Fortinet FortiAnalyzer-100A, Руководство администратора

Страница: 67 / 162

Devices Devices List
FortiAnalyzer Version 3.0 MR3 Administration Guide
05-30003-0082-20060925
67
The maximums indicate a combined total of added and unregistered devices. If
there are more than the maximum allowed, the FortiAnalyzer unit will not allow
you to add more devices. You must either remove or block some devices.
When new devices attempt to connect to a FortiAnalyzer unit at its maximum
allowed devices, the FortiAnalyzer unit will reject the attempt by the device to
connect and automatically add the device to the list of blocked devices.
For details on blocked devices see “Blocked Devices” on page 74 .
Unregistered device options
As devices are configured to send log packets to the FortiAnalyzer unit, you can
configure how the FortiAnalyzer unit handles the connection requests until you
can verify that they should be accepted. You can define what the FortiAnalyzer
unit does when it receives a request for a connection from a device.
Unregistered devices are included in the maximum devices available for a
FortiAnalyzer unit. Too many unregistered devices may prevent you from adding
a specific device. For details see
“Maximum allowed devices” on page 66 .
There are two options when configuring the unregistered device options:
• known devices
• unknown devices.
FortiGate units connecting with FortiDiscovery
FortiDiscovery is a feature within FortiOS 3.0 for all FortiGate units. It is a protocol
where a FortiGate unit and a FortiAnalyzer unit are able to discover one another
and configure themselves automatically.
On the FortiGate unit, the FortiGate administrator sets the option to use automatic
discovery to connect and send log packets to the FortiAnalyzer unit. On the
FortiAnalyzer unit, you configure the FortiAnalyzer unit to accept the connection
request. Once configured, the FortiGate unit automatically sets up the
FortiAnalyzer connection and begin sending log data and other FortiAnalyzer
reports and log files. For details see
“Unregistered device options” on page 67 .
To configure unregistered FortiGate units with FortiDiscovery
1 Go to Device > All .
2 Select Unregistered Device Options.
3 Select from the following options in the Unregistered FortiGates (connect via
Auto-Discovery area:
FortiAnalyzer-800 250 (FortiGate-50A to
FortiGate-800 only)
1 2500
FortiAnalyzer-2000 500 (All FortiGate models) 1 5000
FortiAnalyzer-4000/4000A 500 (All FortiGate models) 1 5000
Ignore Connection and Log Data All incoming FortiGate requests are not
accepted and the FortiAnalyzer will not add
them to the registered devices list.
Allow connection, add to unregistered
table, but ignore the data Add the device to the list of unregistered device
list but do not store log data.
Allow connection, register
automatically, and store up to
N MB of
data
Add the device to the registered devices list,
and save the log packets to the hard disk, using
the defined amount of disk space.