Skip to main content
Hohemheim
New Member
May 28, 2020
Question

Inbound Traffic Microsoft Teams

  • May 28, 2020
  • 1 reply
  • 3084 views

Hi, I'm new at Forti (and networking). I like to know how to obtain an inbound log of the aplication Microsoft Teams, how many sessions, etc. Can you point me any direction? 

 

this is what I deduced so far (Image)

 

Thank you

 

Best Regards

 

Jponce

 

    1 reply

    lobstercreed
    New Member
    May 29, 2020

    Well for starters you're looking in the wrong log.  You want the "Forward traffic" log for traffic that the FortiGate forwards along the way.  Local traffic is for traffic with the FortiGate itself as the destination.

     

    Next, your concept of traffic is wrong.  When you load a webpage most of the traffic is inbound, yes, but the request is initiated outbound which is what matters where firewalls are concerned.  So if you were looking for SSH traffic you would look for traffic with port 22 as the destination port.

     

    However, this is unlikely to help you much with Teams as much of it is regular old HTTPS traffic.  Honestly I'm no expert as we've avoided using Teams in our environment, but you'll have better luck with application control than with simple port-based searches.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!