Fortinet FortiAnalyzer-100A, Administration Manual

Page: 70 / 162

FortiAnalyzer Version 3.0 MR3 Administration Guide
70 05-30003-0082-20060925
Adding a FortiGate unit Devices
9 Define the port interface options using the arrow buttons. For details on port
interface settings see
“Defining FortiGate port interfaces” on page 70 .
If you want to add a VLAN or other interface, type the name of the interface and
select Add.
10 Select OK.
Defining FortiGate port interfaces
FortiAnalyzer Network activity reports include information on inbound and
outbound traffic flow. Traffic flow information is based on the source and
destination interfaces of the device and how they are configured to send and
receive information.
To ensure that the traffic information is represented correctly in these reports, you
need to assign the FortiGate interfaces to an interface type. The device interface
can include an interface name or a defined VLAN on the device.
You can classify the device interfaces as one of None, LAN, WAN or DMZ to
match the type of traffic the interface will process. When the FortiAnalyzer unit
generates the traffic log report, the FortiAnalyzer unit compares the source and
destination interface classifications and determines the traffic direction. The traffic
direction is one of:
• Incoming
• Outgoing
• Internal
• External
• Unclassified.
The table below illustrates how the source and destination interface types are
represented in the log report as traffic direction.
Adding an HA cluster
Adding an High Availability (HA) cluster enables you to enable an HA cluster to
send log packets to the FortiAnalyzer unit. The log messages sent are maintained
as a cluster rather than a number of individual log files for each unit in the cluster.
This also enables you to view the cluster traffic and run reports on the cluster.
When adding an HA cluster, add the primary device.
Table 11: Log report traffic direction identification
Source Destination Traffic Direction
None All types Unclassified
All types None Unclassified
WAN LAN, DMZ Incoming
WAN WAN External
LAN, DMZ LAN, DMZ Internal
LAN, DMZ WAN Outgoing