Technical Tip: How to download logs on FortiSASE

[nathan_h]

Description

This article describes how to download a log on FortiSASE. If having an issue accessing a website when connected to FortiSASE, providing these logs to technical support will be helpful.

Scope

FortiSASE.

Solution

1. Log in to FortiSASE Portal (FortiSASE).
2. In FortiSASE, there are different types of Logs as shown in the screenshot below:
   
   
   a. Internet Access Traffic: These logs will show only SIA traffic from the endpoint that is connected to the VPN to the Internet.
   b. Private Access Traffic (From Hubs and To Hubs): These logs will show only SPA traffic from an endpoint that is connected to VPN toward any destination that is reachable through SPA Tunnel.
   c. Agentless ZTNA: Only the traffic of agentless ZTNA will show.
   d. All Internet and Private Access Traffic: This option shows both SIA and SPA traffic.
   
   
3. Navigate to the Directory below to download the Forward Traffic Logs. Select the Download icon under Analytics -> Traffic -> All Internet & Private Access Traffic (it is possible to filter the logs if needed).

 

3. Navigate to the Directory below to download the Security Traffic Logs. Select the Download icon under:

Analytics -> Security -> AntiVirus (it is possible to filter the logs if needed).
Analytics -> Security -> Web Filter With Inline-CASB (it is possible to filter the logs if needed).
Analytics -> Security -> Intrusion Prevention (it is possible to filter the logs if needed).
Analytics -> Security -> File Filter (it is possible to filter the logs if needed).
Analytics -> Security -> Data Loss Prevention (it is possible to filter the logs if needed).
Analytics -> Security -> DNS Filter (it is possible to filter the logs if needed).
Analytics -> Security -> Application Control with Inline-CASB (it is possible to filter the logs if needed).
Analytics -> Security -> SSL Inspection (it is possible to filter the logs if needed).