Top Web Sites data blank?

[cbaker]

Hello, I' ve setup a Fortianalyzer VM to test if a FortiAnalyzer will meet reporting requirements for a client. I' ve set up our Fortigate unit to log to it, I can see the UTM web filtering logs coming into the FortiAnalyzer, but then I look at any of the web usage logs or run reports, they are blank. All the other reports seem to be populating. I' ve got the UTM setting set to Monitor all categories, I' ve tried the " log all URLs" setting on and off. Is there something else I need to do to get this info to populate? The FortianalyzerVM is v5.0.7-build0321 140627 (GA), the Fortigate is v4.0,build0646,121119 (MR3 Patch 11) Any assistance is appreciated. Thanks

[cbaker]

As an update, the reports seem to be showing data but the FortiView does not.

[Delta]

Is the Fortigate a cluster or a single unit?

[cbaker]

Single Unit

[neonbit]

Hmm, your FortiGate is running 4.3, I don' t know if FortiView on the FAZ is actually supported for a release that old. Has anyone else tested FortiView on a FAZ 5.0.7 with a FGT 4.3?

[L_FTNT]

1. Fortiview on FAZ 5.0.7 supports FOS 5.0 & 5.2 The exception is that ' Top Cloud Application' only supports FOS 5.2; SSL Deep Inspection needs to be enabled on 5.2 FGT. 2. FortiView has MINIMAL support for FOS 4.3 Top Sources, Top Applications, Top Destinations may work for FOS 4.3 Top WebSites, Top Threats and Top Cloud Application will NOT work. Notes: Top Threats requires Client Reputation (aka Threat Weight) to be enabled on FOS. For FOS 5.0, by default, CR is not enabled so you need to enable it. For FOS 5.2, Threat Weight is enabled by default. Note that this setting is now located under FOS GUI: Logs & Reports -> Log Config Hope this helps, LC