Technical Tip: How to Integrate FortiAuthenticator in FortiAnalyzer

[smkml]

Description

This article describes how to integrate FortiAuthenticator to see logs in FortiAnalyzer .

Scope

FortiAuthenticator and FortiAnalyzer 

Solution

Check if the version and FortiAuthenticator model is supported in these related documents:

https://docs.fortinet.com/document/fortianalyzer/7.2.1/release-notes/254858/fortiauthenticator

https://docs.fortinet.com/document/fortianalyzer/7.2.1/release-notes/663286/fortiauthenticator-model...

Make sure there is no connectivity issue between both, and that port UDP 514 is open if there is the device in between:

https://docs.fortinet.com/document/fortianalyzer/7.2.0/fortianalyzer-ports/290737/incoming-ports

Set the IP of FortiAnalyzer/FortiManager in Log Settings:

Authorized the device in FortiAnalyzer, and select FortiAuthenticator ADOM (need to enable ADOM).

FortiAuthenticator only generates Event type logs and will send to FortiAnalyzer the same.