Manuals
/
Fortinet
/
Computer Equipment
/
Network Card
Fortinet
FortiLog-100, FortiLog-800, FortiLog-400
manual
120
Models:
FortiLog-100
FortiLog-400
FortiLog-800
1
120
124
124
Download
124 pages
26.49 Kb
117
118
119
120
121
122
123
124
<
>
Specification
Password
Factory defaults Administrator
Login
Admin
Connecting the FortiLog unit
Config Network
Assigning access to folders
CLI commands
FortiGate 2.8 log settings
Page 120
Image 120
Appendix A: Log Report Types
120
05-16000-0082-20050115
Fortinet Inc.
Page 119
Page 121
Page 120
Image 120
Page 119
Page 121
Contents
FortiLog-100 FortiLog-400 FortiLog-800
January 15, 2004
Version 1.6 January 15 05-16000-0082-20050115
Trademarks
Regulatory Compliance
Table of Contents
Config Network
Managing the FortiLog unit
Reports
Setting folder and file properties
103
104
110
Introduction
FortiLog-400 FortiLog-100 FortiLog-800
Active Mode
Operational Modes
Passive Mode
Introduction
Explains how to install and set up the FortiLog unit
About this guide
FortiLog documentation
Explains how to configure VPNs using the web-based manager
Related documentation
FortiGate documentation
FortiManager documentation
FortiClient documentation
FortiMail documentation
Fortinet Knowledge Center
Customer service and technical support
Customer service and technical support
Setting up the FortiLog unit
Checking the package contents
Hardware specifications Dimensions
Weight
FortiLog-100 2.5 kg FortiLog-400 11 kg FortiLog-80014 kg
Planning the installation
Power requirements
Environmental specifications
Air flow
Connecting the FortiLog unit
Connecting the FortiLog unit
FortiLog unit Management PC
To connect the FortiLog unit to the network
Configuring the FortiLog unit
Using the web-based manager
Factory defaults Administrator
To connect to the web-based manager
Using the command line interface
To configure the FortiLog unit using the web-based manager
To configure the FortiLog unit using the CLI
Set system interface port1 mode static ip IPaddress netmask
Using the front panel buttons and LCD
Set the primary DNS server IP address
Set system dns primary IPaddress
Configuring the FortiLog unit
Connecting to the FortiLog Unit
Configuring FortiGate unit running FortiOS
Go to Log&Report Log Config
Sending device logs to the FortiLog unit
Configuring FortiGate devices running FortiOS
FortiGate 2.8 log settings
Configuring FortiMail devices
FortiGate 2.5 Log settings
Adding a device
To add a device
Groups from this tab
Unregistered
Defining device port interfaces
Creating Device Groups
To create a device group Go to System Devices Groups
Managing the FortiLog unit
Status
Status
Operating Mode
Interval
Refresh
Alerts
To change the operating mode in the CLI
Changing the FortiLog host name
Changing operating modes
Set system opmode activepassive
To change the firmware using the web-based manager
Viewing system resources information
Changing the firmware
Installing firmware from a system reboot
To change the firmware using the CLI
Execute restore image namestr tftpip
Execute restore image FortiLog400-v120.out
To install firmware from a system reboot
Press any key to enter configuration menu
Immediately press any key to interrupt the system startup
Enter Local Address
Testing a new firmware image
To test a new firmware image before installing it
Following message appears
Enter File Name image.out
Installing a backup firmware image
Save as Default firmware/Run image without savingD/R
Get system status
You can test the new firmware image as required
To install a backup firmware image
Type B
Switching to a backup firmware image
Switching to the default firmware image
To switch to the backup firmware image
Backing up system settings
To switch back to the default firmware image
Execute reboot
To backup up system settings Go to System Status Status
Restoring system settings
Restore factory default system settings
To restore system settings Go to System Status Status
Restoring a FortiLog unit
To upload the firmware image to the FortiLog unit
Press any key to begin download
Config
Network
Config RAID
Log settings
Config Policy
Log to Host
Port
Config Policy
Log policy
CSV format
Levels Description Generated by
Admin
Time
Options
Language
Configure Administrator access
Administrator account levels
Administrator options
Devices Active mode
Changing the Administrator password
To add an administrator account Go to System Config Admin
Device list
Adding and registering a device
Editing device information
Alert Email
Server
To edit a device Go to System Devices
Device Active mode
Local
Creating a new device alert
Attack Type
Attack Type Entry and listing Level of wait interval
Alerts
