Fortinet FortiAnalyzer 3.0 MR7, Руководство администратора

Страница: 79 / 234

Device Viewing the device list
FortiAnalyzer Version 3.0 MR7 Administration Guide
05-30007-0082-20080908
77
For networks with more demanding logging scenarios, an appropriate device ratio may be
less than the allowed maximum. Performance will vary according to your network size,
device types, logging thresholds, and many other factors. When choosing a FortiAnalyzer
model, consider your network’s log frequency, and not only your number of devices.
A VDOM or high availability (HA) cluster counts as a single “device” towards to
maximum number of allowed devices. Multiple FortiClient installations (which can
number up to the limit of allowed FortiClient installations) also count as a single
“device.”
For example, a FortiAnalyzer-100B could register up to either:
• 10 devices
• 9 devices and 100 FortiClient installations
• 9 devices and one HA pair
• 1 device and 9 VDOMs
but could not register 1 device and 900 FortiClient installations.
When devices attempt to connect to a FortiAnalyzer unit that has reached its
number of maximum number of allowed devices, the FortiAnalyzer unit will reject
connection attempts by excess devices, and automatically add those excess
devices to the list of blocked devices. For more information about on blocked
devices, see
“Blocking device connection attempts” on page 86 .
Once the FortiAnalyzer unit has exceeded its maximum number of allowed
devices, you will not be able to add devices to the device list. To resume adding
devices, you must first block a device that is currently on your device list, then
unblock the device you want to add and add it to the device list.
Unregistered vs. registered devices
The FortiAnalyzer device list can display both registered and unregistered
devices.
If you have configured Unregistered Device Options to do so, unregistered
devices appear in the device list when the FortiAnalyzer unit receives a
connection attempt. However, a device will not be able to use most of the
FortiAnalyzer unit’s features until you register the device, either manually or
automatically.
If you want to configure connection attempt handling, including whether or not a
device is automatically added to the device list as a registered or unregistered
device, see
“Configuring unregistered device connection attempt handling” on
page 79 .
For more information about manually registering a device, see “Manually adding a
device” on page 80 .
Note: Both registered and unregistered devices count towards the maximum number of
devices available for a FortiAnalyzer unit. Too many unregistered devices will prevent you
from adding a device. For more information, see
“Maximum number of devices” on
page 76 .