Manually adding a device

Device

Manually adding a device

You can add devices to the FortiAnalyzer unit’s device list either manually or automatically. If you have configured Unregistered Device Options to automatically register known-type devices, you may only need to manually add unknown-type devices such as a generic Syslog server. If you have configured Unregistered Device Options to require it, you may be required to add all devices manually. For more information, see “Configuring unregistered device connection attempt handling” on page 79.

If the device has already been automatically added, the device was added to the device list using default settings. You can reconfigure the device connection by manually editing the device in the device list.

Manually adding a device to the device list, or editing its configuration, configures connections from the device but does not automatically establish a connection. You need to configure the device to send traffic to the FortiAnalyzer unit to establish a connection. For more information, see the FortiGate Administration Guide, FortiMail Administration Guide, FortiManager Administration Guide, FortiClient Administrator’s Guide, or your Syslog server’s documentation. If there is no explicit option to log specifically to a FortiAnalyzer unit, you can use options for remote logging to a Syslog server.

Due to the nature of connectivity for certain high availability (HA) modes, FortiGate units in an HA cluster may not be able to send full content archives and quarantine data. For more information, see the FortiGate HA Overview.

All FortiClient installations are added as a single device, rather than as one device configuration per FortiClient installation, and their log messages are stored together. Use the FortiAnalyzer reporting features, to obtain network histories for individual FortiClient installations.

You must add the FortiManager system to the FortiAnalyzer device list to remotely administer the FortiAnalyzer unit using a FortiManager system. Additionally, you must also:

enable web services on the FortiAnalyzer network interface that will be connected to the FortiManager system

register the FortiAnalyzer unit with the FortiManager system

be able to connect from your computer to the web-based manager of both the FortiManager system and the FortiAnalyzer unit.

For more information on enabling web services, see “Administrative Access” on page 45. For more information on configuring remote management of FortiAnalyzer units using a FortiManager system, see the FortiManager Administration Guide.

Note: Remote logging from FortiClient installations requires FortiClient 3.0 MR2 or later.

 

FortiAnalyzer Version 3.0 MR7 Administration Guide

80

05-30007-0082-20080908

Page 82
Image 82
Fortinet 3.0 MR7 manual Manually adding a device