Fortinet Fortigate-5000 series - Event Log

FortiGate Version 3.0 MR4 Administration Guide
416 01-30004-0203-20070102
Log types Log&Report
To enable traffic logging for an interface or VLAN subinterface
1 Go to System > Network > Interface.
2 Select the Edit icon for an interface.
3 Select Log.
4 Select OK.
Enabling firewall policy traffic logging
Firewall policy traffic logging records the traffic that is both permitted and denied
by the firewall policy, based on the protection profile.
To enable firewall policy traffic logging
1 Go to Firewall > Policy.
2 Select the blue arrow to expand the policy list for a policy.
3 Select the Edit icon.
If required, create a new firewall policy by selecting Create.
4 Select Log Allowed Traffic.
5 Select OK.
Event log
The Event Log records management and activity events. For example, when a
configuration has changed, or VPN and High Availability (HA) events occur.
To enable the event logs
1 Go to Log&Report > Log Config > Event Log.
2 Select from the following logs:
System Activity
event
The FortiGate unit logs all system-related events, such as ping
server failure and gateway status.
IPSec negotiation
event
The FortiGate unit logs all IPSec negotiation events, such as
progress and error reports.
DHCP service
event
The FortiGate unit logs all DHCP-events, such as the request and
response log.
L2TP/PPTP/PPPoE
service event
The FortiGate unit logs all protocol-related events, such as
manager and socket creation processes.
Admin event The FortiGate unit logs all administrative events, such as user
logins, resets, and configuration updates.
HA activity event The FortiGate unit logs all high availability events, such as link,
member, and state information.
Firewall
authentication
event
The FortiGate unit logs all firewall-related events, such as user
authentication.
Pattern update
event
The FortiGate unit logs all pattern update events, such as antivirus
and IPS pattern updates and update failures.
SSL VPN user
authentication
event
The FortiGate unit logs all user authentication events for an SSL
VPN connection, such as logging in, logging out and timeout due to
inactivity.