Traffic Logs on Firewall

[blanke]

Sorry, this might be a stupid question, but does the likes of the Fortigate 120G which has no hard drive, provide traffic logs and visibility? Can I log onto a box and see a host trying to access a website etc? Or would I really need Forti Analyzer for this and long term storage?

I presume the 121G will log to the internal hard drive for and retain logs for a while

[funkylicious]

you can see logs if you have the option to save them to memory but this is for short term and at reboot they are lost.

as for long term, you can either use FAZ or send them to a syslog, a 121G could offer an option for saving them.

[Yurisk]

The logs in FGT's memory and logs sent by it and stored in FAZ are exactly the same logs by contents  - what differs is only log retention duration. FGT models w/o a hard disk limit logs retention up to 24 hours, but also the log buffer is circular so on busy firewall with lots of logs generation only few hours back may be available. Models with a hard disk usually guarantee to keep logs at least 7 days back + enable you to generate local Reports from those logs (alike FAZ reports).  And of course when you have logs stored on FAZ the retention period is limited only by its disk capacity and your volition.