Manuals / Brands / Computer Equipment / Network Card / Fortinet / Computer Equipment / Network Card

Fortinet FortiLog-100, FortiLog-400, FortiLog-800 Viewing reports

1 124

Download 124 pages, 2.28 Mb

Reports Viewing reports

FortiLog Administration Guide 05-16000-0082-20050115 65

Viewing reports

Use the FortiLog web-based manager to view a list of the generated reports. The

generated reports are available in HTML, PDF, RTF and ASCII text formats,

depending on the output configuration. For details on setting output options see

“Choosing the report destination and format” on page63.

There are two ways of viewing reports from the web-based manager; a roll up of all

reports selected or individual reports.

Reports are categorized by the date and time the FortiLog unit generated the reports.

The report appears in the reports list with the report name, date and time the report

was generated.

For example, a report name of “Report 1-2004-12-15-2112”, is a report called “Report

1”, generated on December 15, 2004 at 9:12pm.

To view a generated report

1Go to File Browse > Reports.

Figure 34:Viewing reports

2Do one of the following:

Report Files Select the report name to view a roll up of all reports in HTML format.

Select the Plus sign to expand the report to view the individual reports in

HTML format.

Action Select Edit to rename the report.

Select Delete to remove the report from the FortiLog hard disk.

Check

All/Check None

Select to select all reports for removal from the FortiLog hard disk.

Other Formats Select an alternate format to view the report.

Report

Report

sub-categories

categories

Contents

Main FortiLog Administration Guide Page Table of Contents 4 Page 6 Introduction 8 Operational Modes Active Mode Introduction Operational Modes FortiLog Administration Guide 05-16000-0082-20050115 9 Figure 3: FortiLog Active mode network architecture Passive Mode Figure 4: FortiLog unit in Passive mode Internet About this guide FortiLog documentation Related documentation FortiGate documentation 12 FortiManager documentation FortiClient documentation FortiMail documentation Fortinet Knowledge Center Customer service and technical support Page Setting up the FortiLog unit Checking the package contents 16 FortiLog-800 Accessories for each model Back Front Hardware specifications Dimensions Planning the installation Connecting the FortiLog unit Configuring the FortiLog unit Using the web-based manager 20 Using the command line interface Page Page Connecting to the FortiLog Unit Sending device logs to the FortiLog unit Configuring FortiGate unit running FortiOS 2.8 24 Configuring FortiGate devices running FortiOS 2.5 Configuring FortiMail devices 26 Configuring the FortiLog unit Adding a device Defining device port interfaces 28 Creating Device Groups Managing the FortiLog unit Status Status Page Changing the FortiLog host name Changing operating modes 32 Viewing system resources information Changing the firmware Installing firmware from a system reboot Page Testing a new firmware image 36 Installing a backup firmware image Page 38 Switching to a backup firmware image Switching to the default firmware image Backing up system settings Downlading the FortiLog debug log 40 Restoring system settings Restore factory default system settings ! RAID 42 Config Network RAID To configure the FortiLog RAID level and check the RAID disk space, go to System > Config > RAID. 44 Log settings Log policy 46 Time Options Admin Configure Administrator access 48 Administrator account levels Administrator options Changing the Administrator password Devices (Active mode) Page Alert Email Server 52 Local Device (Active mode) Creating a new device alert Page Alerts Network Sharing Defining IP aliases Page Reports Creating and generating a report 58 Configuring report parameters Configuring a report query 60 Creating a query profile Selecting the devices for the report Creating a device profile Select filtering options 62 Creating a filter profile Setting a report schedule Creating a report schedule profile Choosing the report destination and format 64 Creating a report destination and format profile Reports on demand Viewing reports Page Vulnerability reports Creating and generating a report 68 Selecting report result parameters Selecting plug-ins Creating a plug-in profile Selecting the scan targets for the report 70 Creating a scan target profile Choosing the report destination and format Creating a report destination and format profile 72 Viewing the vulnerability report Using Logs The Log view interface The log viewer interface provides a means of viewing device log files. Viewing logs The log viewer interface provides a display of log data that you can organize and format. Finding log information Page Importing log files Log Search Log watch (Active mode) Event correlation (Active mode) Page Using the FortiLog unit as a NAS Connecting to the FortiLog file system 82 Providing access to the FortiLog hard disk Selecting a file sharing protocol Adding and modifying user accounts Adding and modifying group accounts Assigning access to folders Page Modifying the user or group folder access Setting folder and file properties FortiLog CLI reference CLI documentation conventions 88 Connecting to the CLI Connecting to the FortiLog-800 console Setting administrative access for SSH or Telnet 90 Connecting to the FortiLog CLI using SSH Connecting to the FortiLog CLI using Telnet ! CLI commands The FortiLog CLI commands include: execute branch get branch set branch unset branch execute branch 92 get branch Use get to display settings, logs, or system information. Page 94 set branch Use set to configure settings, logs, or system information. set alertemail Use set alertemail to configure alert mails. Page Page set console Use set console to set console configuration. 98 set log Use set log to configure log settings Page Page Page Page set NAS 104 set report Use set system to configure the FortiLog system settings. Use set report to configure the FortiLog report settings. set system Page Page Page Page Page 110 unset branch Use unset to remove configuration of alert email, log, and system. Page Page Appendix A: Log Report Types Network Activity Web Activity 114 FTP Activity FTP reports record total FTP access activities including traffic direction, sites and connections. Terminal Activity Terminal activity reports record total Terminal/CLI access activities. Mail activity reports record Email traffic and connections. Mail Activity 116 Intrusion Activity Intrusion activity reports record top network attacks and top attacks by a specific time. Antivirus Activity Web Filter Activity Mail Filter Activity 118 VPN Activity Content Activity Page Page Index A B C D 122 L M N O