Skip to main content
aproost
aproost
New Member
January 14, 2025
Question

Need to mirror the Internal Fortigate port with Fortilink and FortiSwitches

  • January 14, 2025
  • 3 replies
  • 1132 views

I've got a client that is gonna have a Connectwise SIEM (Perch) sensor placed in the network.

 

Normally the internal Fortigate Port on the Switch is being mirrored. But with this client the Internal Port is also the FortiLink to Fortiswitche(s). The Port where the Fortigate is connected is port 48.

 

How can I create A mirror port on Port 48, without breaking the FortiLink to the FortiSwitches? 

The Perch Sensor is connected on Port 30.

3 replies

Anthony_E
Staff
Anthony_E
Staff
January 17, 2025

Hello,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
Anthony_E
Staff
Anthony_E
Staff
January 21, 2025

Hello,

 

We are still looking for someone to help you.

We will come back to you ASAP.


Regards,

Best Regards
funkylicious
SuperUser
funkylicious
SuperUser
January 21, 2025

Hi,

If I'm reading and understanding this correctly, you should be able to configure a RSPAN directly on the FortiSwitch not pushed from the FGT, https://community.fortinet.com/t5/FortiSwitch/Troubleshooting-Tip-Unable-to-setup-capture-for-port-connected/ta-p/317964

 

"jack of all trades, master of none"
    Terms & ConditionsAccessibility statement