To add a device alert Go to System Alert Email Device
Virus Type
Network Sharing
Defining IP aliases
Window
To set host alias names Go to Reports IP Aliases
IP aliases
To create a report Go to Reports Config
Reports
Creating and generating a report
Select New and enter a name for the report
Configuring report parameters
To define report parameters Go to Reports Config
Set the following
Select Run now
Configuring a report query
To set the report queries Go to Reports Config
Resolve Service Names Ranked Reports show top
Select a report from the list Select Queries
To select the devices Go to Reports Config
Creating a query profile
Selecting the devices for the report
To create a query profile
To set the filtering on a log report Go to Reports Config
Creating a device profile
Select filtering options
To create a device profile
Setting a report schedule
To create a scheduled report Go to Reports Config
Creating a filter profile
To create a report filter profile
Creating a report schedule profile
Choosing the report destination and format
Select Schedule Select a day from the following
To create a report schedule profile
To generate a report on demand Go to Reports Config
Creating a report destination and format profile
Reports on demand
To create a pre-defined output selection
Viewing reports
To view a generated report Go to File Browse Reports
Roll up report
Individual reports
To create a report Go to Reports Config Vulnerability
Vulnerability reports
Creating and generating a report
Per device Resolve Host Names Resolve Service Names
Selecting report result parameters
Selecting plug-ins
To select the plug-ins Go to Reports Config Vulnerabilities
Creating a plug-in profile
Selecting the scan targets for the report
To create a plug-in profile
Creating a scan target profile
To add additional devices
To create a scan target profile
File
Browse/Reports hard disk
Email list
As an email attachment
Viewing the vulnerability report
Select the report name from the list of completed reports
Using Logs
Log view interface
Viewing logs
Finding log information
To view the device log files Go to File Browse Logs
Select the column header to change the sort order between
Ascending and descending order
Basic log filter
Importing log files
Alert level
To import a log file Go to File Browse Logs
Match Up and Down arrows
Log watch Active mode
Log Search
To set log watching Go to File Browse Logs
Show Up and Down arrows
Event correlation Active mode
Sort list
Event correlation Active mode
Using the FortiLog unit as a NAS
Connecting to the FortiLog file system
Providing access to the FortiLog hard disk
Select Enable for a file sharing protocol
Selecting a file sharing protocol
Adding and modifying user accounts
Assigning access to folders
Adding and modifying group accounts
To add a user group Go to Network Sharing Groups
Select Create New
Windows sharing configuration
Modifying the user or group folder access
NFS share configuration
Setting folder and file properties
To set file and folder permissions Go to File Browse Files
Owner
FortiLog CLI reference
CLI documentation conventions
Connecting to the CLI
Connecting to the FortiLog-800 console
FortiLog-800 login
To connect to the FortiLog-800 console
Setting administrative access for SSH or Telnet
To use the CLI to configure SSH or Telnet access
Welcome
Connecting to the FortiLog CLI using SSH
Connecting to the FortiLog CLI using Telnet
To connect to the CLI using SSH
To connect to the CLI using Telnet
CLI commands
FortiLog CLI commands include
Execute branch
Use get to display settings, logs, or system information
Get command architecture
Get branch
Get log logsetting
Get system admin
Get report resolve
Get report aliases
Use set to configure settings, logs, or system information
Use set alertemail to configure alert mails
Set alertemail command architecture
Set branch
String is the password
Namestr is the user name
Below
Set alertmail local time 0.5 1.0 3.0 6.0
CLI commands
Set alertmail device enable add leveltime
Settings originate from a singe source IP
Use set console to set console configuration
Set console
Use set log to configure log settings
Set log command architecture
Set log
YY-MM-DD
100
101
102
Set NAS
103
Set report command architecture
Set report
Set system
104
105
106
107
108
0.0
Trusthoststr is trusted host IP address
Netmaskstr is the netmask
109
Unset branch
111
112
Appendix a Log Report Types
Network Activity
Web Activity
113
FTP Activity
Terminal Activity
Mail Activity
115
Mail activity reports record Email traffic and connections
Intrusion Activity
Antivirus Activity
Web Filter Activity
Mail Filter Activity
117
Content Activity
VPN Activity
119
120
Index
121
122
Index
123
124
