日志和报告

配置报邮件

 

 

删除一个保存了的日志文件

按照如下步骤操作可以删除一个保存了的日志文件:

1 进入日志和报告 > 记录日志。

2 选择流量日志,事件日志,攻击日志,病毒防护日志,网页过滤日志,或者电子邮件 日志。

基于 Web 的管理程序列出了符合选定的类型的全部日志,在列表的顶部是当前日志。 对于每个日子后,列表显示了添加到这个日志的最后一个条目的日期和时间,日志文 件的大小和文件名。

3 要删除一个保存了的日志文件,单击删除。 单击确定以删除这个日志文件。

配置报邮件

您可以为 FortiGate 的报警邮件配置最多三个发送地址。您可以为病毒事件、阻塞 事件、入侵事件和防火墙或者 VPN 事件或者异常事件的启用报警邮件发送功能。在您 设置完邮件地址之后,可以通过发送测试邮件来测试您的设置是否正确。

·添加报警邮件地址 ·测试报警邮件 ·启用报警邮件

添加报警邮件地址

因为 FortiGate 设备使用 SMTP 服务器名来连接邮件服务器,所以它必须能够在您的 DNS 服务器上解析这个服务器名。因此,在您配置报警邮件之前确保您已经配置了至少 一个 DNS 服务器。

按以下方添加 DNS 服务器

1 进入 系统 > 网络 >DNS

2 如果还没有添加 DNS 服务器,则输入您的 ISP 提供的主 DNS 和辅助 DNS 的地址。

3 单击应用。

按以下方添加报警邮件地址

1 进入 日志和报告 > 报警邮件 > 配置

2 如果您的邮件服务器要求 SMTP 口令,选中 认证。

3 在 SMTP 服务器栏填写 SMTP 服务器的名字。这个 SMTP 服务器即是 FortiGate 设备用来 发送报警邮件的服务器,名字按以下格式填写:smtp. 域名 .com。

SMTP 服务器可以位于连接到 FortiGate 设备的任意网络中。

4 SMTP 用户 栏,按照以下格式输入一个有效的电子邮件地址:用户名 @ 邮件服务器 域名。

这个地址将出现在报警邮件的表单标题上。

5 在密码栏输入 SMTP 用户用来访问 SMTP 服务器的密码。 如果您选择了认证,则必须要输入密码。

FortiGate-500 安装和配置指南

251

Page 263
Image 263
Fortinet 500 manual 配置报警邮件, 删除一个保存了的日志文件, 添加报警邮件地址, 251

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.