FAZ 5.0.7 issues and Fortinet Logging in General

[Paul_S]

I am struggling to get my FAZ-VM 5.0.7 to function properly. I have some tickets open and I have found a few bugs. The FAZ 5.x family seems rough and unrefined. I tried 5.x many months ago, only to downgrade to 4.3, now I have upgraded to 5.0.7 recently to support my FGT that is on 5.2. I really like the FGT 5.2 OS, but the FAZ seems unreliable. What do other fortinet customers do? - Anyone else using FAZ 5.0.7? Do you like it? - If Not Fortianalyzer, then what other solutions do you like for saving and reviewing fortinet logs? we are mostly a windows shop. - Does anyone else have the opinion that the Fortigate family is really great, but the Fortianalyzer family is pretty poor? - Do other competitor Firewall vendor have these type of logging issues?

[Warren_Olson_FTNT]

Paul, I think in general every company has their wheelhouses and then they have to create products to support/accomodate their main product lines, and this is very difficult. At any rate, I' d be more interested to see what problems you are facing with FAZ to see if the forum can assist before discussing replacing its' functionality outright.

[Paul_S]

I am working with Fortinet Support to get my FAZ issues resolved. the most pressing issue right now is that I Cannot use the download feature to include all pages unless I first view in the GUI the last page. This is a bug that I just found for them and they are escalating. It does not help me right now. I am currently on page 104 with 500 results per page. I am trying to download 1 month' s worth of web filter traffic for a user.

[Warren_Olson_FTNT]

Paul, ok that issue does appear bug related. If there are other issues you want the forum to take a look at it please list them in reply. Thanks!

[Paul_S]

I just with the FAZ interface was more intuitive. It often seems unfriendly to use. - The column filters have to be enabled - The download button is not visible until you click the menu - If you set the limit box to anything besides " All" your results will be unpredictable. - also, google chrome and IE10 have trouble working, if at all. the interface wasmore straight forward in 4.3.x

[FatalHalt]

I have to disagree with you somewhat. Though I myself spend a lot of time in the FAZ and agree there' s room for improvement. -I haven' t had an issue with the time limit options, and in fact I use it quite a bit. Could you give an example of what you' re encountering? -Chrome works great for the FAZ over here, running Chrome 36 on FAZ 5.0.6 The bug about not being able to download the logs does suck, the same bug was present in 5.0.6 which I reported (although going to the last page doesn' t resolve the issue) and I' m disappointed to hear it' s not resolved in 5.0.7.

[Paul_S]

today is does work in chrome, must have been a chrome issue during my last post. The biggest issue for me right now in 5.0.7 is that I cannot download logs for " all pages" unless I browse to the last page first. there is no " last page" button. so I have to click " next" about 100 times, then click download " all pages" do you have that problem? are you on 5.0.7??

[FatalHalt]

Paul, I' m not running on 5.0.7 yet, still on 5.0.6. However, I do have a last page button that works the way it should, I' ve included a screenshot of how mine works. That' s a bad bug to run into, sorry you have to deal with it!

[Paul_S]

is that a traffic log screen or a webfilter. Can you test the web filter area and with a column filter enabled.

[Paul_S]

Is it just me or can you not column filter by date/time anymore in 5.0.7? can you guys filter by date/time in 5.0.6??