For a primer on OFTP, refer to the following documentation: OFTP - Optimized Fabric Transfer Protocol.
The FortiGate uses OFTP to synchronize data with a number of Fortinet products, a full list of which can be found here: Outgoing Ports.
Notable products include the following: FortiAnalyzer (log forwarding/synchronization). FortiGate Cloud (log forwarding/synchronization). FortiSandbox (file upload).
As part of the OFTP connection setup, the FortiGate will make an outbound connection to port TCP/514 on the destination device.
This connection utilizes TLS encryption, and it is possible to log the status of this connection using the log-ssl-connection option under config system global.
Note:
that this command only controls logging for OFTP-based connections; it does not control logging for any other form of TLS connection on the FortiGate (local-out, local-in, or forward traffic).
config system global
set log-ssl-connection { enable | disable }
end
The default setting for log-ssl-connection is disable. When set to enable, the following log IDs will be produced whenever the TLS state changes for an OFTP connection: 38408 - LOGID_EVENT_OFTP_SSL_CONNECTED
date=2026-08-06 time=10:22:41 eventtime=1786036960713033210 tz="-0700" logid="0100038408" type="event" subtype="system" level="information" vd="root" logdesc="SSL connection established" dstip=173.243.132.157 dstport=514 action="connect" status="success" msg="SSL connection to 173.243.132.157 is successfully established."
38409 - LOGID_EVENT_OFTP_SSL_DISCONNECTED
date=2026-08-06 time=10:22:41 eventtime=1786036960590638450 tz="-0700" logid="0100038409" type="event" subtype="system" level="information" vd="root" logdesc="SSL connection closed" dstip=173.243.132.157 dstport=514 action="disconnect" status="success" msg="SSL connection to 173.243.132.157 is successfully closed."
38410 - LOGID_EVENT_OFTP_SSL_FAILED
date=2026-08-06 time=11:55:30 eventtime=1786042530360193299 tz="-0700" logid="0100038410" type="event" subtype="system" level="information" vd="root" logdesc="SSL connection failed" dstip=10.0.1.123 dstport=514 reason="ssl_connect() failed: 1 (error:0A000086:SSL routines::certificate verify failed)" action="connect" status="failure" msg="SSL connect to 10.0.1.123 has failed."
date=2026-08-06 time=11:55:30 eventtime=1786042530360092259 tz="-0700" logid="0100038410" type="event" subtype="system" level="information" vd="root" logdesc="SSL connection failed" dstip=N/A dstport=N/A reason="hostname mismatch" action="info" status="failure" msg="Certificate is invalid, subject: /C=US/ST=California/L=Sunnyvale/O=Fortinet/OU=FortiManager/CN=FMGVMSTMXXXXXXXX/emailAddress=support@fortinet.com"
Related documents: Troubleshooting Tip: FortiGate to FortiAnalyzer connectivity Technical Tip: FortiGate FIPS-CC enabled to send log to FortiAnalyzer Technical Tip: How to use an alternate server certificate for OFTP communication between FortiGate and FortiAnalyzer | 
