Fortinet Security Fabric settings do not go downstream?

Forum|Forum|2 years ago
March 14, 2024
8 replies
2921 views

I'm trying to enable logging for allowed traffic.
In the downstream devices this option is greyed out.
So i figured i had put it throught in the fabric root.
After i enabled log allowed traffic in the fabric root, and applied it.
It seems to only work for the fabric root itself and not the downstream devices.
Whenever i log in to the downstream devices the option still shows as disabled and greyed out

What can i do to fix this?

hbac

Staff

Hi @michaeldijk,

It should be synchronized from root to downstream. You can check this article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-Security-Event-logging-on-policy-with/ta-p/220357

Regards,

michaeldijkAuthor

New Member

So even if it doesn't show on downstream fortigates, The function is still enabled?

smkml

Staff

Hi @michaeldijk ,

If you are using Security Fabric, downstream device will follow configuration on FortiAnalyzer and FortiManager in root device, and not be able to configure by itself

michaeldijkAuthor

New Member

Understood.
The question is why the option does not show as checked in downstream devices, but does show as checked in the root device.

smkml

Staff

Hi @michaeldijk ,

Can you share some screenshot what you have mentioned?

michaeldijkAuthor

New Member

Basically i have an 80F fortigate as Root of the fabric.
With the following log settings.
Then i have a 40F fortigate which is downstream from that specific 80f Fortigate.
But those log settings show as disabled and are grayed out
How come?
80F root Fabric connections80F root log settings40F downstream connections40F downstream log settings

michaeldijkAuthor

New Member

@smkml

Sign up

Login with SSO

Login to the community

Login with SSO