Monitoring

The application monitor enables you to gain insight into the applications generating traffic on your network. When monitor is enabled in an application sensor entry and that security profile is selected in a security policy, all the detected traffic required to populate the selected charts is logged to the SQL database on the FortiGate unit hard drive. The charts are available for display in the Applications section of the FortiView menu.

Because the application monitor relies on an SQL database, the feature is available only on FortiGate units with an internal hard drive.

Application monitor data is stored on the hard drive and restarting the system does not affect the stored monitor data. Application control data is available in Log & Report, if enabled.

Applications that are blocked are automatically logged. For applications that are passed, logging can be enabled or disabled.

To disable logging passed applications:

config application list
    edit "test"
        config entries
            edit 1
                set application xxxxx
                set action pass
                set log disable
            next
        end
    next
end