Traffic analysis

[koelschman]

Hello, we want to connect a fortigate to span port on a cisco switch and than just to want to analyze traffic comming from the span port. One-Arm Sniffer would have been a choice, but it only logs traffic that matches security profiles. But we want to know the entire traffic, all communications and we want to send the logs towards the analyzer for further diagnostics/reporting. Does anyone know a solution? Regards

[TuncayBAS]

Did you think to put together as transparent?

[Delta]

You could create a custom IPS sig that would match all traffic ... Name LogAll F-SBID( --name " LogAll" ; --pattern " *" ;) and then create a profile that used it...