logging allowed traffic delay

[#1]

Hi all! We are testing our 2 new Fortigate1000 and our Fortianalyzer800 and we have some promblems logging the accepted traffic. We have detected a delay in the allowed traffic logging of about 2 minutes and a half, while denied traffic appears inmediatly in our FortiAnalyzer. We' ve been analyzing the traffic out from Fortigates and we think that the problem is not in the Fortianalyzer. Fortigates seem to delay the logs' sending. Is anyone experiencing something like this? Thanks in advanced! Maria

[red_adair]

could it be that only a " session" is logged. eg f it' s closed again ?

[#3]

Yes, I think so!