Recently upon upgrading to 5.0.5 I've noticed that none of the applications are showing up correctly in the 'Top Applications' dashboard. Instead they are all showing up as 'Unknown'.
We'll go through the quick steps to re-enable Application logging so that this dashboard shows us the correct applications.
The first step is to get the name of the Application profile that we're using in our policy. For this example I'm using the 'default' application profile on my web traffic.
Next goto the CLI on the FortiGate and type the following commands in bold (substitute 'edit default' with the name of your application profile):
FORTIGATE80C # config application list
FORTIGATE80C (list) # edit default
FORTIGATE80C (default) # set extended-utm-log enable
FORTIGATE80C (default) # set log enable
FORTIGATE80C (default) # end
FORTIGATE80C #
Browse around a few sites to populate the logs then head back to System > Dashboard > Top Applications. You should now see the application list filling up!
We'll go through the quick steps to re-enable Application logging so that this dashboard shows us the correct applications.
The first step is to get the name of the Application profile that we're using in our policy. For this example I'm using the 'default' application profile on my web traffic.
Next goto the CLI on the FortiGate and type the following commands in bold (substitute 'edit default' with the name of your application profile):
FORTIGATE80C # config application list
FORTIGATE80C (list) # edit default
FORTIGATE80C (default) # set extended-utm-log enable
FORTIGATE80C (default) # set log enable
FORTIGATE80C (default) # end
FORTIGATE80C #
Browse around a few sites to populate the logs then head back to System > Dashboard > Top Applications. You should now see the application list filling up!
3 comments:
Great post! Thank you!
fine.
tested wirh simple corecture in line 3
set extended-utm-log enable
thank you
Thanks for spotting that Ryszard; I've updated the CLI to reflect the full command now.
Post a Comment