Fortinet FortiGate FortiGate-50, Руководство по установке и настройке

Страница: 224 / 240

224
Fortinet Inc.
Configuring traffic logging Logging and reporting
Configuring traffic logging
You can configure the FortiGate unit to record traffic log messages for connections to:
• Any interface
• Any firewall policy
The FortiGate unit can filter traffic logs for any source and destination address and
service. You can also enable the following global settings:
• resolve IP addresses to host names,
• record session or packet information,
• display the port number or service.
The traffic filter list shows the name, source address and destination address, and the
protocol type of the traffic to be filtered.
This section describes:
• Enabling traffic logging
• Configuring traffic filter settings
• Adding traffic filter entries
Enabling traffic logging
You can enable logging on any interface and firewall policy.
Enabling traffic logging for an interface
If you enable traffic logging for an interface, all connections to and through the
interface and recorded in the traffic log.
1 Go to System > Network > Interface .
2 Select Edit in the Modify column beside the interface for which you want to
enable logging.
3 For Log, select Enable.
4 Select OK.
5 Repeat this procedure for each interface for which you want to enable logging.
Enabling traffic logging for a firewall policy
If you enable traffic logging for a firewall policy, all connections accepted by firewall
policy are recorded in the traffic log.
1 Go to Firewall > Policy .
2 Select a policy tab.
3 Select Log Traffic.
4 Select OK.