Skip to main content
papapuff
New Member
October 10, 2017
Question

Ask - Log all connected devices (direct and indirect to fortigate) and backup periodically

  • October 10, 2017
  • 2 replies
  • 3985 views

Hi there,

we use FG-60D as our UTM.

in simple way, we can say our network diagram as below:

internet <--> Fortigate <--interface 1 --> switch hub - users

                                  <--interface 2 --> Wifi Router - users

                                  <--interface 3 --> Device

 

We want to have log for all devices and all events, especially:

- devices that being connected and had connected.

- IP conflict event (record Device ID, mac ID, interface, and IP)

 

and the log backup to email or usb drive.

 

is that possible? if yes, how to do that? what we need and how to config.

 

Thanks in advance.

 

    2 replies

    MikePruett
    New Member
    October 16, 2017

    FortiAnalyzer etc is mostly for Fortinet devices.

     

    Unless I am misunderstanding your ask...I think something like Splunk/FortiSIEM or another syslog type of product would best suit you.

    emnoc
    New Member
    October 16, 2017

    Suggestions

     

     

    1:a local sylog-ng collector

    2:loggly

    3:splunk and  few collectors is what I would look at

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!