WAF profile in fortigate

Forum|Forum|2 years ago
January 30, 2024
4 replies
1909 views

Friends, a question, I enabled the WAF profile in monitoring mode in a publication that I created in my firewall. However, it doesn't show me logs. In my FAZ it doesn't show me the WAF option in security either.
Is there a command to enable log sending? Or is it normal that it doesn't show me logs?

mpftnt

Staff

Hi @unknown1020 .

Please refer to the following link:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-investigate-if-WAF-is-not-generating/ta-p/196635

unknown1020Author

Explorer III

Hello, thanks for the link, checking the configuration in the CLI of my firewall, it does not mention "log disable".
Do I have to run " set log enable " in all main config?

This is what it shows me on my firewall:
config signature
config main-class 10000000
set status enable
end
config main-class 20000000
set status enable
end
config main-class 30000000
set status enable
set severity high
end
config main-class 40000000
set status enable
end
config main-class 50000000
set status enable
set severity high
end
config main-class 60000000
set status enable
end
config main-class 70000000
set status enable
set severity high
end
config main-class 80000000
set status enable
set severity low
end