日志和报告

记录日志

 

 

以下操作设置日志的记录方式为记录到硬盘:

1 进入日志与报告 > 日志设置

2 选择 记录到本地 。

3 输入一个日志文件的 最大值 ( 以兆字节为单位) 。

当日志文件的大小达到这一最大值的时候,当前日志文件将被保存并关闭。系统将创 建一个新的当前日志文件用来记录日志。默认的最大系统日志文件的大小是 10M 字节, 您可以设置的最大值为 2G 字节。

4 输入一个创建日志的 时间间隔 (以为单位)

在达到指定的时间间隔后,当前日志文件将被保存和关闭,一个新的文件被创建。默 认的时间间隔是 10

5 选择您希望记录到日志的消息的紧急程度。

FortiGate 会将所有不低于您所选择的级别的消息记录进日志。例如,如果您希望记录 紧急、警报、危险和错误消息,选择错误。

6

单击配置策略。

 

 

 

要对 FortiGate 过滤的日志类型和记录的事件进行配置,按

第 244 页 过滤

 

日志消息

第 245 页 配置通讯日志中的步骤操作。

7

设置当磁盘被写满时的日志选项:

 

 

覆盖

当硬盘满的时候删除最的日志文件。覆盖是默认的选项。

 

阻塞数据流

当硬盘被写满的时候阻塞所有的网络流通。

 

 

不记录日志

当硬盘被写满的时候止记录日志消息。

 

8

单击 应用 保存您的日志设置。

 

将日志记录到系统内存

如果您的 FortiGate 没有安装硬盘,您可以使用以下操作将 FortiGate 配置为保一些系统内存用来记录当前的事件日志、攻击日志、防病毒、网页过滤、电子邮件日 志消息。将日志记录到内存允许对近期的日志条目进行快速访问。FortiGate 可以在系 统内存中保有限的日志消息。一旦所有的可用内存被用掉了,FortiGate 会删除最 早的日志消息。如果 FortiGate 重新启动,所有的记录会丢失。

 

注意:FortiGate 设备只能在系统内存中记录事件日记和攻击日志。

 

 

以下操作可以将日志设置为记录到内存:

 

1

进入 日志与报告 > 日志设置

 

2

选择 在内存中记录日志

 

3

选择您希望记录到日志的消息的紧急程度。

 

 

FortiGate 会将所有不低于您所选择的级别的消息记录进日志。例如,如果您希望记录

 

紧急、警报、危险和错误消息,选择错误。

 

4

单击配置策略。

 

 

要对 FortiGate 过滤的日志类型和记录的事件进行配置,按

第 244 页 过滤

 

日志消息中的步骤操作。

 

5

单击应用。

 

FortiGate-500 安装和配置指南

243

Page 255
Image 255
Fortinet 500 manual 将日志记录到系统内存, 243, 进入日志与报告 日志设置。, 进入 日志与报告 日志设置 。 选择 在内存中记录日志 。

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.