Skip to main content
aahmadbasri
Staff
Staff
December 28, 2023

Technical Tip: How to integrate FortiProxy with FortiAnalyzer

  • December 28, 2023
  • 0 replies
  • 938 views
Description This article describes how to integrate FortiProxy with FortiAnalyzer.
Scope FortiProxy 7.0.x, FortiAnalyzer 7.2.x.
Solution

To configure FortiProxy to send logs to FortiAnalyzer, follow these instructions.

 

  1. Check compatibility between the versions of FortiProxy and FortiAnalyzer in use. See the documentation.
  2. Configure FortiProxy.

    Go to Security Fabric -> Fabric Connectors -> FortiAnalyzer Logging -> Edit.
 

KB6_1.png

 

This can be done from the CLI by going to:

 

config log fortianalyzer setting

    set status enable

    set server <FAZ IP>

end

 

  1. Select 'OK' and the following will be shown. Select 'Accept'. 

KB6_2.png

 

The status of FortiAnalyzer will first show as unauthorized:

 

KB6_3.png

 

  1. Log in to FortiAnalyzer to authorize the device. Select the alert:

KB6_4.png

 

  1. Authorize the device.

KB6_5.png

 

The device can be added to another ADOM if required. After, select 'OK'. 

 

KB6_6.png

 

  1. When the status changes to 'success', this means the device has been added to the FortiAnalyzer and will start sending logs as per the configuration.
 

KB6_7.png