Fortinet black logo

Configuring FortiOS

Copy Link
Copy Doc ID 658c8641-f465-11ea-96b9-00505692583a:660618
Download PDF

Configuring FortiOS

This section explains how to enable FortiOS to send logs to FortiAnalyzer Cloud.

To configure FortiOS:
  1. In FortiOS, enable FortiAnalyzer Cloud.
    1. Go to Security Fabric > Settings, and enable Cloud Logging.
    2. Click FortiAnalyzer Cloud, and then Apply.
    3. The FortiAnalyzer Cloud button is only available when you have a FortiAnalyzer Cloud product entitlement; the FortiAnalyzer Cloud button is not available without a FortiAnalyzer Cloud product entitlement.

  2. In the FortiAnalyzer Cloud instance, go to Device Manager and authorize the FortiGate.

    In some cases, FortiAnalyzer automatically authorizes the FortiGate, and you can skip this step. For example, FortiAnalyzer can automatically authorize a FortiGate when both devices are part of the same FortiCloud account, and the FortiAnalyzer API can verify the serial number and entitlement for the FortiGate with FortiCare. FortiAnalyzer cannot automatically authorize a FortiGate in an HA cluster or in a Security Fabric.

    When using FortiGate to enable FortiAnalyzer Cloud, the FortiGate device appears as an unauthorized device.

    When successfully authorized, the cloud logging status displays as Successful.

Configuring FortiOS

This section explains how to enable FortiOS to send logs to FortiAnalyzer Cloud.

To configure FortiOS:
  1. In FortiOS, enable FortiAnalyzer Cloud.
    1. Go to Security Fabric > Settings, and enable Cloud Logging.
    2. Click FortiAnalyzer Cloud, and then Apply.
    3. The FortiAnalyzer Cloud button is only available when you have a FortiAnalyzer Cloud product entitlement; the FortiAnalyzer Cloud button is not available without a FortiAnalyzer Cloud product entitlement.

  2. In the FortiAnalyzer Cloud instance, go to Device Manager and authorize the FortiGate.

    In some cases, FortiAnalyzer automatically authorizes the FortiGate, and you can skip this step. For example, FortiAnalyzer can automatically authorize a FortiGate when both devices are part of the same FortiCloud account, and the FortiAnalyzer API can verify the serial number and entitlement for the FortiGate with FortiCare. FortiAnalyzer cannot automatically authorize a FortiGate in an HA cluster or in a Security Fabric.

    When using FortiGate to enable FortiAnalyzer Cloud, the FortiGate device appears as an unauthorized device.

    When successfully authorized, the cloud logging status displays as Successful.