Skip to main content
aparna
New Member
May 3, 2019
Question

Fortigate not displaying the IDS/one-arm mode traffic on Log&Report->sniffer Traffic

I have a Fortigate 800C in Flow based inspection and configured one-arm sniffer mode on an interface and configured a firewall sniffer with below config

config firewall sniffer

set ips-sensore-status enable

set ips-sensor sniffer-profile

set logtraffic all

set interface port9

set status enable

 

But, i am not able to see the packet info/data on Log&Report->sniffer Traffic Page on Fortigate UI. Can anyone check/let me know is there any config/setting required on fortigate for it to work in sniffer mode for IDS...?

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT