Skip to main content
mauro
New Member
January 23, 2016
Solved

Fortigate cannot recognize application while logging

Hi all,

while I was looking at log (forward traffic) I realized that my Fortigate was unable to recognize application. In the "application name" column there is written for all packets logged unknown.

Do you have any idea about what is happening?

I am using a Fortigate 60D with 5.2.5 firmware

 

Thank You

 

Regads

 

    awasfi_FTNT
    Staff
    January 25, 2016

    Hello,

     

    Are you logging to memory?

    Check the severity under log memory filter and set it to information:

    # config log memory filter

    # get 

    # set severity information

    # end

    The same if you are logging to FortiAnalyzer or Fortiguard(forticloud).

     

    Regards,

     

     

     

     

    2 replies

    awasfi_FTNT
    Staff
    Staff
    January 25, 2016

    Hello,

     

    Are you logging to memory?

    Check the severity under log memory filter and set it to information:

    # config log memory filter

    # get 

    # set severity information

    # end

    The same if you are logging to FortiAnalyzer or Fortiguard(forticloud).

     

    Regards,

     

     

     

     

    mauro
    mauroAuthor
    New Member
    January 25, 2016

    Settings were:

    FGT60D4Q15006412 (filter) # get severity            : warning forward-traffic     : enable local-traffic       : disable multicast-traffic   : enable sniffer-traffic     : enable anomaly             : enable netscan-discovery   : enable netscan-vulnerability: enable voip                : enable

    I changed them as you suggested.

    Give me some time to check :)

     

    Thank You

     

    Regards

     

    M.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT