Document Outline

• Table of Contents
• Introduction
  • Operational Modes
    • Active Mode
    • Passive Mode
  • About this guide
  • FortiLog documentation
  • Related documentation
    • FortiGate documentation
    • FortiManager documentation
    • FortiClient documentation
    • FortiMail documentation
    • Fortinet Knowledge Center
    • Comments on Fortinet technical documentation
  • Customer service and technical support
• Setting up the FortiLog unit
  • Checking the package contents
    • Hardware specifications
      • Dimensions
      • Weight
      • Power requirements
      • Environmental specifications
      • Air flow
      • Mechanical loading
  • Planning the installation
  • Connecting the FortiLog unit
  • Configuring the FortiLog unit
    • Using the web-based manager
    • Using the command line interface
    • Using the front panel buttons and LCD
• Connecting to the FortiLog Unit
  • Sending device logs to the FortiLog unit
    • Configuring FortiGate unit running FortiOS 2.8
    • Configuring FortiGate devices running FortiOS 2.5
    • Configuring FortiMail devices
  • Configuring the FortiLog unit
    • Adding a device
      • Defining device port interfaces
    • Creating Device Groups
• Managing the FortiLog unit
  • Status
    • Status
      • Changing the FortiLog host name
      • Changing operating modes
      • Viewing system resources information
    • Changing the firmware
      • Installing firmware from a system reboot
      • Testing a new firmware image
      • Installing a backup firmware image
      • Switching to a backup firmware image
      • Switching to the default firmware image
    • Backing up system settings
    • Downlading the FortiLog debug log
    • Restoring system settings
    • Restore factory default system settings
    • Restoring a FortiLog unit
    • RAID
  • Config
    • Network
    • RAID
    • Log settings
      • Log policy
    • Time
    • Options
    • Admin
      • Configure Administrator access
      • Administrator account levels
      • Administrator options
      • Changing the Administrator password
  • Devices (Active mode)
    • Device list
    • Adding and registering a device
    • Editing device information
  • Alert Email
    • Server
    • Local
    • Device (Active mode)
      • Creating a new device alert
  • Alerts
  • Network Sharing
  • Defining IP aliases
• Reports
  • Creating and generating a report
    • Configuring report parameters
    • Configuring a report query
      • Creating a query profile
    • Selecting the devices for the report
      • Creating a device profile
    • Select filtering options
      • Creating a filter profile
    • Setting a report schedule
      • Creating a report schedule profile
    • Choosing the report destination and format
      • Creating a report destination and format profile
    • Reports on demand
  • Viewing reports
    • Roll up report
    • Individual reports
  • Vulnerability reports
    • Creating and generating a report
    • Selecting report result parameters
    • Selecting plug-ins
      • Creating a plug-in profile
    • Selecting the scan targets for the report
      • Creating a scan target profile
    • Choosing the report destination and format
      • Creating a report destination and format profile
    • Viewing the vulnerability report
• Using Logs
  • The Log view interface
  • Viewing logs
    • Finding log information
  • Importing log files
  • Log Search
  • Log watch (Active mode)
  • Event correlation (Active mode)
• Using the FortiLog unit as a NAS
  • Connecting to the FortiLog file system
  • Providing access to the FortiLog hard disk
    • Selecting a file sharing protocol
    • Adding and modifying user accounts
    • Adding and modifying group accounts
    • Assigning access to folders
      • Modifying the user or group folder access
  • Setting folder and file properties
• FortiLog CLI reference
  • CLI documentation conventions
  • Connecting to the CLI
    • Connecting to the FortiLog-800 console
    • Setting administrative access for SSH or Telnet
    • Connecting to the FortiLog CLI using SSH
    • Connecting to the FortiLog CLI using Telnet
  • CLI commands
    • execute branch
    • get branch
    • set branch
      • set alertemail
      • set console
      • set log
      • set NAS
      • set report
      • set system
    • unset branch
• Appendix A: Log Report Types
  • Network Activity
  • Web Activity
  • FTP Activity
  • Terminal Activity
  • Mail Activity
  • Intrusion Activity
  • Antivirus Activity
  • Web Filter Activity
  • Mail Filter Activity
  • VPN Activity
  • Content Activity
• Index