I have a FortiAnalyzer VM64 with a 60 day trial license. I am currently sending logs from my main 600C firewall to it. I am in FortiView and searching by specific IP. It gives me source and destination IP for http traffic. However it will not provide UL information. The IP address is useful but without a URL I have to research each destination IP with makes finding the destination URL very difficult. Is there a way to have it show me the URL? This log is being fed from a 600C firewall. Do I have to make changes on the firewall for the URL to come across? Pic attached.
CAlengua
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello Steven Lengua,
You are looking to the FortiWiew directly - I am not sure that the URL is there - I thing the traffic log is displayed there. What you need is the Webfilter log.
Go to FortiView -> Log View (at the bottom left corner) -> Security -> Webfilter
AtiT
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1633 | |
1063 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.