Re: What FortiOS Event Logs should i send to my SO...

mnovelli · 09-10-2024

Description This article describes that it is sometimes required to manage FortiSIEM components (Supervisors, Collectors, and Workers) using an external IT Monitoring platform. By default, the SNMPD service is installed on any nodes but it is disable...

mnovelli · 04-09-2024

Description This article describes how to configure custom listening ports on a Collector to receive logs through the syslog protocol. Scope FortiSIEM Solution Open a console or SSH connection to a Collector and follow these steps: Edit the /opt/phoe...

mnovelli · 02-23-2024

Description This article describes some situations where FortiSiem wrongly maps the Collector type value. Specifically, FortiSiem is recognizing a 500F hardware collector as a VM Collector type. Unregistering/re-registering the collector does not sol...

mnovelli · 11-28-2023

Hi I configured an Explicit Proxy on a Fortigate appliance. Fortigate use FSSO for remote users authentication and it has tree main interfaces: 1 LAN interface on which explicit proxy is configured and 2 WAN interface. My goal is that User A proxed t...

mnovelli · 10-28-2024

Hello @Furqan_Ahmed , it seems you receive an HTTP 403 - Forbidden Not Authorized response from Worker. You should check first of all the services status on Worker (execute phstatus command from CLI) and then investigate /opt/phoenix/logs/phoenix.Log...

mnovelli · 10-17-2024

Hello, I think that /usr/bin/lsb_release binary missing. You can try to install it using following command: sudo apt-get install lsb-release

mnovelli · 09-26-2024

If you configure a Vlan on a physical interface and then connect a PC to that interface, you need to configure vlan tag too on PC, otherwise it will not works.

mnovelli · 09-11-2024

you're welcome.

mnovelli · 09-10-2024

Hello, did you check the port speed and duplex? Are you connecting your Pc directly to LAN port? What about pinging the ip address of lan interface? Do you have huge packet loss? In this case maybe an RMA is recommended.

User Statistics

User Activity

Technical Tip: Monitor FortiSIEM nodes through an external SNMP server

Technical Tip: Modify Collectors' default listening port numbers used by FortiSIEM to ingest logs through the syslog protocol

Technical Tip: Manually change the collector_type value for the FortiSIEM Collector

#Fortigate Explicit Proxy Routing

Re: FortiSIEM | Collector critical health status

Re: Cant Install FortiSIEM Linux Agent on Ubuntu 21

Re: Internet not working after VLAN configuration

Re: What FortiOS Event Logs should i send to my SOC from my Fortigate Firewall?

Re: cannot access FG 50E through LAN ports

Re: What FortiOS Event Logs should i send to my SO...

Re: FortiSIEM User IP Mapping

Re: Cant Install FortiSIEM Linux Agent on Ubuntu 2...

Re: Internet not working after VLAN configuration

Re: Would like to know the process to shutdown and...

Re: phFortiInsightAI process down

Re: FortiSIEM db table info

Re: FortiSIEM updates behind proxy

KCS