Fortianalyzer VM- User Detailed Browsing report

[alinbuletin]

Hi,

Having trouble getting User Detailed Browsing report using a demo Fortianalyzer VM64. All other reports are working fine. I'm using Fortigates 100c (v5.2.1 build 618) and an 100d (v 5.0 build 4429) in my network.

There are logs on FortiView tab but only this report isn't generating.

Are you aware of any limitation of this report using the demo version?

Thanks in advance

[hzhao_FTNT]

I just noticed you are using both 5.0 and 5.2 FGTs. Could you try to run this report with individual device?

[alinbuletin]

I've tried this already but I'll try again... did this too... empty reports for both boxes

[hzhao_FTNT]

OK, I will follow up your ticket.

[hzhao_FTNT]

Hi,

I found "Fontconfig error" when generating PDF report. Is your html report is OK? 

I also need to know your FAZ version, please run "get system status" under CLI. We had a similar bug before, but fixed in  September.

Regards,

hz

[alinbuletin]

I have 4 hours remaining time then the trial will expire.

HTML report looks ok, same as the PDF.

Here is the system status:

Platform Type                   : FAZVM64

Platform Full Name              : FortiAnalyzer-VM64

Version                         : v5.2.0-build0618 140826 (GA)

Serial Number                   : FAZ-VM0000000001

BIOS version                    : 04000002

Hostname                        : FAZVM64

Max Number of Admin Domains     : 10000

Admin Domain Configuration      : Enabled

Branch Point                    : 618

Release Version Information     : GA

Current Time                    : Fri Nov 07 07:55:06 EST 2014

Daylight Time Saving            : Yes

Time Zone                       : (GMT-5:00) Eastern Time (US & Canada).

64-bit Applications             : Yes

Disk Usage                      : Free 74.64GB, Total 78.74GB

License Status                  : Valid

[hzhao_FTNT]

Hi, this issue is existing in 5.2.0, but it has been fixed in 5.0.8/5.0.9 and coming 5.2.1. Could you request another FAZ VM and verify it again?

Thanks,

hz

[alinbuletin]

Same after changing FA version. There are logs on FortiView, almost all reports have data, except User Detailed Browsing.

FAZVM64 # get system status

Platform Type                   : FAZVM64

Platform Full Name              : FortiAnalyzer-VM64

Version                         : v5.0.9-build0345 141022 (GA)

Serial Number                   : FAZ-VM0000000001

BIOS version                    : 04000002

Hostname                        : FAZVM64

Max Number of Admin Domains     : 10000

Admin Domain Configuration      : Enabled

Branch Point                    : 345

Release Version Information     : GA

Current Time                    : Fri Nov 07 14:01:17 EST 2014

Daylight Time Saving            : Yes

Time Zone                       : (GMT-5:00) Eastern Time (US & Canada).

64-bit Applications             : Yes

Disk Usage                      : Free 76.29GB, Total 78.74GB

License Status                  : Valid

[hzhao_FTNT]

From your debug message, SQL works fine, empty report is caused by font config error when generating PDF report.

We need remote access to your FAZ, could you leave access info in your ticket?

[alinbuletin]

Ticket has been updated with TeamViewer info's.

[hzhao_FTNT]

After checking customer's FAZ, found the empty report caused by wrong user filter.

Issue resolved.