Generate Findings Report
Findings Report keeps track of all daily Findings and lets you download daily Findings reports. At the end of each month, all daily Findings reports will be consolidated into one monthly report for download. All Finding details in the Findings reports are recorded in Coordinated Universal Time (UTC).
While the Finding logs recorded in the reports are in Coordinated Universal Time (UTC), the default time zone used in the FortiCNP Findings page is according to your current location. Make sure to perform time conversion from your current time zone to UTC time before generating the report to include all findings.
For example, 6/2/2022 00:00 to 6/2/2022 23:59 PST would be equivalent to 6/2/2022 7:00 to 6/3/2020 6:59 UTC.
Perquisite - Activate Findings Report
Enable any one of the Compliance policies below to activate the function to export Findings reports:
- NIST800/53 - Track all security Findings
- NIST800/171 - Track all security Findings
- ISO27001 - Track all security Findings
Note: only one of the policies above is needed to be enabled to activate Findings Report.
Activate Findings Report through NIST SP 800-53 rev4
- From FortiCNP navigation menu, go to REPORTS > Compliance > Standards, and click NIST SP 800-53 rev4 tab.
- Locate the policy, NIST800/53 - Track all security Findings, and click the right arrow sign > next to the policy to expand it.
- Click on the Enabled toggle switch button to enable the policy.
- Click Save Changes to save the configuration.
Activate Findings Report through NIST SP 800/171
- From FortiCNP navigation menu, go to REPORTS > Compliance > Standards tab, and click NIST SP 800/171 tab.
- Locate the policy, NIST800/171 - Track all security Findings, and click the right arrow sign > next to the policy to expand it.
- Click on the Enabled toggle switch button to enable the policy.
- Click Save Changes to save the configuration.
Activate Findings Report through ISO 27001
- From FortiCNP navigation menu, go to REPORTS > Compliance > Standards tab, and click ISO27001 tab.
- Locate the policy, ISO27001 - Track all security Findings, and click the right arrow sign > next to the policy to expand it.
- Click on the Enabled toggle switch button to enable the policy.
- Click Save Changes to save the configuration.
Export or Package Daily/Monthly Reports
Daily Findings report is compiled into a CSV file and made available for export. At the end of each month, all daily reports of the that month are combined and packaged into a ZIP file and made available for download.
An alternative option of exporting daily reports is to consolidate up-to-date daily reports of the current month into one ZIP file.
Follow the steps below to export reports.
- From FortiCNP navigation menu, go to REPORTS > Others > Findings.
- In the Current Month tab, download Findings report following one of the option below:
- Click the History tab to export the past monthly Findings reports. Click the year drop down menu to select the year, and all the monthly Findings reports available of that year will be available for export.
Option 1 - Select any of the daily report and click download button 
to download the daily report. All daily reports are ended in "UTC".
Option 2 - Click Package Up-To-Date for Download button to combine all up to date daily reports of the current month into one zip file. The combined ZIP file will be made available for download with .zip extension.
