Packet Capture on Fortigate 50E and 80E

[asimula]

Dear All, i need to sniff the traffic on those two Fortigates:

Fortigate 50E with Firmware 5.6.4 

Fortigate 80E with Firmware 6.0.0

How can enable a Packet Capture Feature from gui ? I can't find it anywhere .

thanks

Antonio

[Toshi_Esumi]

For GUI packet capture w/ 5.4, 5.6, the FGT needs to have an internal storage (see the cookbook below).

[link]https://cookbook.fortinet.com/packet-capture-56/[/link]

And both models don't have it. Instead you can capture/sniff packets via CLI and convert the output to a pcap file with a tool.

http://kb.fortinet.com/kb/viewContent.do?externalId=11186

Apparently 6.0 has changed the rule for the disk requirement.

https://forum.fortinet.com/tm.aspx?m=152545