FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
vshtaloja
Staff
Staff
Article Id 342436
Description

This article describes issues with 'Log all search keywords' not working after the firmware upgrade to FortiOS 7.4.

Scope FortiOS v7.4.2, v7.4.3, v7.4.4 and v7.6.0.
 

The identified issue, referenced as known issue 1045884, has been addressed and resolved in the firmware updates FortiOS version 7.4.5 and 7.6.1.

 

When enabling the 'Log All Search Keywords' feature in the web filter profile, it was observed that the 'Keyword' column failed to populate with data as expected.

 

config firewall policy

    edit 2

        set name "TestKeyword"

        set srcintf "port3"

        set dstintf "port2"

        set action accept

        set srcaddr "Test_User"

        set dstaddr "all"

        set schedule "always"

        set service "ALL"

        set utm-status enable

        set inspection-mode proxy

        set ssl-ssh-profile "deep-inspection"

        set webfilter-profile "Test Keyword"

        set nat enable

    next

end

 

Untitled picture.png

 

When using the the following CLI to search the event content log, no data is retrieved.

Webfilter content search log is not working either via CLI.

 

execute log filter category 3

execute log filter field eventtype content

execute log display

0 logs found.

0 logs returned.