Navigate to Menu > Add Data > Activity in the SNYPR application. Use the following command to verify if the RIN is receiving logs:Īug 21 07:47:51 150.252.254.20 date= time=07:47:51 devname='1500D1' devid='FG1K5D3I15805899' logid='0000000013' type='traffic' subtype='forward' level='notice' vd='root' eventtime=1598014071305195282 tz='-0500' srcip=10.10.46.122 srcport=32767 srcintf='port34' srcintfrole='undefined' dstip=10.10.10.10 dstport=28081 dstintf='port33' dstintfrole='undefined' srccountry='United Kingdom' dstcountry='United States' sessionid=3843177959 proto=6 action='deny' policyid=118 policytype='policy' poluuid='6ab78f78-2db1-51e6-4cd6-184524efe1da' service='tcp/28081' trandisp='noop' duration=0 sentbyte=0 rcvdbyte=0 sentpkt=0 appcat='unscanned' crscore=30 craction=131072 crlevel='high'Ĭomplete the following steps to configure Fortinet Firewall in the SNYPR application:įollow the following steps if you are using SNYPR 6.3.1: To override global configuration for a specific VDOM, open the Fortinet CLI console and enter the following: You can override the FortiAnalyzer/Syslog server from the CLI and specify a different server for the VDOM. Overriding global configurationsĮach Virtual Domain (VDOM) uses the FortiAnalyzer/Syslog server (by default) when enabled. Note: Fortinet allows up to three remote syslog servers.

Firewall fortinet