Fortinet Gate 60D, Administration Manual

Page: 661 / 706

Log&Report Log types
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
661
http://docs.fortinet.com/ • Feedback
• Viruses – The FortiGate unit logs all virus infections.
• Blocked Files – The FortiGate unit logs all instances of blocked files.
• Oversized Files/Emails – The FortiGate unit logs all instances of files and email
messages exceeding defined thresholds.
• AV Monitor – The FortiGate unit logs all instances of viruses, blocked files, and
oversized files and email. This applies to HTTP, FTP, IMAP, POP3, SMTP, and IM
traffic.
To enable antivirus logs
1 Go to Firewall > Protection Profile .
2 Select Edit beside the protection profile that you want.
3 Select the Expand Arrow beside Logging to reveal the available options.
4 Select the antivirus events you want logged.
5 Select OK .
Web filter log
The Web Filter log records HTTP FortiGuard log rating errors including web content
blocking actions.
To enable web filter logs
1 Go to Firewall > Protection Profile .
2 Select Edit beside the protection profile that you want.
3 Select the Expand Arrow beside Logging to reveal the available options.
4 Select the web filtering events to log.
5 Select the FortiGuard Web Filtering Rating Errors (HTTP only) check box, to log
FortiGuard filtering.
6 Select OK .
Spam filter log
The Spam Filter log records blocking of email address patterns and content in SMTP,
IMAP and POP3 traffic.
To enable the Spam log
1 Go to Firewall > Protection Profile .
2 Select Edit beside the protection profile that you want.
3 Select the Expand Arrow beside Logging to reveal the available options.
4 Select Log Spam .
5 Select OK .
Attack log (IPS)
The Attack (IPS) log records attacks detected and prevented by the FortiGate unit. The
FortiGate unit logs the following:
• Attack Signature – The FortiGate unit logs all detected and prevented attacks based
on the attack signature, and the action taken by the FortiGate unit.
• Attack Anomaly – The FortiGate unit logs all detected and prevented attacks based
on unknown or suspicious traffic patterns, and the action taken by the FortiGate unit.