Send logs from FortiGate 40F firewall to LimaCharlie with encryption

[solo1]

I have OnPrem office enviroment with office laptops, a WiFi Router and a Fortigate 40F Firewall.

I want the Firewall logs to be ingested into LimaCharlie.

I have figured out that I can send Syslog to a virtual machine running Ubuntu with a LimaCharlie Adapter installed, which then can foward the data to LimaCharlie.

Is this the best method of doing it?
The data from FortiGate 40F to the virtual machine is not encrypted, is it? How can I encrypt it?

[hbac · Accepted solution]

Hi @solo1,

By default, it is not encrypted, but you can configure it to use TLS by following this article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Send-Syslog-over-TLS-to-a-rsyslog-server/t...

Regards,