Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
aproost
New Contributor

Need to mirror the Internal Fortigate port with Fortilink and FortiSwitches

I've got a client that is gonna have a Connectwise SIEM (Perch) sensor placed in the network.

 

Normally the internal Fortigate Port on the Switch is being mirrored. But with this client the Internal Port is also the FortiLink to Fortiswitche(s). The Port where the Fortigate is connected is port 48.

 

How can I create A mirror port on Port 48, without breaking the FortiLink to the FortiSwitches? 

The Perch Sensor is connected on Port 30.

3 REPLIES 3
Anthony_E
Community Manager
Community Manager

Hello,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Anthony-Fortinet Community Team.
Anthony_E
Community Manager
Community Manager

Hello,

 

We are still looking for someone to help you.

We will come back to you ASAP.


Regards,

Anthony-Fortinet Community Team.
funkylicious
SuperUser
SuperUser

Hi,

If I'm reading and understanding this correctly, you should be able to configure a RSPAN directly on the FortiSwitch not pushed from the FGT, https://community.fortinet.com/t5/FortiSwitch/Troubleshooting-Tip-Unable-to-setup-capture-for-port-c...

 

"jack of all trades, master of none"
"jack of all trades, master of none"
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors