Staff

Troubleshooting Tip: Fail to send FortiClient logging to FortiAnalyzer-Cloud

Description

This article describes what to check when failing to send FortiClient logging to FortiAnalyzer-Cloud.

Scope

EMS v7.2.x.

Solution

To ensure FortiClient can send the logging to FortiAnalyzer Cloud:

Sample Topology:

Endpoint FortiClient -------> Firewall------> FortiAnalyzer Cloud (xxxxxx.xxxxxx.fortianalyzer.forticloud.com) Tcp/514

Sample setting in endpoint profile:

Related document:

The FortiAnalyzer Cloud requires an additional license with minimum SKU FC1-10-AZCLD-463-01-DD to enable FortiAnalyzer-Cloud to receive logs from FortiClient.

Related documents:

Sign up