Fortigate-60f VPN user file logging

[INeedBob]

We have a Fortigate-60f and it'll give us basic logging of VPN users like who logged in and when and total bits sent and received. Is there any way to have this log files that they access or copy to and from the network over the VPN? I understand that this may require a subscription but I can't seem to find further information about how to set this up. Thank you!

[AEK]

Probably DLP feature can do that.

Check this docs:

https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/153498/data-loss-prevention

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Log-information-about-attached-files-on-em...

In case it doesn't help then you can have a good solution for that using a dedicated DLP solution, or by directly monitoring the right OS logs on the concerned servers, using a central log server, SIEM or similar.

[INeedBob]

Thanks for your reply. Digital loss prevention software is for blocking sensitive data while yes it often will also log everything it is mainly for filtering and can be expensive. This is a small client that doesn't have a SIEM server which is why I'm trying to get this information for the client of just the log of transactions from the fortigate firewall.

[INeedBob]

Nothing? Nada? lol

Fortinet? Isnt their an option for paying for more detailed reports of file access in the cloud system?

Thanks!