Logging to FAZ with CSF without encryption?

[tanr]

Hi All,

I was just skimming through cookbook articles on the Cooperative Security Fabric and noticed that the FortiAnalyzer CSF recipe says to not encrypt logs sent to the FAZ.  The reason given is that log traffic is within the CSF.  But I don't see anything that suggests the connection between the FAZ and the FGT is encrypted by the CSF group password.  In fact, the FAZ doesn't seem to be aware of CSF currently, and the FAZ admin guide doesn't refer to CSF.

Am I missing something?

Cookbook article is at: http://cookbook.fortinet.com/adding-fortianalyzer-security-fabric-54/ 

Thanks for any thoughts on this.