Reports without FortiAnalyzer or FAMS

[FgjNet]

Hi, I have one question regarding Web Filtering reports in Fortinet devices. One of our customer has FortiWifi 60B and they are using Web Filtering feature (Flow based). They don' t have budget to afford FortiAnalyzer at the moment. Theirs CEO wants simple reports about Web Filtering activity (check below). Top 10 Visited Websites (past month) URL Category Number of visits www.google.com Information 10234 Top 10 Blocked Websites (past month) URL Category Number of visits www.milfz.com Pornography 734 Due to strick local legislation (European Data Privacy Act) they are not permited to collect information which user (username or IP address) visited some particular website. Is there any chance to collect information about Web Filter activity direct on FortiWifi device (via syslog, vis snmp, or via script). Idea behind this is collect on regular basis (5 minut) or via syslog and store only allowed information " URL, Category, Allowed/Blocked Count" information on Linux server (mysql). At the end of the month they would create custom report for their needs. Thank you.

[ede_pfau]

You can enable syslog on the same page where you activate FortiAnalyzer output. You' d have to parse the records yourself and cumulate, do statistics etc. No big deals but it might take a good hour of programming.

[FgjNet]

Cool. That is an answer which I was expecting :) Thanks.

[billp]

The syslog would record the IP and userID associated with each website, right? You might be able to purge the log routinely after dumping the related fields to a database using a Perl script.

[FgjNet]

Hi Billp, that is my intention :) Thanks.

[oliverlag]

Hi! I' m insterested in this because of same privacy limitation in Europe. Is there a way to completely hide these sensitive data (user,ip,etc)? not just hide the colums.. thanks Oliver