Fortinet Fortigate-5000 series User Manual

Log&Report Log Access
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102 419
VoIP log
You can now log Voice over Internet Protocol (VoIP) calls. You can also configure
VoIP rate limiting for Session Initiated Protocol (SIP) and Skinny Client Control
Protocol (SCCP) or Skinny protocol. SIP and SCCP are two types of VoIP
protocols. Rate limiting is generally different between SCCP and SIP. For SIP, rate
limiting is for that SIP traffic flowing through the FortiGate unit. For SCCP, the call
setup rate is between the FortiGate unit and the clients because the call manager
normally resides on the opposite side of the FortiGate unit from the clients.
To enable VoIP logs
1 Go to Firewall > Protection Profile.
2 Select the Edit icon for a protection profile.
3 Select the blue arrow to expand the Logging options.
4 Select Log VoIP Activity.
5 Select OK.
To configure VoIP activity
1 Go to Firewall > Protection Profile.
2 Select the Edit icon for a protection profile.
3 Select the blue arrow to expand the VoIP options.
4 Select the SIP and SCCP checkboxes.
5 Enter a number for requests per second in the Limit REGISTER request
(requests/sec) (SIP only) field.
6 Enter a number for requests per second in the Limit INVITE request
(requests/sec) (SIP only) field
7 Enter a number for the maximum calls per minute in the Limit Call Setup
(calls/min) (SCCP only) field.
8 Select OK.
Log Access
The FortiGate unit enables you to view the logs stored in memory, hard disk or
stored on a FortiAnalyzer unit running FortiAnalyzer 3.0. The FortiGate unit also
enables you to view logs stored on the FortiGuard Log & Analysis server.
Logs are accessed in the Log Access menu. The Log Access menu provides a tab
for memory, hard disk, FortiAnalyzer unit, and the FortiGuard Log & Analysis
server. Each tab provides options for viewing log messages, such as search and
filtering options, including selecting the log type you want to view.
Note: The FortiAnalyzer unit must be running firmware version 3.0 or higher so the
FortiGate unit can view logs that are located on a FortiAnalyzer unit.
Note: If VDOMs are enabled, make sure the VDOM you are currently in allows access to
FortiGate logs stored on the system memory, hard disk, FortiAnalyzer unit or the FortiGuard
Log & Analysis server. Certain VDOMs may only allow access to certain FortiGate features.

Fortinet Fortigate-5000 series Specifications

General

Brand	Fortinet
Model	Fortigate-5000 series
Category	Firewall
Language	English