List of log types and subtypes
FortiGate devices can record the following types and subtypes of log entry information:
|
Type |
Description |
Subtype |
|---|---|---|
|
Traffic |
Records traffic flow information, such as an HTTP/HTTPS request and its response, if any. |
|
|
Event |
Records system and administrative events, such as downloading a backup copy of the configuration, or daemon activities. |
|
|
UTM |
Records UTM events. |
See list of UTM log subtypes below |
UTM log subtypes
|
UTM Log Subtypes |
Description |
Event Type |
|---|---|---|
|
Anomaly |
Records intrusion attempts. |
|
|
App |
Records intrusion attempts. Application Control log is output when a signature matches an application pattern. |
|
|
Antivirus |
Records virus attacks. |
|
|
DLP |
Records data leak prevention events. |
|
|
DNS |
Records domain name server events. |
|
|
|
Records email filter events. |
|
|
GTP |
Records GPRS Tunneling Protocol (GTP) traffic for FortiCarrier devices. |
|
|
IPS |
Records intrusion prevention events. |
|
|
VoIP |
Records voice over IP events. |
|
|
SSH |
Records Secure Socket Shell events. |
|
|
WAF |
Records web application firewall information for FortiWeb appliances and virtual appliances |
|
|
Web Filtering |
Records web filter events. |
|