FortiAnalyzer

The flight recorder and security dashboard for your network. It collects logs from your Fortinet devices in one place and shows what’s going on.

Fortinet devices send logs to it. It indexes them, applies analytics and detection handlers, generates reports, and can run playbooks. It can also forward logs to other systems.

This is the record of what happened. When an investigator asks what an inmate did, when and how, these logs provide the network side of the answer. Logs show what, when and how, while the reason why still comes from staff and investigators.

• Provides a searchable history of activity by user, device, application and time.
• Shows attempts to reach blocked sites or applications, including attempts to get around filters.
• Creates scheduled reports on inmate network use for administrators.
• Keeps records for investigations, grievances and audits.

• Attempted-violation reporting: blocked events are logged too, which shows repeat attempts and patterns of behavior.
• Event alerts: administrators can be alerted on specific behavior, for example a proxy or VPN attempt on the inmate network.
• Central logs from firewalls, Wi-Fi, switches and endpoints.
• Built-in reports reduce audit preparation.
• Log storage separate from devices, which an attacker can’t easily erase by compromising one firewall.
• Event handlers create alerts for specific behavior.