FortiAnalyzer features vs FortiAnalyzer

[laf]

Hi guys,

I have a FGM running 5.4.2 and just turned ON FortiAnalyzer features .

Now can someone please share from its XP the difference between this and a dedicate FortiAnaliyzer unit (actually VM).

All our FGTs are used for: Firewall and VPN only - no UTM at all.

Thanks!

[neonbit]

The features & reports are exactly the same, its just the amount of GB's per day is a lot less for the price you pay on a FMG compared to a FAZ.

[laf]

So you're saying there's a HW limit of logs / day on FGM?

[MikePruett]

There is a limit on what the license can do (depending on the type of FortiManager you have deployed).

[Alby23]

And, in addition, I advise you that the licenses on the FMG are not stackable if we refer to the GB/day of logs; they're only stackable referring to the number of supported devices.

[laf]

Is there any CLI command to see all the details about license? Both on FGM and FAZ?

On the support.fortinet.com here's what I got:

Product Model: FortiManager-VM Serial Number: FMG-VM0A1 License Number: FMVM471 Supported Devices: 10 Registration Date: 2016-08-11 Description: FortiManager

Product Model: FortiAnalyzer VM Serial Number: FAZ-VM00 License Number: FLVMS471 GB Logs/Day: 1 Registration Date: 2017-03-08 Description: FortiAnalyzer

How can I find out the FGM log rate currently supported?

[neonbit · Accepted solution]

You have a FMG with a base license which can support upto 10 devices and has a 1GB per day log limit. This is exactly the same as your current FAZ base license.

If 1GB per day is all you need in your organisation then there is no benefit to getting a FAZ.

The problem arises when you want to increase the GB per day limit (more firewalls, more traffic etc).

When this happens the price to upgrade the FMG to increase the limit is quite steep. If you get a FMG +10 device license upgrade then this will increase the limit to 2GB per day. The next jump from this is the +100 device upgrade which will increase it to 5GB per day.

Increasing the GB per day limit on the FAZ is alot less expensive. To put this into perspective, it would be cheaper to upgrade the FAZ to 25GB per day than it will be to upgrade the FMG to 5GB per day.

The FMG with FAZ feature is really designed for companies that want to capture the event logs on their firewalls. If you want to capture more logs for app and user reporting then the FAZ is more cost effective.

[laf]

That's quite an explanation, thanks mate!