Skip to main content
MasVin22
New Member
October 4, 2024
Question

I Have Issue on Netflow FortiGate

  • October 4, 2024
  • 2 replies
  • 1581 views

Hi, All. 

I have a some network on my office. This network is use a fortigate, i try to build some network monitoring with Elastiflow. Activate a netflow on my fortigate success, but i have some issue. Why on my network monitoring netflow is not show me a TCP Flags, such as SYN, RST, ACK, and other. The software elastiflow is good working, because i try to my other device such as MikroTik is they can show me TCP Flag types.

In my case, i need to show the connection with TCP Flag, because with them i can analysis some traffic port scanning or bruteforce with filter the TCP Flag (syn). 

Any one can help me what the problems ?

 

FortiGate 

2 replies

Shashwati
Staff
Staff
October 4, 2024
johnathan
Staff
Staff
October 4, 2024

TCP State is not supported with the FortiGate's netflow unfortunately. You can see all supported values here: https://docs.fortinet.com/document/fortigate/7.4.5/administration-guide/448589

Never trust a computer you can't throw out a window.