Fortinet 3.0 MR7 Network Card User Manual


 
FortiAnalyzer Version 3.0 MR7 Administration Guide
74 05-30007-0082-20080908
Viewing the device list Device
Devices may automatically appear on the device list when the FortiAnalyzer
receives a connection attempt, according to your configuration of Unregistered
Device Options, but devices may also automatically appear as a result of
importing log files. For more information, see “Importing a log file” on page 95.
To view the device list, go to Device > All.
Figure 1: Devices list
Add Device Select to manually add a new device to the device list.
For instructions on manually adding devices, see “Manually
adding a device” on page 80.
Show Select the type of devices to display in the list. You can select
devices by type or by group, or select Unregistered to display
devices that are attempting to connect but that have not yet been
added.
Page Enter a page number, then press Enter to display that page
number of the device list.
Unregistered Device
Options
Select the options to instruct the FortiAnalyzer unit on how to
handle connection attempts from unregistered devices. For more
information, see “Configuring unregistered device connection
attempt handling” on page 79.
Name The name of the device in the device list. This can be any
descriptive name that you want assign to it, and does not need to
be its host name.
Hardware The model of the device. For example, the device list displays a
FortiGate-300A model as FGT300A.
IP Address The IP address of the device. If the device has not recently
established a connection, 0.0.0.0 appears.
Administrative
Domains
The ADOM(s) to which the device is assigned.
This column does not appear on FortiAnalyzer-100/A/B models.
Log Tx Rx
Content Tx Rx
Quar Tx Rx
Report Tx Rx
Indicates connection permissions. Green check mark icons in:
Tx indicates the device is allowed to transmit to the
FortiAnalyzer unit.
Rx indicates the device is allowed to view or retrieve items
stored on the FortiAnalyzer unit.
Types of connections supported by each device type vary, and so
it is normal for some device types to have no permission in
Content (content archive), Quar (quarantine), and Report
columns, or to have Tx but not Rx permission in the Log column.
For example, Syslog devices are not capable of retrieving logs,
and so have no associated Rx permission in the Log column.
For FortiManager units, Tx and Rx indicators in the Log column
differ in meaning.
Delete
Block
Edit
Add