Fortinet Community

chall_FTNT · 12-02-2021

Description FortiAnalyzer certificate does not reflect correct serial number. Earlier license files (from 2018 or earlier) for the FortiAnalyzer VMs did not include a certificate which reflected the actual serial number of the FortiAnalyzer. This bec...

chall_FTNT · 12-23-2020

Description This article describes how to use a custom Event Handler and Report in FortiAnalyzer to detect activity that may be related to "Sunburst" backdoor software in a compromised SolarWind’s Orion IT monitoring and management software update sy...

chall_FTNT · 05-20-2020

DescriptionAs part of a forensic analysis, it might be necessary to gather data and generate reports for specific users. This article shows how a user filter can be applied to a report in order to show detailed activity for a specific user. The artic...

chall_FTNT · 10-17-2018

DescriptionOccasionally, FortiGuard will send updates to FortiGates for existing predefined certificates as part of a certificate bundled update. In some cases, the certificate uses a new name, which ends up being considered "new configuration" on th...

chall_FTNT · 08-02-2018

DescriptionWhen configuring Log Storage Policy, it is common to keep Archive data longer than Analytic data. But what happens when you want to run a report for a time period which is older than your oldest Analytic data?SolutionReports can only be ru...

chall_FTNT · 10-22-2020

Please see Technical Tip: Alerting when FortiAnalyzer stops receiving logs from a FortiGate

chall_FTNT · 09-10-2020

We acknowledged that we should not allow manual entry of IP address in bug ID 536856. The field was greyed out as of 6.2.3 & 6.4.0.

chall_FTNT · 09-10-2020

The FortiAnalyzer will learn about the new IP from the FortiGate. The IP is only used by the FortiAnalyzer when adding the device for the first time. After that, it is the serial # which is important.

chall_FTNT · 07-03-2020

Limitations of FortiAnalyzer Cloud (relative to FortiAnalyzer) are listed in FortiAnalyzer Cloud Release Notes: https://docs.fortinet.com...of-fortianalyzer-cloud

chall_FTNT · 07-01-2020

Assuming the header/footer policies are not yet on the FortiGate in question ... Do the policies reference an interface which is not yet mapped for the device you are installing on? You could turn on securityconsole debug for more detail on what is h...

Fortinet Community

User Statistics

User Activity

Technical Tip: FortiAnalyzer certificate does not reflect correct serial number

How to use FortiAnalyzer to detect a “Sunburst”/SolarWinds Hack

How to Apply a User Filter to a Report for Forensic Analysis

Technical Tip: Configuration changes after Certificate Bundle Updates (FortiGuard) and impact upon FortiManager

Technical Note: How to run a report on Archive data

Re: FAZ alert handler when Firewall stops sending logs

Re: Change IP-address of device in Fortianalyzer

Re: Change IP-address of device in Fortianalyzer

Re: FAZ/Cloud FAZ comparison

Re: Global policy package on devices

Technical Tip: FortiAnalyzer certificate does not ...

Technical Tip: Using 'exec migrate' to migrate to ...

Technical Tip: When a manual rebuild of hcache tab...

Technical Tip: How to send only event logging to d...

Re: Push objects from FortiManager to FortiGate

Re: FAZ alert handler when Firewall stops sending ...

Re: FortiManager "Consolidated Policies" display o...

Re: Migrate Fortimanager to new appliance

Re: FortiView

Re: Address Group to Filter Reports

KCS

Fortinet Training Institute