Technical Note: log-attack-context not available in FortiManager 5.4 GUI
Description
Solution
The FortiOS parameter "log-attack-context" used to be available in the FortiManager v5.2 GUI but is not available anymore in the FortiManager v5.4 GUI.
config ips sensor
edit "default"
config entries
edit 1
set log-attack-context enable
next
end
next
end
The field is absent from both the IPS sensor and from the CLI only objects.
Solution
Scripts can be used to configure this value on the FortiManager database. To do this, Run script on = "Policy Package or ADOM Database"
Script details
When the script is run on the ADOM database, the administrator can install the change on the target FortiGates.
Script details
config ips sensor
edit "default" ----{ Select IPS sensor
config entries
edit 1
set log-attack-context enable
next
end
next
end
When the script is run on the ADOM database, the administrator can install the change on the target FortiGates.