Fortianalyzer Query regarding log forwarding

[sivanathan]

Dear Team,

We have a requirement in fortianalyzer log forwarding.

Kindly let us know if this is possible.

Our requirement is,

We have a fortianalyzer in Location1 and Location2.

We have to integrate the two fortianalyzers in Location1 and Location2.

On Location1, the logs from fortigate should forward the logs to location1 fortianalyzer, until and unless the location1 fortianalyzer went down the logs should not be forwarded to location2 FAZ.

On Location2, the logs from fortigate should forward the logs to location2 fortianalyzer, until and unless the location2 fortianalyzer went down the logs should not be forwarded to location1 FAZ.

We dont want to forward the logs to both fortianalyzer at the same time and don't want to configure the HA bet the fortianalyzer.

Is this is possible via F5 GTM?

If acheivable via F5 GTM how the certificate validation will happen between fortigate and fortianalyzer. Because in between fortianalyzer and fortigate F5 GTM will be there.

Thanks,
T.Sivanathan

[amouawad]

Yes this feature is now available on FortiGates running 7.4.1.

https://docs.fortinet.com/document/fortigate/7.4.0/new-features/376839/support-switching-to-an-alter...