Lesson 6 of 14
Not started

Logging and Monitoring

Configure local and remote logging, understand log types and severity, choose storage, and monitor activity with FortiView and the dashboards.

FortiOS produces three log categories:

  • Traffic logs — session records (allowed/denied), the backbone of visibility.

  • Event logs — system, admin, VPN, user, routing, HA, and Wi-Fi events.

  • Security logs — profile hits (AV, IPS, web filter, application control, DLP), generated only when the matching profile detects something.

Each entry carries a severity from emergency(0) down to debug(7). You set a minimum logging severity to control volume.

Which is NOT a standard FortiGate log category?

When are security logs generated?