Fortinet FortiAnalyzer-100A, Administration Manual

Page: 89 / 162

Content archive Content viewer
FortiAnalyzer Version 3.0 MR3 Administration Guide
05-30003-0082-20060925
89
Content archive
A FortiGate unit can monitor and log metadata content for all users using email,
FTP and Instant Messages. The metadata content includes information such as
the senders and recipients of email and instant messages and the content of
those messages.
Using standard data filtering, you can track and locate specific email or
messaging communications occurring on your network.
For details on how to configure the FortiGate unit to send content archive
information to the FortiAnalyzer unit, see the
FortiGate Administration Guide .
This section includes the following topics:
• Content viewer
• Customizing the content log view
• Log rolling
Content viewer
The content viewer displays metadata from devices connected to the
FortiAnalyzer unit. Metadata includes where the information is coming from and
going to.
The content viewer enables you to view and filter on three content types:
• email
• FTP
• Instant Messaging conversations
To view content archive log information, go to the Content Archive menu, select
the content to view. Each log type has a similar viewing controls.
Figure 31: Viewing file transfer logs
Show Select the FortiGate device from the list.
Timeframe Select the time span for the log data you want to view.
Column Settings