Technical Tip: How to send encrypted logs to Syslog server

Use following CLI commands:

config log syslogd setting
    set status enable

    set mode reliable

end

It is necessary to Import the CA certificate that has signed the syslog SSL/server certificate.
Once it is imported: under the System -> Certificate -> remote CA certificate section, the same one will be used by the Firewall to validate the server certificate during the TLS/SSL handshake.

config log syslogd setting

    set enc-algorithm high-medium/high/low

    set certificate “       “ <- It is only necessary to map the local SSL certificate if the server requires client certificate verification. If the server is not configured for client certificate authentication/validation, it will be necessary to leave this field as blank (default).

Related documents:

• Config log syslogd settings - FortiGate CLI reference
   
• Add TLS/SSL support for local log syslog forwarding