on page
"Maximum allowed devices" on page
"Unregistered device options" on page
All incoming FortiGate requests are not
accepted and the FortiAnalyzer will not add
them to the registered devices list.
Add the device to the list of unregistered device
list but do not store log data.
Add the device to the registered devices list,
and save the log packets to the hard disk, using
the defined amount of disk space.
Devices List
2500
5000
5000
74.
66.
67.
67