Log config, Log setting options – Fortinet 100A User Manual

Page 340

Advertising
background image

340

01-28007-0068-20041203

Fortinet Inc.

Log Setting options

Log & Report

Figure 182:Example alert email

For descriptions of log formats and specific log messages see the FortiGate Log
Message Reference Guide
.

This chapter describes:

•

Log config

•

Log access

•

CLI configuration

Log config

Use Log Config to configure log storage, alert emails and log filters.

This section describes:

•

Log Setting options

•

Alert E-mail options

•

Log filter options

•

Configuring log filters

•

Enabling traffic logging

Log Setting options

You can enable and configure the storing of log messages to one or more of the
following locations:

.

From: [email protected]
Sent: Tuesday, April 27, 2004 5:30 PM
To: [email protected]
Subject: Message meets Alert condition

Message meets Alert condition
2004-04-27 13:28:52 device_id=APS3012803033139 log_id=0101023002
type=event subtype=ipsec pri=notice loc_ip=172.16.81.2 loc_port=500
rem_ip=172.16.81.1 rem_port=500 out_if=dmz vpn_tunnel=ToDmz action=negotiate
init=local mode= stage=-112 dir=inbound status=success msg="Initiator: tunnel
172.16.81.1, transform=ESP_3DES, HMAC_SHA1"

Message meets Alert condition
2004-04-27 13:28:54 device_id=APS3012803033139 log_id=0101023004
type=event subtype=ipsec pri=notice loc_ip=172.16.81.2 loc_port=500
rem_ip=172.16.81.1 rem_port=500 out_if=dmz vpn_tunnel=ToDmz action=negotiate
init=local mode=quick stage=2 dir=outbound status=success msg="Initiator: sent
172.16.81.1 quick mode message #2 (DONE)"

FortiLog

A FortiLog unit. The FortiLog unit is a log analyzer and manager that can

combine the log information from various FortiGate units and other firewall

units. To enable content archiving with a firewall

Protection profile

, you need

to select the FortiLog option and define its IP address.

Advertising