Description
This article describes how to perform packet capture from the FortiSASE portal.
Scope
FortiSASE.
Solution
For the Feature version of FortiSASE:
Option 1:
Navigate to 'Operations' and select 'Connected user'.
'Right-click' on the user for whom the packet needs to be taken.
Here, options will be available to select the security pop, Watch (VPN, Proxy, Thin Edge Device), and filter options to define the match criteria.
Option 2:
Navigate to 'Endpoint Management' and select the user of choice.
Then go to the packet capture tab:
Once applied to start capture, Real-time capture will be performed and displayed with the option to save or Restart Capture.
Related document:
