Fortinet FortiAnalyzer-100A, Руководство администратора

Страница: 69 / 162

Devices Adding a FortiGate unit
FortiAnalyzer Version 3.0 MR3 Administration Guide
05-30003-0082-20060925
69
4 Expand the Devices Privileges settings.
5 Set the privileges the FortiGate unit has when sending and viewing log files,
archived content and quarantined files.
6 Expand the Group Membership settings.
7 Select the group where you want to include the FortiGate unit, and select the right
arrow button to add the FortiGate unit to the group. A FortiGate unit can belong to
multiple groups.
You can also add the FortiGate unit to a group later or change the group you
assigned. For details see
“Device Groups” on page 74 .
8 Expand the FortiGate Interface Specification settings.
Device ID When selecting a FortiGate unit from the unregistered list, the
FortiAnalyzer unit automatically adds the FortiGate unit’s serial
number. If you are adding a new FortiGate unit that is not already
in the unregistered list, enter the FortiGate unit’s serial number.
The FortiGate unit’s serial number is available on the System
menu in the Web-based GUI.
Mode Select the mode of the FortiGate unit. Leave the selection as
Standalone when adding a single unit. If you are adding an HA
cluster, select HA. For more details on adding an HA cluster see
“Adding an HA cluster” on page 70 .
Description Enter additional information for the FortiGate unit up to 128
characters long. Description information appears when you hover
the mouse over the FortiGate unit’s name in the devices list.
Administrative
Domain Select the administrative domain (ADOM) that the device will be
associated with. This selection is visible when using the ADOM
feature. For more information on ADOMs, see “Administrator
settings” on page 39 .
Secure Connection Select this option to set up a secure connection between the
FortiAnalyzer unit and the FortiGate unit.
To ensure a correct secure connection, the Device Name entered
above and the Local ID setting on the FortiGate unit must match
exactly. You set this in the FortiGate CLI in
config system
fortianalyzer
.
You must also enter a pre-shared key that matches the pre-shared
key entered on the FortiGate unit.
By Key Enter a pre-shared key for the secure connection when you select
Secure Connection. You must select the Secure Connection check
box to enable this option. The key you enter must match the key
set on the FortiGate unit to ensure the logs and files are sent over
a secure connection.
Allocated Disk Space
(MB) Set the allocated amount of the FortiAnalyzer hard disk to log and
content messages for the device. The amount allocated will also
include disk space set aside for quarantined files. For details on
quarantine file disk allocation, see “Configuring quarantine
settings” on page 95 .
A disk space setting of zero is unlimited.
When Allocated Disk
Space is All Used Select what the FortiAnalyzer unit should do when the allocated
disk space has been reached. Select either overwriting older files
or stop logging.
Note: Accessing logs, content logs and quarantined files is available on FortiGate units
running firmware version 3.0 or later.