Forward traffic logs fortigate. The reason is at FortiGate unit v7.

Forward traffic logs fortigate. I am using a Fortigate 100D cluster which is in version v5.

Forward traffic logs fortigate It's just not forwarding failed response. This article describes UTM block logs under forward traffic. uint64. 10. wanout. Interestingly, when I switch to viewing System events, all logs are visible, leading me to believe that it's not a connection problem but rather a specific issue with Forward Disable: Policy UUIDs are excluded from the traffic logs. Would you like to see t Jan 1, 2025 · In fact, it is seen when you enter the details of security events logs. Make sure it's showing logs from memory On the policies you want to see traffic logged, make sure log traffic is enabled and log all events (not just security events - which will only show you if traffic is denied due to a utm profile) is selected. 94 <-----> port4 [FortiGate] port1 10. However, I'm encountering an issue with three FortiGate devices that show an active connection and are sending logs to the FAZ. 1,build618. Click Policy The following is an example of a traffic log on the FortiGate disk: date=2018-12-27 time=11:07:55 logid="0000000013" type="traffic" subtype="forward" level="notice" vd="vdom1" eventtime=1545937675 srcip=10. Regarding local traffic being forwarded: This can happen in cases of VIP and similar s Oct 10, 2024 · - After upgrading to FortiOS 7. fortinet. Message ID: 13 Message Description: LOG_ID_TRAFFIC_END_FORWARD Message Meaning: Forward traffic Type: Traffic Category: forward Severity: Notice Mar 1, 2018 · Hi guys, According to NSE4, FortiGate will generate traffic logs once a firewall policy closes an IP session. 155 dstport=89 dstintf="port2" dstintfrole="lan" srccountry="Pakistan" dstcountry="India Apr 18, 2024 · I have a FortiAnalyzer collecting logs from my entire network. . However, under Log & Report -> Events, only 7 days of logs are shown. Scenario 2: Monitoring the WAN IP Used in VIP Traffic. 30. 0, the default severity is set to 'information'. 140. 18. forward traffic logs are blank. You should test that the FortiGate unit can upload logs to the FortiAnalyzer unit, so that the settings are configured properly. Jun 2, 2016 · Sample logs by log type. config log syslogd filter set severity information set forward-traffic enable set local-traffic enable set multicast-traffic enable set sniffer-traffic enable set anomaly enable set voip enable set dns enable set ssh enable set filter '' set filter-type include Jan 31, 2018 · That is what it looks like: On the FortinetGuide Twitter Account I found information: "If you see #FortiGate forward traffic log Deny:DNS Error, it's not the 'gate blocking DNS traffic. Solution: This LAB testing involves FortiGate as a Firewall where a DNS filter security profile is applied and a PC Client (windows) as a client simulator . show full-configuration log disk filter config log disk filter set severity information set forward-traffic enable set Jan 23, 2020 · Is there away to send the traffic logs to syslog or do i need to use FortiAnalyzer . In GUI, logs reflect the destination IP along with the domain name. Solution Basic difference between the Bridge Mode and the Tunnel Mode. forticloud. 15 build1378 (GA) and they are not showing up. 6. To test the FortiAnalyzer upload settings. " Aug 17, 2023 · Traffic Sent but No Received in Forward Traffic Logs We have a FortiGate 400F v7. 2. It will still be considered local traffic, because the initial traffic (prior to DNAT) is addressed to the FortiGate directly. Scope Solution Log all sessions should be enabled in the ipv4/firewall policy. Solution: In case the Forward Traffic filter is loading slowly with filters applied, follow the below steps to troubleshoot: Verify the behavior is happening with different browsers as well. To apply filter for specific source: Go to Forward Traffic , select 'add filter' and enter the specific IP. Dec 26, 2023 · log 一般存放在 Fortigate 自己的硬碟，並且只保留 7 天，如果要對 log 做更多的處理，可考慮購買 analyzer 或是雲端空間，也可自建 log 收集軟體自行 Jan 29, 2021 · 1. Does anyone have a solution to this proble Jun 23, 2023 · The results column of forward Traffic logs & report shows no Data. Length. To enable the name May 28, 2021 · the first workaround steps in case of unable to retrieve the Forward traffic logs or Event logs from the FortiCloud. 