Fortinet FortiAnalyzer-100A - Defining FortiGate port interfaces; Adding an HA cluster

To Next Page

To Previous Page

FortiAnalyzer Version 3.0 MR3 Administration Guide

70 05-30003-0082-20060925

Adding a FortiGate unit Devices

9 Define the port interface options using the arrow buttons. For details on port

interface settings see “Defining FortiGate port interfaces” on page 70.

If you want to add a VLAN or other interface, type the name of the interface and

select Add.

10 Select OK.

Defining FortiGate port interfaces

FortiAnalyzer Network activity reports include information on inbound and

outbound traffic flow. Traffic flow information is based on the source and

destination interfaces of the device and how they are configured to send and

receive information.

To ensure that the traffic information is represented correctly in these reports, you

need to assign the FortiGate interfaces to an interface type. The device interface

can include an interface name or a defined VLAN on the device.

You can classify the device interfaces as one of None, LAN, WAN or DMZ to

match the type of traffic the interface will process. When the FortiAnalyzer unit

generates the traffic log report, the FortiAnalyzer unit compares the source and

destination interface classifications and determines the traffic direction. The traffic

direction is one of:

• Incoming

• Outgoing

• Internal

• External

• Unclassified.

The table below illustrates how the source and destination interface types are

represented in the log report as traffic direction.

Adding an HA cluster

Adding an High Availability (HA) cluster enables you to enable an HA cluster to

send log packets to the FortiAnalyzer unit. The log messages sent are maintained

as a cluster rather than a number of individual log files for each unit in the cluster.

This also enables you to view the cluster traffic and run reports on the cluster.

When adding an HA cluster, add the primary device.

Table 11: Log report traffic direction identification

Source Destination Traffic Direction

None All types Unclassified

All types None Unclassified

WAN LAN, DMZ Incoming

WAN WAN External

LAN, DMZ LAN, DMZ Internal

LAN, DMZ WAN Outgoing