Viewing the device list

Device

Devices may automatically appear on the device list when the FortiAnalyzer receives a connection attempt, according to your configuration of Unregistered Device Options, but devices may also automatically appear as a result of importing log files. For more information, see “Importing a log file” on page 95.

To view the device list, go to Device > All.

Figure 1: Devices list

 

Add

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Edit

 

 

 

 

 

 

 

 

 

 

 

 

 

Delete

 

 

 

 

 

 

 

 

 

Block

 

 

 

 

Add Device

Select to manually add a new device to the device list.

 

For instructions on manually adding devices, see “Manually

 

adding a device” on page 80.

Show

Select the type of devices to display in the list. You can select

 

devices by type or by group, or select Unregistered to display

 

devices that are attempting to connect but that have not yet been

 

added.

Page

Enter a page number, then press Enter to display that page

 

number of the device list.

Unregistered Device Options

Select the options to instruct the FortiAnalyzer unit on how to handle connection attempts from unregistered devices. For more information, see “Configuring unregistered device connection attempt handling” on page 79.

Name

The name of the device in the device list. This can be any

 

descriptive name that you want assign to it, and does not need to

 

be its host name.

Hardware

The model of the device. For example, the device list displays a

 

FortiGate-300A model as FGT300A.

IP Address

The IP address of the device. If the device has not recently

 

established a connection, 0.0.0.0 appears.

Administrative

Domains

Log Tx Rx

Content Tx Rx

Quar Tx Rx

Report Tx Rx

The ADOM(s) to which the device is assigned.

This column does not appear on FortiAnalyzer-100/A/B models. Indicates connection permissions. Green check mark icons in:

Tx indicates the device is allowed to transmit to the FortiAnalyzer unit.

Rx indicates the device is allowed to view or retrieve items stored on the FortiAnalyzer unit.

Types of connections supported by each device type vary, and so it is normal for some device types to have no permission in Content (content archive), Quar (quarantine), and Report columns, or to have Tx but not Rx permission in the Log column. For example, Syslog devices are not capable of retrieving logs, and so have no associated Rx permission in the Log column. For FortiManager units, Tx and Rx indicators in the Log column differ in meaning.

FortiAnalyzer Version 3.0 MR7 Administration Guide

74

05-30007-0082-20080908

Page 76
Image 76
Fortinet 3.0 MR7 manual Add Device, Show, Unregistered Device Options, Hardware, IP Address