63: Jul 16, 2024 · This article explains via session list and debug output why Implicit Deny in Forward Traffic Logs shows bytes Despite the Block in an explicit proxy setup. Dec 3, 2020 · Forward traffic logs concern any incoming or outgoing traffic that passes through the FortiGate, like users accessing resources in another network. Traffic Logs > Forward Traffic Disable: Policy UUIDs are excluded from the traffic logs. 11 running HA a-a, with 3 ISP SD-WAN. However, memory/disk logs can be fetched and displayed from GUI. Create a new, or edit an existing, log forwarding entry: edit <log forwarding ID> Set the log forwarding mode to aggregation: set mode aggregation Dec 23, 2022 · On the forward traffic logs, it is possible to configure the table and add a column called 'Source Host Name'. Solution: Check SSL application block logs under Log & Report -> Forward Traffic. Is there away to send the traffic logs to syslog or do i need to use FortiAnalyzer config log syslogd filter set severity information set forward-traffic enable set local-traffic enable Jan 22, 2019 · Hi, I am also seeing similar behavior on one my customers VM fortigate, date=2022-04-27 time=13:08:00 eventtime=1651045081133832550 tz="+0530" logid="0000000013" type="traffic" subtype="forward" level="notice" vd="root" srcip=182. Feb 16, 2021 · FortiGate. The "close" action itself doesn't provide sufficient information to make that determination also check this document for your reference on LOG_ID_TRAFFIC_END_FORWARD Testing uploading logs to a FortiAnalyzer unit. This is accomplishe Dec 10, 2024 · By default, the FortiGate will only log the IPs and not resolve them to their corresponding domains, so the URL is not visible in the logs. Our problem is that nothing is seen in the security events summary field. Starting from FortiOS 6. 29 srcport=3233 srcintf="port1" srcintfrole="wan" dstip=20. It includes both traffic and security log messages so that messages about security events can be viewed alongside messages about the traffic at the time of the event. GUI Configuration: Sep 9, 2016 · This can occur if the connection to the remote server fails or a timeout occurs. countweb. Thanks, Kruthi Apr 20, 2024 · When I attempt to view the Forward Traffic logs on the FortiGate (selecting FAZ as the source) or directly on the FAZ itself, I receive a "No records found" message. 100. So Traffic logs are displayed by default from FortiOS 6. 1. I've changed maximum-log-age to 365. When I attempt to view the Forward Traffic logs on the FortiGate (selecting FAZ as the source) or directly on Dec 17, 2024 · Hi guys, I am trying to get all forward traffic logs from the last 7 days via the Rest-API, filtered by specific policy IDs, but I only get the logs of a specific policy ID from the current second as a result (for example 2 logentries instead of over 1000). Number of Web Filter logs associated with the session. Any traffic NOT destined for an IP on the FortiGate is considered forward traffic. 6 and 6. I am not using forti-analyzer or manag Dec 8, 2017 · Hi, I am using Fortigate appliance and using the local GUI for managing the firewall. Regarding local traffic being forwarded: This can happen in cases of VIP and similar setups. Technical Tip: Displaying logs via CLI. The FortiAnalyzer device will start forwarding logs to the server. Scope: FortiGate Cloud, FortiGate. FortiOS Log Message Reference 4 days ago · Suggest trying a different log source or check the availability of FortiGate Cloud. com&# Jan 22, 2020 · I currently have the 'forward-traffic' enabled; however, I am not seeing traffic items in my logs. 235 dstport=443 dstintf="port11" dstintfrole="undefined" poluuid="c2d460aa-fe6f-51e8-9505-41b5117dfdd4 Apr 8, 2022 · Go to Log & Report -> Forward Traffic', move the mouse pointer to 'Data/Time' column and the 'Configure Table' setting button will be prompted out as shown in the screenshot below. Dec 17, 2024 · Hi guys, I am trying to get all forward traffic logs from the last 7 days via the Rest-API, filtered by specific policy IDs, but I only get the logs of a specific policy ID from the current second as a result (for example 2 logentries instead of over 1000). Solution When traffic matches multiple security policies, FortiGate&#39;s IPS engine ignores the wild Jun 26, 2023 · This article explains why FortiGate only retrieves 1-hour logs when trying to view FortiAnalyzer logs. Log Field Name. 6, 6. Click Log and Report. 4. 1, logging to memory and forticloud (if I can get it working). 2, v7. Click Create New in the toolbar. To ensure all sessions matching this VIP are logged, enable logging of all sessions in the Firewall Policy configuration . In some environments, enabling logging on the implicit deny policy which will generate a large volume of logs. x -> Log&Report -> Forward Traffic, for FortiAnalyzer log location, the default time range for log viewer is 1 hour. 4, there were no more entries within the GUI @ Log & Report => Forward Traffic - For "Log location" "Disk" is set in GUI . wanin config system log-forward-service. Bridge Mode (Local Bridge): In bridge mode, the wireless interface is bridg Sep 17, 2019 · This article explains how to delete all traffic and all associated UTM logs or specific FortiGate log entries stored in memory or local disk. Click Forward Traffic, or Local Traffic. How can I download the logs in CSV / excel format. In the "Logging Options" section, ensure that "Log Allowed Traffic" or "Log Denied Traffic" is selected, and that the "Policy ID" checkbox is checked. Scenario 2 - Windows as DNS server If it is a Windows environment, FortiGate can perform the reverse lookup via the Windows DNS server. For example, by using the following log filters, FortiGate will display all utm-webfilter logs with the destination IP address 40. Solution: Visit login. Please ensure your nomination includes a solution within the reply. That is exactly what is shown in the debug log. 53. HTTP Transaction: HTTP transaction-related Oct 2, 2019 · This article explains how to download Logs from FortiGate GUI. But the download is a . 78. Jan 6, 2023 · I have a Fortigate 101F running v6. Log Settings. Sep 11, 2019 · Starting in firmware version 5. I would like to know if there is a way to clear search filter in Forward Traffic through CLI. In this example, the local FortiGate has the following configuration under Log & Report -> Log Settings. How do i know if there is successful connection or failed connection to my network. I am not using forti-analyzer or manag Logging client IP for forward traffic and HTTP transaction. 4, 5. Technical Tip: No memory logs seen in FortiGate Sample logs by log type. Data Type. 3. countwaf. 150. For this reason, unknown domain names will be shown in Forward Traffic logs. Define the use of address UUIDs in traffic logs: Enable: Address UUIDs are stored in traffic logs. Via the CLI - log severity level set to Warning Local logging . Related Articles. Scope: FortiGate. Select the 'Configure Table' button, it will be possible to customize log field, and selected log field columns will only prompt out after selecting 'Apply'. Traffic logs: Forward Traffic: The forward traffic log includes log messages for traffic that passes through the FortiProxy device. 4. In forward traffic logs, it is possible to apply the filter for specific source/destination, source/destination range and subnet. Message ID: 13 Message Description: LOG_ID_TRAFFIC_END_FORWARD Message Meaning: Forward traffic Type: Traffic Category: forward Severity: Notice Oct 20, 2014 · Nominate a Forum Post for Knowledge Article Creation. Log & Report -> Forward Traffic: SD-WAN Internet Service: This column shows the name of the internet service used for the traffic flow. 2) connected via an IPsec VPN tunnel to a FortiGate 60D (v5. Apr 12, 2022 · - Local Traffic log contains logs of traffic originate from FrotiGate, generated locally so to speak. It will be logged under the Forward Traffic section. Oct 10, 2024 · - After upgrading to FortiOS 7. Here is the details: CMB-FL01 # show full-configuration log memory filter config log memory filter set severity warning set forward-traffic enable set local Jul 2, 2010 · Disable: Policy UUIDs are excluded from the traffic logs. This usually occurs on the internet segment (FortiGate to ISP/server), and most times it is not caused by FortiGate. Log & Report – User Events is your friend. log file format. There is also an option to log at start or end of session. Traffic Logs > Forward Traffic Aug 29, 2023 · Select the policy for which you want to see the Policy ID in the logs. In addition to System log settings, verify that individual firewall policies are configured with most suitable Logging Options. Sep 2, 2016 · I enabled the option to Log All Sessions. We've encountered this issue multiple times now where users cannot connect to the Internet. Traffic Logs > Forward Traffic Log Field Name. The procedure to understand the UTM block under Forward Traffic is always to look to see UTM logs for same Time Stamp. If I put the IP address of the DHCP and DNS server in the Source IP and the 13 - LOG_ID_TRAFFIC_END_FORWARD. SolutionIt is assumed that memory or local disk logging is enabled on the FortiGate and other log options enabled (at Protection Profile 15 - LOG_ID_TRAFFIC_START_FORWARD 16 - LOG_ID_TRAFFIC_START_LOCAL Home FortiGate / FortiOS 7. Forward Traffic Log if you see the user and the icon is blue means that it was authenticated, if it is red it wasn’t. log still blank. edit 5. 2, FortiGate generates a new traffic log type, 'Forward traffic statistics' This log has logid 0000000020 and looks as follows: Aug 20, 2019 · This article explains how to delete FortiGate log entries stored in memory or local disk. Jan 29, 2021 · 1. Below is the illustration of the network topology in which FortiGate is deployed: Client 172. Of course Disk logging is still enabled, i. The severity needs to be set to &#39;Information&#39; to view traffic logs from the disk. I tried to see if I could reproduce the problem on my device on 5. The benefits of doing this include: FortiOS monitors and FortiAnalyzer reports display usernames instead of IP addresses, allowing you to quickly determine who the information pertains to. Interestingly, when I switch to viewing System events, all logs are visible, leading me to believe that it's not a connection problem but rather a specific issue with Forward Jan 18, 2023 · The objective is to send UTM logs only to the Syslog server from FortiGate except Forward Traffic logs using the free-style filters. Type and Subtype. Below is my "log disk setting". Oct 2, 2023 · Can someone advise how to config FortiGate to save 90 days logs history or to config limit for log size (up to 1GB log size)? the FortiGate logs history we need are Forward Traffic and System Events Feb 17, 2017 · Hi, I have a FortiGate 3040B (v5. 85. The Create New Log Forwarding pane opens. 20. string. config vdom edit vdom two . The HTTP transaction and Forward session logs include the ClientIP column that records the client IP address based on the learn-client-ip configuration. 1. config log syslogd filter set severity information set forward-traffic enable set local-traffic enable set multicast-traffic enable set sniffer-traffic enable set anomaly enable set voip enable set dns enable set ssh enable set filter '' set filter-type include Oct 19, 2020 · By default, FortiGate will not generate the logs for denied traffic in order to optimize logging resource usage. Verify traffic log events contain source and destination IP addresses, and interfaces. 4 or above. What am I missing to get logs for traffic with destination of the device itself. Disable: Address UUIDs are excluded from traffic logs. This issue has been resolved in the following FortiOS versions. Dec 31, 2021 · a few reasons behind the logs not being displayed in forward traffic. Jan 30, 2017 · Local traffic is traffic destined for any IP on the FortiGate itself -> management IPs, VIPs, secondary IPs etc. Aug 8, 2024 · This article describes the case the Forward Traffic filter is set with any filter and loading slow data. If I filter the logs for that specific Policy ID, it takes long time to load the logs. FortiGate. Sample logs by log type. Any restrictions to this kind of traffic are not handled by normal firewall policies, but by local-in policies for ingress into FortiGate (where traffic do not pass but terminates on FortiGate, like DHCP requests wheer FortiGate is that DHCP Include usernames in logs. Thanks, Kruthi For more information on filter options refer to the following community article: Technical Tip: Displaying logs via FortiGate's CLI . set aggregation-disk-quota <quota> end. I am able to see the "Source IP" field to click on. Please refer to the reference screenshots below. Event Logging 15 - LOG_ID_TRAFFIC_START_FORWARD 16 - LOG_ID_TRAFFIC_START_LOCAL FortiGate devices can record the following types and subtypes of log entry information: Type. Packet losses may be experienced due to a bad connection, traffic congestion, or high memory and CPU utilization (on either FortiGate or the remote Sep 7, 2022 · This article describes how the FortiGate Static DNS filter will log the traffic respective to the action setting configured for each domain. Solution: If the FortiAnalyzer has a lot of historical logs, the FortiGate GUI forward traffic log page can take a while to load unless there is a specific filter for the time range. Scope FortiGate. Description. 144. To extract the forward traffic of logs of a particular source and destination IP of the specific day to know the policy getting matched and the action applied for specific traffic: exe log filter device 0 Aug 23, 2016 · using standalone FG60E v5. 1 FortiOS Log Message Reference. Usernames can be included in logs, instead of just IP addresses. ScopeFortiGate, FortiAP. 0 and 6. Oct 3, 2016 · We have traffic destined for an IP associated with the FortiGate itself (the external IP of the VIP), and the FortiGate will do DNAT to the internal IP and then forward the traffic to the internal IP. On the FortiGate 3040B, in the "Traffic log" -> "Forword Traffic", I don't have any log about DNS. Apr 22, 2024 · When I attempt to view the Forward Traffic logs on the FortiGate (selecting FAZ as the source) or directly on the FAZ itself, I receive a "No records found" message. 9. show full-configuration log disk filter config log disk filter set severity information set forward-traffic enable set Sep 19, 2023 · Then it will be possible to see the logs at the FortiGate unit to be the same as the logs at the FortiAnalyzer unit under Log View -> FortiGate -> Traffic after that. Is there a way to do that. Solution. WAN Optimization Application type. Jun 23, 2023 · The results column of forward Traffic logs & report shows no Data. In this scenario, traffic matching a virtual IP will not be captured in local traffic logs. Address. Once I got all this to work I enabled IPS, DLP, AV, Web-Filter, CASI. 0. Received bytes = 0 usually means the destination host did not reply, for whatever reason. It is possible to enable the ‘Log IPv4 Violation Traffic’ under ‘implicit deny policy’. Solution Diagram: Traffic Implicit Deny with bytes: date&#61;2024-07-16 time&#61;12:04:14 eventtime&#61;1721102654885922463 Jun 23, 2023 · The results column of forward Traffic logs & report shows no Data. Scope: FortiAnalyzer 7. 2. Related document: Log-related diagnostic commands Apr 10, 2017 · set forward-traffic enable set local-traffic enable set multicast-traffic enable set sniffer-traffic enable set anomaly enable set voip enable set filter '' set filter-type include end . Mar 11, 2015 · how to resolve an issue where the forward traffic log is not showing any data even though logging is turned on in the FortiGate. Jan 22, 2020 · I currently have the 'forward-traffic' enabled; however, I am not seeing traffic items in my logs. WAN outgoing traffic in bytes. The reason is at FortiGate unit v7. 159 <-----> Internet Apr 12, 2023 · This is because when doing any kind of log search, it does not matter if it is from a disk log or memory log, the log search child process will make a temporary index file on disk and if that step fails, the log search will die too. Add another free-style filter at the bottom to exclude forward traffic logs from being sent to the Syslog server. Sep 19, 2023 · Then it will be possible to see the logs at the FortiGate unit to be the same as the logs at the FortiAnalyzer unit under Log View -> FortiGate -> Traffic after that. also the forticloud test account button does not work and the account box is blank, but cann Dec 16, 2024 · Hi guys, I am trying to get all forward traffic logs from the last 7 days via the Rest-API, filtered by specific policy IDs, but I only get the logs of a specific policy ID from the current second as a result (for example 2 logentries instead of over 1000). Local traffic is traffic that originates or terminates on the FortiGate itself – when it initiates connections to DNS servers, contacts FortiGuard, administrative access, VPNs, communication with Apr 27, 2020 · Once modified, Traffic logs should be displayed in the 'Forward Traffic' under memory logs. Solution Check internet connectivity and confirm it resolves hostname &#39;logctrl1. The following message appears: "Only 25 out of 500 results are available at this moment. com in browser and login to FortiGate Cloud. ScopeFortiGate v7. Forward Traffic will show all the logs for all sessions. This topic provides a sample raw log for each subtype and the configuration requirements. ScopeThe examples that follow are given for FortiOS 5. set accept-aggregation enable. ScopeFortiGate. Static DNS filter with domain Nov 6, 2023 · To assess the success or failure of a connection and whether it was permitted by the firewall, you should look for other relevant log entries that provide more details. I tried UTM events, all session and web profile "log-all-urls". When viewing Forward Traffic logs, a filter is automatically set based on UUID. A 360GB drive that's 1% used. Thanks Dec 17, 2024 · Yes, there are more than 500 entries in the forward traffic logs in FTG for that specific Policy ID. To configure the client: Open the log forwarding command shell: config system log-forward. I have policies with security profile applied and it generates logs but it does not appear in the security events summary field. Aug 29, 2023 · Select the policy for which you want to see the Policy ID in the logs. SolutionIn some cases (troubleshooting purposes for instance), it is required to delete all or some specific logs stored in memory or local disk. To check logging is enabled in the policy or not, please use th Feb 3, 2017 · The problem is that now i am stuck and i cannot see anything more when I click on Forward Traffic in Log Report section (see attached file). 