Skip to main content
nlutsenko
nlutsenko
New Member
January 24, 2025
Question

How can I sign IP addresses in FORTIANALYZER to make it clear in reports??

  • January 24, 2025
  • 1 reply
  • 894 views

Hi everyone,

 

I am encountering an issue with FortiAnalyzer while generating my report. Many IP addresses are displayed without their corresponding hostnames.

 

I attempted to use Subnets, but it did not work as expected. My task:that every IP in report will has "descriptions" (They will be signed)

 

Does anyone know how I can achieve this? Any guidance would be greatly appreciated.

Thank you!

1 reply

AEK
SuperUser
AEK
SuperUser
January 26, 2025

Hi Lutsenko

If you enabled "Resolve Hostnames" in the FGT Log Settings then FGT should be able to resolve the IP addresses from the hosts' DNS requests if they are in clear text (not TLS). In case your clients use directly the IP address to reach the destination then FGT will try resolve the hostnames via PTR records (reverse DNS).

To resolve the local IP addresses you need also to configure your FGT to resolve from your local DNS server, typically your AD server(s).

AEK
Terms & ConditionsAccessibility statement