Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ebeaudette
New Contributor

IP Address to Hostname

Hi All: I have an FG100-A configured as a DHCP server on my internal network. I have some of the logging turned on and am seeing entries in my log files with IP addresses of my windows clients. I do not have an internal DNS server nor are the machines part of a domain but rather a workgroup. What is the best way to associate host names with the IP addresses and get that data to the FG so I can see hostnames in the log files? Is there also a way to disconnect certain sessions (hosts) on demand from within the FG Web UI? Please let me know. Thanks!
3 REPLIES 3
rwpatterson
Valued Contributor III

For part one and host name resolution, I think you need your own DNS server to do that. Someone correct me if I am wrong. If you have a Win2k or 2003 server, you can configure one for free (part of that OS). On the second issue, if you view the sesions (system, statistics), next to the session on the right, there is a garbage can. Click it, session dropped.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
UkWizard
New Contributor

Even if you did put in a dns server, the firewall WILL NOT do reverse lookups on the connections, so you will NEVER see hostnames in the logs. Suggest you think about using static IP' s instead. that way its easier to correlate the who is on what IP. or assign IP' s to specific machines within the DHCP settings, if possible.
UK Based Technical Consultant FCSE v2.5 FCSE v2.8 FCNSP v3 Specialising in Systems, Apps, SAN Storage and Networks, with over 25 Yrs IT experience.
UK Based Technical Consultant FCSE v2.5 FCSE v2.8 FCNSP v3 Specialising in Systems, Apps, SAN Storage and Networks, with over 25 Yrs IT experience.
ebeaudette
New Contributor

Thanks for the replies. An indirect way to tell who may be on which IP (when using dhcp) is by logging IM sessions and correlating screen names with IP addresses however IP address does not show up in the IM logs. Anyone know of a way to add it? Thanks for the replies. E
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors