Logging and monitoring II

Unified event correlation and risk management Collect, parse, normalize, index. and store security logs

Hosted subscription-based service Long—term log storage and reporting Bound to Fortinet Support account FortiGate includes a free tier

Long term, dedicated storage of log data Reports Log limit dependent on model

Logging server Central repository for networked devices Consolidates logs

Like FortiAnalyzer. can also store logs and generate reports, but has fixed amount per day that is less than equivalent size FortiAnalyzer Primary purpose: central administrative management of networked devices

Configure logging options: (select 4)

By default, if the FortiAnaIyzer disk is full, the oldest logs never are overwritten. However, you can configure FortiAnalyzer to stop logging.

Fortigate uses ___ for log transmission

If using reliable logging, you can encrypt communications using

The primary purpose of which device is to store and analyze logs?

What protocol does FortiGate use to send encrypted logs to FortiAnalyzer?

If you enable reliable logging, which transport protocol will FortiGate use?

Hiding user names in logs:

What setting on your firewall policy must you enable to generate logs on traffic sent through that firewall policy?

Which log type can generate a large number of logs and is therefore disabled by default?

What effect does the CLI command set user—anonymize enable have on traffic and UTM logs?

True or False? Menu items that display under Log & Report depend on the incoming logs.

On the FortiGate GUI, log can help you find a specific log entry more efficiently.

With email alerts, you can trigger alert emails based on or log severity level.

What happens when logs roll?

When you download logs on the GUI,...

What does the following CLI command do? config log disk setting set upload enable