Fortinet Document Library

Version:


Table of Contents

New Features

6.2.0
Download PDF
Copy Link

FortiView Object Names

In this version, FortiView Top Sources and Top Destinations views leverage UUID to resolve Firewall Object (Address) names for improved usability.

Requirements

  • Firewall Objects-based view is only available when the data source is disk.
  • To have historical Firewall Objects-based view, address objects UUID need to be logged. Enable log-uuid-address under system global:
    config system global
       set log-uuid-address enable
    end

Sample configuration

In this example, firewall addresses have been configured using the commands in To configure firewall addresses in the CLI: and each firewall address object is associated with an unique UUID.

In the GUI, Top Sources can display Firewall Objects-based chart in real time.

Top Destinations can display Firewall Objects-based chart in real time.

The Top Sources > Historical tab can display Firewall Objects-based chart.

You can drill down a source object. This example shows a drill down of PC2.

The Top Destinations > Historical tab can display Firewall Objects-based chart.

You can drill down a destination object. This example shows a drill down of 172-16-200-55-PC5.

To configure firewall addresses in the CLI:
config firewall address
   edit "PC2"
        set uuid b3eba698-5c89-51e9-1af9-363b23a3fef8
        set subnet 10.1.100.22 255.255.255.255
    next
    edit "10.1.100.11-PC1"
        set uuid 96bcbca2-5cb5-51e9-bc02-465c0aab5e2c
        set subnet 10.1.100.11 255.255.255.255
    next
    edit "172.16.200.55-PC5"
        set uuid a2c368f2-5cb5-51e9-1c35-082a57898065
        set subnet 172.16.200.55 255.255.255.255
    next
    edit "PW2-172-16-200-254"
        set uuid def64b6a-5d45-51e9-5ab0-b0d0a3128098
        set subnet 172.16.200.254 255.255.255.255
    next
end
To configure the firewall policy with defined firewall addresses in the CLI:
config firewall policy
    edit 1
        set name "v4-out"
        set uuid 4825ff5a-dc94-51e8-eeab-e138bc255e4a
        set srcintf "port10"
        set dstintf "port9"
        set srcaddr "PC2" "10.1.100.11-PC1"
        set dstaddr "172.16.200.55-PC5" "PW2-172-16-200-254"
        set action accept
        set schedule "always"
        set service "ALL"
        set utm-status enable
        set inspection-mode proxy
        set logtraffic all
        set av-profile "default"
        set ssl-ssh-profile "custom-deep-inspection"
        set nat enable
    next
    edit 2
        set name "to-Internet"
        set uuid 28379372-5c8a-51e9-c765-cc755a07a200
        set srcintf "port10"
        set dstintf "port9"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
        set utm-status enable
        set inspection-mode proxy
        set logtraffic all
        set av-profile "default"
        set nat enable
    next
end

FortiView Object Names

In this version, FortiView Top Sources and Top Destinations views leverage UUID to resolve Firewall Object (Address) names for improved usability.

Requirements

  • Firewall Objects-based view is only available when the data source is disk.
  • To have historical Firewall Objects-based view, address objects UUID need to be logged. Enable log-uuid-address under system global:
    config system global
       set log-uuid-address enable
    end

Sample configuration

In this example, firewall addresses have been configured using the commands in To configure firewall addresses in the CLI: and each firewall address object is associated with an unique UUID.

In the GUI, Top Sources can display Firewall Objects-based chart in real time.

Top Destinations can display Firewall Objects-based chart in real time.

The Top Sources > Historical tab can display Firewall Objects-based chart.

You can drill down a source object. This example shows a drill down of PC2.

The Top Destinations > Historical tab can display Firewall Objects-based chart.

You can drill down a destination object. This example shows a drill down of 172-16-200-55-PC5.

To configure firewall addresses in the CLI:
config firewall address
   edit "PC2"
        set uuid b3eba698-5c89-51e9-1af9-363b23a3fef8
        set subnet 10.1.100.22 255.255.255.255
    next
    edit "10.1.100.11-PC1"
        set uuid 96bcbca2-5cb5-51e9-bc02-465c0aab5e2c
        set subnet 10.1.100.11 255.255.255.255
    next
    edit "172.16.200.55-PC5"
        set uuid a2c368f2-5cb5-51e9-1c35-082a57898065
        set subnet 172.16.200.55 255.255.255.255
    next
    edit "PW2-172-16-200-254"
        set uuid def64b6a-5d45-51e9-5ab0-b0d0a3128098
        set subnet 172.16.200.254 255.255.255.255
    next
end
To configure the firewall policy with defined firewall addresses in the CLI:
config firewall policy
    edit 1
        set name "v4-out"
        set uuid 4825ff5a-dc94-51e8-eeab-e138bc255e4a
        set srcintf "port10"
        set dstintf "port9"
        set srcaddr "PC2" "10.1.100.11-PC1"
        set dstaddr "172.16.200.55-PC5" "PW2-172-16-200-254"
        set action accept
        set schedule "always"
        set service "ALL"
        set utm-status enable
        set inspection-mode proxy
        set logtraffic all
        set av-profile "default"
        set ssl-ssh-profile "custom-deep-inspection"
        set nat enable
    next
    edit 2
        set name "to-Internet"
        set uuid 28379372-5c8a-51e9-c765-cc755a07a200
        set srcintf "port10"
        set dstintf "port9"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
        set utm-status enable
        set inspection-mode proxy
        set logtraffic all
        set av-profile "default"
        set nat enable
    next
end