FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
carabhavi
Staff
Staff
Article Id 198272

Description

 

This article provides steps to generate and analyze local reports.

 

Scope

 

FortiGate.

Solution


FortiGate devices that have disk storage can generate local reports. The FortiGate local report has a default template and creating custom reports is not supported.

To verify the disk storage status execute the below command:

 

get sys status | grep disk

 

If log hard disk status is available then follow the below steps to enable the feature.

On the FortiGate GUI (FortiOS 7.2.3 and below): 

 

  1. Go to System -> Feature Visibility. Enable Local Reports and select 'Apply'.
  2. Go to Log & Report -> Log Settings, make sure 'Enable Local Reports' is enabled.

 

It can also be enabled from the CLI using the following commands:

 

config report setting
    set pdf-report enable 
end

config system setting 

   set gui-local-reports enable 

end 

 

  1. To generate reports, go to Log & Report -> Local Reports -> Generate Now. The reports can be scheduled at required times under Report Schedule.

 

hbac_0-1726319375909.png

 

On the FortiGate GUI (FortiOS 7.2.4 and above), Local reports is visible by default. To enable Local reports: 

 

  1. Go to Log & Report -> Log Settings -> Local Logs, enable 'Local reports'. 
  2. Go to Log & Report -> Reports -> Local -> Generate Now. 

 

It can also be enabled from the CLI using the following commands:

 

config report setting
    set pdf-report enable 
end

 

  1. The reports can be scheduled at required times under Report Schedule. It is also possible to enable 'Email Generated Reports' in order to receive reports via email. 

 

 

Note:

The Email Generated Reports option is available only if the email server and alert mail are configured. If the option is greyed out, refer to this article.

Local Report Contents and Analysis:

To get the reports with all the details, use the respective UTM in the policy.

Example: If logs regarding websites are required then Web Filter should be enabled in the firewall policy.


Report Contents:

  • Bandwidth and Applications.
  • Web Usage.
  • Emails.
  • Threats.
  • VPN Usage.
  • Admin Login and System Events.

FortiGate local reports are not customizable and can be scheduled for daily or weekly reports only.

 

Related articles: 

Technical Note: How to enable 'Email Generated Reports' when the checkbox is grayed out

Troubleshooting Tip: Email Generated Reports button is grayed out