Voip Log; Log Access - Fortinet Fortigate-5000 series Administration Manual

Log&Report

VoIP log

1
2
3
4
5
1
2
3
4
5
6
7
8

Log Access

FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102
You can now log Voice over Internet Protocol (VoIP) calls. You can also configure
VoIP rate limiting for Session Initiated Protocol (SIP) and Skinny Client Control
Protocol (SCCP) or Skinny protocol. SIP and SCCP are two types of VoIP
protocols. Rate limiting is generally different between SCCP and SIP. For SIP, rate
limiting is for that SIP traffic flowing through the FortiGate unit. For SCCP, the call
setup rate is between the FortiGate unit and the clients because the call manager
normally resides on the opposite side of the FortiGate unit from the clients.
To enable VoIP logs
Go to Firewall > Protection Profile.
Select the Edit icon for a protection profile.
Select the blue arrow to expand the Logging options.
Select Log VoIP Activity.
Select OK.
To configure VoIP activity
Go to Firewall > Protection Profile.
Select the Edit icon for a protection profile.
Select the blue arrow to expand the VoIP options.
Select the SIP and SCCP checkboxes.
Enter a number for requests per second in the Limit REGISTER request
(requests/sec) (SIP only) field.
Enter a number for requests per second in the Limit INVITE request
(requests/sec) (SIP only) field
Enter a number for the maximum calls per minute in the Limit Call Setup
(calls/min) (SCCP only) field.
Select OK.
The FortiGate unit enables you to view the logs stored in memory, hard disk or
stored on a FortiAnalyzer unit running FortiAnalyzer 3.0. The FortiGate unit also
enables you to view logs stored on the FortiGuard Log & Analysis server.
Logs are accessed in the Log Access menu. The Log Access menu provides a tab
for memory, hard disk, FortiAnalyzer unit, and the FortiGuard Log & Analysis
server. Each tab provides options for viewing log messages, such as search and
filtering options, including selecting the log type you want to view.
Note: The FortiAnalyzer unit must be running firmware version 3.0 or higher so the
FortiGate unit can view logs that are located on a FortiAnalyzer unit.
Note: If VDOMs are enabled, make sure the VDOM you are currently in allows access to
FortiGate logs stored on the system memory, hard disk, FortiAnalyzer unit or the FortiGuard
Log & Analysis server. Certain VDOMs may only allow access to certain FortiGate features.
Log Access
419