Fortinet FortiLog-400 - Manual (Page 28)

28
05-16000-0082-20050115 Fortinet Inc.
Configuring the FortiLog unit Connecting to the FortiLog Unit
You can classify the device interfaces as one of None, LAN, WAN or DMZ to match
the type of traffic the interface will process. When the FortiLog unit generates the
traffic log report, the FortiLog unit compares the source and destination interface
classifications and determines the traffic direction. The traffic direction is one of:
• Incoming
• Outgoing
• Internal
• External
• Unclassified.
The table below illustrates how the source and destination interface types are
represented in the log report as traffic direction.
Creating Device Groups
if you have a number of devices belonging to a department or section of the company,
you can create groups to keep these devices together for easier access. Once you
create a group you can add or remove devices from the groups as required.
To create a device group
1 Go to System > Devices > Groups.
2 Select Create New.
3 Enter a group name.
4 Select the devices you wish to add to the group.
5 Select OK.
You do not have to add device to the group when you first create the group. There are
a number of alternate ways of adding a device to a group:
• add devices when registering them
• select Edit to add or remove devices when required.
• In the selected devices tab, select the device and select Assign Selected.
Table 3: Log report traffic direction identification
Source Destination Traffic Direction
None All types Unclassified
All types None Unclassified
WAN LAN, DMZ Incoming
WAN WAN External
LAN, DMZ LAN, DMZ Internal
LAN, DMZ WAN Outgoing