Fortinet FortiAnalyzer 3.0 MR7 - Manual (Page 82)

FortiAnalyzer Version 3.0 MR7 Administration Guide
80 05-30007-0082-20080908
Manually adding a device Device
Manually adding a device
You can add devices to the FortiAnalyzer unit’s device list either manually or
automatically. If you have configured Unregistered Device Options to
automatically register known-type devices, you may only need to manually add
unknown-type devices such as a generic Syslog server. If you have configured
Unregistered Device Options to require it, you may be required to add all devices
manually. For more information, see
“Configuring unregistered device connection
attempt handling” on page 79 .
If the device has already been automatically added, the device was added to the
device list using default settings. You can reconfigure the device connection by
manually editing the device in the device list.
Manually adding a device to the device list, or editing its configuration, configures
connections from the device but does not automatically establish a connection.
You need to configure the device to send traffic to the FortiAnalyzer unit to
establish a connection. For more information, see the
FortiGate Administration
Guide , FortiMail Administration Guide , FortiManager Administration Guide ,
FortiClient Administrator’s Guide , or your Syslog server’s documentation. If there
is no explicit option to log specifically to a FortiAnalyzer unit, you can use options
for remote logging to a Syslog server.
Due to the nature of connectivity for certain high availability (HA) modes,
FortiGate units in an HA cluster may not be able to send full content archives and
quarantine data. For more information, see the
FortiGate HA Overview .
All FortiClient installations are added as a single device, rather than as one device
configuration per FortiClient installation, and their log messages are stored
together. Use the FortiAnalyzer reporting features, to obtain network histories for
individual FortiClient installations.
You must add the FortiManager system to the FortiAnalyzer device list to remotely
administer the FortiAnalyzer unit using a FortiManager system. Additionally, you
must also:
• enable web services on the FortiAnalyzer network interface that will be
connected to the FortiManager system
• register the FortiAnalyzer unit with the FortiManager system
• be able to connect from your computer to the web-based manager of both the
FortiManager system and the FortiAnalyzer unit.
For more information on enabling web services, see “Administrative Access” on
page 45 . For more information on configuring remote management of
FortiAnalyzer units using a FortiManager system, see the FortiManager
Administration Guide .
Note: Remote logging from FortiClient installations requires FortiClient 3.0 MR2 or later.