Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.4.3
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    log fortianalyzer3 setting

    Global FortiAnalyzer settings.

      config log fortianalyzer3 setting
      Description: Global FortiAnalyzer settings.
      set status [enable|disable]
      set ips-archive [enable|disable]
      set server {string}
      set certificate-verification [enable|disable]
      set serial <name1>, <name2>, ...
      set access-config [enable|disable]
      set hmac-algorithm [sha256|sha1]
      set enc-algorithm [high-medium|high|...]
      set ssl-min-proto-version [default|SSLv3|...]
      set conn-timeout {integer}
      set monitor-keepalive-period {integer}
      set monitor-failure-retry-period {integer}
      set certificate {string}
      set source-ip {string}
      set upload-option [store-and-upload|realtime|...]
      set upload-interval [daily|weekly|...]
      set upload-day {user}
      set upload-time {user}
      set reliable [enable|disable]
      set priority [default|low]
      set max-log-rate {integer}
      set interface-select-method [auto|sdwan|...]
      set interface {string}
  end

    config log fortianalyzer3 setting

    Parameter Name Description Type Size
    status Enable/disable logging to FortiAnalyzer.
    enable: Enable logging to FortiAnalyzer.
    disable: Disable logging to FortiAnalyzer.
    		 option -
    ips-archive Enable/disable IPS packet archive logging.
    enable: Enable IPS packet archive logging.
    disable: Disable IPS packet archive logging.
    		 option -
    server The remote FortiAnalyzer. string Maximum length: 127
    certificate-verification Enable/disable identity verification of FortiAnalyzer by use of certificate.
    enable: Enable identity verification of FortiAnalyzer by use of certificate.
    disable: Disable identity verification of FortiAnalyzer by use of certificate.
    		 option -
    serial <name> Serial numbers of the FortiAnalyzer.
    Serial Number.    		 string Maximum length: 79
    access-config Enable/disable FortiAnalyzer access to configuration and data.
    enable: Enable FortiAnalyzer access to configuration and data.
    disable: Disable FortiAnalyzer access to configuration and data.
    		 option -
    hmac-algorithm FortiAnalyzer IPsec tunnel HMAC algorithm.
    sha256: Use SHA256 as HMAC algorithm.
    sha1: Step down to SHA1 as the HMAC algorithm.
    		 option -
    enc-algorithm Configure the level of SSL protection for secure communication with FortiAnalyzer.
    high-medium: Encrypt logs using high and medium encryption algorithms.
    high: Encrypt logs using high encryption algorithms.
    low: Encrypt logs using all encryption algorithms.
    		 option -
    ssl-min-proto-version Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting).
    default: Follow system global setting.
    SSLv3: SSLv3.
    TLSv1: TLSv1.
    TLSv1-1: TLSv1.1.
    TLSv1-2: TLSv1.2.
    		 option -
    conn-timeout FortiAnalyzer connection time-out in seconds (for status and log buffer). integer Minimum value: 1 Maximum value: 3600
    monitor-keepalive-period Time between OFTP keepalives in seconds (for status and log buffer). integer Minimum value: 1 Maximum value: 120
    monitor-failure-retry-period Time between FortiAnalyzer connection retries in seconds (for status and log buffer). integer Minimum value: 1 Maximum value: 86400
    certificate Certificate used to communicate with FortiAnalyzer. string Maximum length: 35
    source-ip Source IPv4 or IPv6 address used to communicate with FortiAnalyzer. string Maximum length: 63
    upload-option Enable/disable logging to hard disk and then uploading to FortiAnalyzer.
    store-and-upload: Log to hard disk and then upload to FortiAnalyzer.
    realtime: Log directly to FortiAnalyzer in real time.
    1-minute: Log directly to FortiAnalyzer at least every 1 minute.
    5-minute: Log directly to FortiAnalyzer at least every 5 minutes.
    		 option -
    upload-interval Frequency to upload log files to FortiAnalyzer.
    daily: Upload log files to FortiAnalyzer once a day.
    weekly: Upload log files to FortiAnalyzer once a week.
    monthly: Upload log files to FortiAnalyzer once a month.
    		 option -
    upload-day Day of week (month) to upload logs. user Not Specified
    upload-time Time to upload logs (hh:mm). user Not Specified
    reliable Enable/disable reliable logging to FortiAnalyzer.
    enable: Enable reliable logging to FortiAnalyzer.
    disable: Disable reliable logging to FortiAnalyzer.
    		 option -
    priority Set log transmission priority.
    default: Set FortiAnalyzer log transmission priority to default.
    low: Set FortiAnalyzer log transmission priority to low.
    		 option -
    max-log-rate FortiAnalyzer maximum log rate in MBps (0 = unlimited). integer Minimum value: 0 Maximum value: 100000
    interface-select-method Specify how to select outgoing interface to reach server.
    auto: Set outgoing interface automatically.
    sdwan: Set outgoing interface by SD-WAN or policy routing rules.
    specify: Set outgoing interface manually.
    		 option -
    interface Specify outgoing interface to reach server. string Maximum length: 15
    Previous
    Next

    log fortianalyzer3 setting

    Global FortiAnalyzer settings.

      config log fortianalyzer3 setting
      Description: Global FortiAnalyzer settings.
      set status [enable|disable]
      set ips-archive [enable|disable]
      set server {string}
      set certificate-verification [enable|disable]
      set serial <name1>, <name2>, ...
      set access-config [enable|disable]
      set hmac-algorithm [sha256|sha1]
      set enc-algorithm [high-medium|high|...]
      set ssl-min-proto-version [default|SSLv3|...]
      set conn-timeout {integer}
      set monitor-keepalive-period {integer}
      set monitor-failure-retry-period {integer}
      set certificate {string}
      set source-ip {string}
      set upload-option [store-and-upload|realtime|...]
      set upload-interval [daily|weekly|...]
      set upload-day {user}
      set upload-time {user}
      set reliable [enable|disable]
      set priority [default|low]
      set max-log-rate {integer}
      set interface-select-method [auto|sdwan|...]
      set interface {string}
  end

    config log fortianalyzer3 setting

    Parameter Name Description Type Size
    status Enable/disable logging to FortiAnalyzer.
    enable: Enable logging to FortiAnalyzer.
    disable: Disable logging to FortiAnalyzer.
    		 option -
    ips-archive Enable/disable IPS packet archive logging.
    enable: Enable IPS packet archive logging.
    disable: Disable IPS packet archive logging.
    		 option -
    server The remote FortiAnalyzer. string Maximum length: 127
    certificate-verification Enable/disable identity verification of FortiAnalyzer by use of certificate.
    enable: Enable identity verification of FortiAnalyzer by use of certificate.
    disable: Disable identity verification of FortiAnalyzer by use of certificate.
    		 option -
    serial <name> Serial numbers of the FortiAnalyzer.
    Serial Number.    		 string Maximum length: 79
    access-config Enable/disable FortiAnalyzer access to configuration and data.
    enable: Enable FortiAnalyzer access to configuration and data.
    disable: Disable FortiAnalyzer access to configuration and data.
    		 option -
    hmac-algorithm FortiAnalyzer IPsec tunnel HMAC algorithm.
    sha256: Use SHA256 as HMAC algorithm.
    sha1: Step down to SHA1 as the HMAC algorithm.
    		 option -
    enc-algorithm Configure the level of SSL protection for secure communication with FortiAnalyzer.
    high-medium: Encrypt logs using high and medium encryption algorithms.
    high: Encrypt logs using high encryption algorithms.
    low: Encrypt logs using all encryption algorithms.
    		 option -
    ssl-min-proto-version Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting).
    default: Follow system global setting.
    SSLv3: SSLv3.
    TLSv1: TLSv1.
    TLSv1-1: TLSv1.1.
    TLSv1-2: TLSv1.2.
    		 option -
    conn-timeout FortiAnalyzer connection time-out in seconds (for status and log buffer). integer Minimum value: 1 Maximum value: 3600
    monitor-keepalive-period Time between OFTP keepalives in seconds (for status and log buffer). integer Minimum value: 1 Maximum value: 120
    monitor-failure-retry-period Time between FortiAnalyzer connection retries in seconds (for status and log buffer). integer Minimum value: 1 Maximum value: 86400
    certificate Certificate used to communicate with FortiAnalyzer. string Maximum length: 35
    source-ip Source IPv4 or IPv6 address used to communicate with FortiAnalyzer. string Maximum length: 63
    upload-option Enable/disable logging to hard disk and then uploading to FortiAnalyzer.
    store-and-upload: Log to hard disk and then upload to FortiAnalyzer.
    realtime: Log directly to FortiAnalyzer in real time.
    1-minute: Log directly to FortiAnalyzer at least every 1 minute.
    5-minute: Log directly to FortiAnalyzer at least every 5 minutes.
    		 option -
    upload-interval Frequency to upload log files to FortiAnalyzer.
    daily: Upload log files to FortiAnalyzer once a day.
    weekly: Upload log files to FortiAnalyzer once a week.
    monthly: Upload log files to FortiAnalyzer once a month.
    		 option -
    upload-day Day of week (month) to upload logs. user Not Specified
    upload-time Time to upload logs (hh:mm). user Not Specified
    reliable Enable/disable reliable logging to FortiAnalyzer.
    enable: Enable reliable logging to FortiAnalyzer.
    disable: Disable reliable logging to FortiAnalyzer.
    		 option -
    priority Set log transmission priority.
    default: Set FortiAnalyzer log transmission priority to default.
    low: Set FortiAnalyzer log transmission priority to low.
    		 option -
    max-log-rate FortiAnalyzer maximum log rate in MBps (0 = unlimited). integer Minimum value: 0 Maximum value: 100000
    interface-select-method Specify how to select outgoing interface to reach server.
    auto: Set outgoing interface automatically.
    sdwan: Set outgoing interface by SD-WAN or policy routing rules.
    specify: Set outgoing interface manually.
    		 option -
    interface Specify outgoing interface to reach server. string Maximum length: 15
    Previous
    Next