FortiGate-50A Installation and Configuration Guide Version 2.50

Logging and reporting

You can configure the FortiGate unit to log network activity from routine configuration changes and traffic sessions to emergency events. You can also configure the FortiGate unit to send alert email messages to inform system administrators about events such as network attacks, virus incidents, and firewall and VPN events.

This chapter describes:

Recording logs

Filtering log messages

Configuring traffic logging

Configuring alert email

Recording logs

You can configure logging to record logs to one or more of:

a computer running a syslog server,

a computer running a WebTrends firewall reporting server,

the console.

For information about filtering the log types and activities that the FortiGate unit records, see “Filtering log messages” on page 253. For information about traffic logs, see “Configuring traffic logging” on page 254.

This section describes:

Recording logs on a remote computer

Recording logs on a NetIQ WebTrends server

Log message levels

Recording logs on a remote computer

You can configure the FortiGate unit to record log messages on a remote computer.

The remote computer must be configured with a syslog server.

To record logs on a remote computer

1Go to Log&Report > Log Setting.

2Select the Log to Remote Host check box to send the logs to a syslog server.

3Type the IP address of the remote computer running syslog server software.

FortiGate-50A Installation and Configuration Guide

251

Page 251
Image 251
Fortinet 50A user manual Logging and reporting, Recording logs on a remote computer, 251