Content Archive - Fortinet Fortigate-5000 series Administration Manual

Log&Report

Content Archive

1
2
3
4
5
6
7
1
2
1
2
3
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102
The Content Archive menu enables you to view archived logs stored on the
FortiAnalyzer unit from the FortiGate web-based manager. The Content Archive
menu has four tabs, HTTP, FTP, Email, and IM where you can view each of these
archived log types.
Before viewing content archives, you need to enable this feature on your
FortiGate unit. Content archiving is enabled from within a protection profile. See
"Firewall Protection Profile" on page 271
content archiving in a protection profile.
Note: The FortiGuard Log & Analysis server only provides content summary of logs stored
on the server. Make sure the VDOM you are currently in allows access to viewing content
archived logs on the FortiGate unit and content summary logs from the FortiGuard Log &
Analysis server. Certain VDOM configurations only allow access to certain FortiGate
features.
To enable content archiving for your FortiGate unit
Go to Firewall > Protection Profile.
Select the Edit icon beside a protection profile.
Select the blue triangle to expand the Content Archive option.
Select the check boxes you require for Display content meta-information on the
system dashboard.
Select None, Summary or Full from each drop-down list you require for Archive to
FortiAnalyzer/FortiGuard.
Select the checkbox for Archive SPAMed email to FortiAnalyzer, if required.
Select OK.
If you are logging to the FortiGuard Log & Analysis server, only None and
Summary are available in the drop-down list for Archive to
FortiAnalyzer/FortiGuard.
Note: NNTP options will be supported in future releases.
To view content archives
Go to Log&Report > Content Archive.
Select the tab of the archived log type to view.
To view content summary logs from the FortiGuard Log & Analysis server
Go to Log&Report > Content Archive.
Select FortiGuard from Select Log Device drop-down list.
Select the tab of the content summary log type to view.
If you require to view logs in Raw format, select Raw beside the Column Settings
icon. See "Column settings" on page 423
Settings icon. If you are logging to a FortiGuard Log & Analysis server, you will
only see the content summary of logs. Content summary of logs do not contain
links because they are not archived.
for more information about enabling
for more information about the Column
Content Archive
425