Ask - Log all connected devices (direct and indirect to fortigate) and backup periodically

[papapuff]

Hi there,

we use FG-60D as our UTM.

in simple way, we can say our network diagram as below:

internet <--> Fortigate <--interface 1 --> switch hub - users

                                  <--interface 2 --> Wifi Router - users

                                  <--interface 3 --> Device

We want to have log for all devices and all events, especially:

- devices that being connected and had connected.

- IP conflict event (record Device ID, mac ID, interface, and IP)

and the log backup to email or usb drive.

is that possible? if yes, how to do that? what we need and how to config.

Thanks in advance.

[MikePruett]

FortiAnalyzer etc is mostly for Fortinet devices.

Unless I am misunderstanding your ask...I think something like Splunk/FortiSIEM or another syslog type of product would best suit you.

[emnoc]

Suggestions

1:a local sylog-ng collector

2:loggly

3:splunk and  few collectors is what I would look at