Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
barrycuda72
New Contributor

WebFilter URL Results different between Fortigate and FortiAnalyzer

On any of our Fortigate's with web filtering enabled if you goto 

Log&Report --- Webfilter and look at the URL Header you will see information "helloworld.com/"

The Fortigate's forward everything to the FortiAnalyzer if you goto

LogView -- Fortigate---Webfilter the only information in the URL filed is "/"

I forward the FortiAnalyzer logs to a Syslog (SIEM) server and not having the URL information is a real bummer.

I realize that I am not getting full URL information as we are not doing HTTPS inspection but I would at least assume if the Fortigate's have info in the URL field then the Analyzer should have that same info in its URL field.

 

 

 

0 REPLIES 0
Labels
Top Kudoed Authors