Hi, I run into the same issue here. I am preconfiguring a FA400c at home, to be used in our company when I am ready testing etc.
I have connected some Fortigates (60c, 60B, 100d) and only the 60B sends its logs to the FA.
I took the Fortigate Cookbook and noticed that it says this:
Before configuring the FortiGate unit, ensure both the FortiGate unit and the FortiAnalyzer unit
have the same firmware version and maintenance release. If both do not have the same
firmware version and maintenance release, issues may arise, such as being unable to send
logs to the FortiAnalyzer unit.
Well, while typing this I see it doesn' t say ' Patch level' , so I can interpret this as it should be okay when the FGT and FA run on 4.0 MR3 with any patchlevel.
But I still don' t know why it doesn' t work. Maybe need to configure a FW policy to permit traffic to port 514 or so?
Kind regards,
Ralph Willemsen
Arnhem, Netherlands