Technical Tip: How to schedule SPA report in FortiSASE
Description
This article describes how to schedule Secure Private Access (SPA) reports in FortiSASE, allowing automated monitoring and reporting of SPA activity, traffic session.
Scope
FortiSASE.
Solution
- Go to Operation -> Reports -> Scheduled reports.
- Select the SPA report, and enable the status.
- Carefully look into the report dependencies:
- Application Control.
- Tunnel.
- Requires SSL Deep Inspection.
- Policy Logging.
Scheduled reports will only generate accurate results if all associated dependencies are properly configured.
In the case of the SPA report, application control monitoring must be enabled for the relevant application categories.
In the Security Profile Group, the action should be Monitor and not allow for the required application categories, and the same security group should be mapped in the SPA policy.
A SPA tunnel must be properly configured.
SSL Deep Inspection should be enabled in the relevant security group, and traffic logging must be turned on in the associated policy.
To send the report via email, first create an email group specifying the recipients, subject line, and message body:
- Reports are delivered to the administrator as shown below:
- LINK OUTAGE INCIDENTS.
- LINK DEGRADATION INCIDENTS.
- POP-DOWN INCIDENTS.
- TRAFFIC DISTRIBUTION OVER APPLICATION.
- SD-WAN PERFORMANCE STATUS.
Note:
When generating the SPA report, ensure that the selected time range falls within the configured log retention period.
Related document:
