FortiView from FortiAnalyzer

Attach a FortiAnlyzer to FortiGate to increase the functionality of FortiView. Adding a FortiAnalyzer is useful when adding widgets such as the Compromised Hosts widget. It also allows historical view for up to seven days.

Requirements

• A FortiGate or FortiOS
• A compatible FortiAnalyzer (see Compatibility with FortiOS)

To configure logging to the FortiAnalyzer:

1. On the FortiGate, go to Security Fabric > Fabric Connectors, and double-click the FortiAnalyzer Logging card.
2. Enter the IP address of the FortiAnalyzer device.
3. Click Test Connectivity. A message will be shown stating that the FortiGate is not authorized on the FortiAnalyzer.

   

4. On the FortiAnalyzer, go to Device Manager, and click the Unauthorized tab.
5. In the device list, right-click the FortiGate, then click Authorize.

   

6. On FortiGate, go to Security Fabric > Fabric Connectors, and double-click the FortiAnalyzer Logging card.
7. Click Test Connectivity to confirm that the device is now authorized.

   

To enable FortiView from FortiAnalyzer:

1. Go to Dashboard > Top Sources.
2. Select a time range other than now from the drop-down list to view historical data.
3. In top menu, click the dropdown, and select Settings. The Edit Dashboard Widget window opens.
   1. In the Data Source area, click Specify.
   2. From the dropdown, select FortiAnalyzer, and click OK.

   

   All the historical information now comes from the FortiAnalyzer.

   When Data Source is set to Best Available Device, FortiAnalyzer is selected when available, then FortiGate Cloud, and then FortiGate Disk.