204. wanoptapptype. What does that mean? Does that mean when FortiGate sends a FIN packet to the server? Or does that mean when FortiGate sends an ACK packet after it has received a SYN-ACK from the server? I Go to System Settings > Advanced > Log Forwarding > Settings. # config free-style. By default, the original-source-ip is recorded. 4) installed on a remote site. Go to System Settings > Advanced > Log Forwarding > Settings. Enable SD-WAN columns to view SD-WAN-related information. Event Logging Jan 6, 2025 · an issue where FortiGate, with Central SNAT enabled, does not generate traffic logs for TCP sessions that are either established or denied and lack application data. 11 srcport=54190 srcintf="port12" srcintfrole="undefined" dstip=52. uint32. Solution . e. 4, v7. 5 but I could not. show full-configuration log disk filter config log disk filter set severity information set forward-traffic enable set Feb 3, 2017 · Hi Mlourenco! Local traffic is traffic destined for any IP on the FortiGate itself -> management IPs, VIPs, secondary IPs etc. Dec 16, 2024 · This article explains the differences in forward traffic for SSID configured in bridge mode and tunnel mode on FortiGate devices. Go to Log & Report > Log Config > Log Settings. In addition to System log settings, verify that individual IPv4 policies are configured with most suitable Logging Options. If it is desired to see Oct 2, 2023 · Can someone advise how to config FortiGate to save 90 days logs history or to config limit for log size (up to 1GB log size)? the FortiGate logs history we need are Forward Traffic and System Events Dec 4, 2024 · This article describes how to view logs sent from the local FortiGate to the FortiGate Cloud. Fill in the information as per the below table, then click OK to create the new log forwarding. View in log and report > forward traffic. The necessary permissions are also turned on in the log settings field. I am using a Fortigate 100D cluster which is in version v5. config log disk setting set status enable set ips-archive enable set max-policy-packet-capture-size 100 set log-quota 0 set dlp-archive 13 - LOG_ID_TRAFFIC_END_FORWARD. Can you try typing in "Source IP" when you click on the drop-down menu and enter a IP to see if you could filter the source address? Nov 15, 2024 · I am trying to view Deny traffic logs on a Fortigate 30E (FortiGate 30Ev6. Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Solution For the forward traffic log to show data, the option &#39;logtraffic start&#39; must be enabled from the policy itself. Note: - Make s The Local Traffic Log is always empty and this specific traffic is absent from the forwarding logs (obviously). Scope . Solution Logs can be downloaded from GUI by the below steps :After logging in to GUI, go to Log &amp; Report -&gt; select the required log category for example &#39;System Events&#39; or &#39;Forward Traffic&#39;. Is there away to send the traffic logs to syslog or do i need to use FortiAnalyzer config log syslogd filter set severity information set forward-traffic enable set local-traffic enable Dec 9, 2024 · FortiGate generates the forward traffic and UTM logs for the passthrough traffic. To resolve the IP addresses to host names, apply the following settings. I am using home test lab . Number of WAF logs associated with the session Dec 8, 2017 · Hi, I am using Fortigate appliance and using the local GUI for managing the firewall. Click Forward Traffic or Local Traffic. 73. Double-click on an Event to view Log Details. Interestingly, when I switch to viewing System events, all logs are visible, leading me to believe that it's not a connection problem but rather a specific issue with Forward Apr 22, 2024 · When I attempt to view the Forward Traffic logs on the FortiGate (selecting FAZ as the source) or directly on the FAZ itself, I receive a "No records found" message. It's almost always a local software firewall or misconfigured service on the host. Regards, Sep 2, 2016 · I enabled the option to Log All Sessions. ' This occurs when attempting to view forward traffic logs by navigating to Log & Report -> Forward Traffic Logs with the log location set to 'FortiGate Cloud'. Event Logging Jan 23, 2020 · Is there away to send the traffic logs to syslog or do i need to use FortiAnalyzer . Whilst any traffic whatsoever would be useful (pings, logins, radius out) what I am specifically looking for is DNS traffic for the local Fortigate DNS The logs only show traffic passing through FortiGate and may not provide a complete SD-WAN view. 5. set category traffic Sep 8, 2016 · I enabled the option to Log All Sessions. Once all that was working I enabled SSL/SSH Inspection. In the logs I can see the option to download the logs. 176. zxse sumvit kydw kvzepbz nyiman bfmxdhi wwc cmibzjc wburoa cafg gqtb xce ybeqz ktnwwd szb