FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
tana
Staff
Staff
Article Id 218709
Description

 

This article describes how to show and resolve hostnames in forward traffic log.

By default, the FortiGate will only log the IPs and not resolve them to their corresponding domains, so the URL is not visible in the logs.

For this reason, unknown domain names will be shown in Forward Traffic logs.

 

Scope

 

FortiGate.

 

Solution

 

To resolve the IP addresses to host names, apply the following settings. To enable the name resolution of the traffic log from the CLI, run the following commands:


conf log setting
    set resolve-ip enable
end

 

To enable the name resolution of the traffic logs from GUI, go to Log & Report -> Log settings and toggle the Resolve Hostnames option. Starting from v7.2.x, it can be found under Log & Report -> Log Settings -> Global Settings.

 

tana_0-1658987764675.png

 

Make sure this setting is applied:

 

conf log gui-display
get
    set resolve-hosts enable 

end