Denied logs are not getting in external netflow collector.

[lakshmank]

Hi all,

We are using  Fortigate 40F device and it is configured to send Netflow to an external collector.

In firewall, there is deny rule which blocks internet access for some users. but there are no logs for blocked traffic on the collector.

Can anyone please help me how to send blocked logs to the Netflow collector??

[Anonymous]

Hello lakshmank,

Can you please confirm if you are seeing the blocked logs under the Forward Traffic Logs on Fortigate?
Is the logging enabled(Log all) on the policy which is blocking this traffic ?