Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Network_Engineer
New Contributor III

If I Put UTM in the firewall policy will it collect logs?

Or where can I get the logs output?

1 Solution
iskandar_lie
Staff
Staff

Hi, 

 

Under the security profile, start from Antivirus, and so fort - they are UTM. You can enable it by pressing the slide. 

 

this is to clarify you question about UTM and Sec. events :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Difference-between-Security-Events-and-All...

 

Regards,

 

Lie

View solution in original post

4 REPLIES 4
jintrah_FTNT
Staff
Staff

Hi,

 

In the firewall policy, you may enabled UTM as needed to record security events by default. There is also an option to log all sessions,

jintrah_FTNT_0-1652172094105.png

 

The logs can be viewed under Log & Report section provided logging to memory/disk/FortiAnalyzer have been enabled( for ref on memory logging, Technical Note: How to configure logging in memory... - Fortinet Community). 

 

best regards,

Jin

Network_Engineer

Hi,

In your screenshot, where is the option to enable UTM?

What is the difference between UTM and security events? 

iskandar_lie
Staff
Staff

Hi, 

 

Under the security profile, start from Antivirus, and so fort - they are UTM. You can enable it by pressing the slide. 

 

this is to clarify you question about UTM and Sec. events :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Difference-between-Security-Events-and-All...

 

Regards,

 

Lie

Rathan_FTNT
Staff
Staff

Hello,

Also, you can set the log severity to information to view almost all logs 

The command in CLI will be as below

config log memory filter
set severity information 
end 

Similarly, for analyzer, you can replace "memory" with "analyzer"  for sys log "syslog"

Refer to the below log severity levels 

https://docs2.fortinet.com/document/fortimanager/6.0.10/log-message-reference/547625/priority-levels

 

EMEA TAC Engineer