更改日志11设置fortianalyzer 12连接到GUI 12 Fortianalyzer设置向导13激活VM许可证18安全考虑20限制受信任的主机访问GUI的20个可信赖的平台20其他安全考虑22其他安全考虑22 GUI概述22 GUI概述22 PANES 22 PANES 24颜色主题24颜色菜单25使用ADOM 27使用ADM 27使用右Cli Cont 27 cons 27 cons 27 cons 27 cons 27 passwords 28 Target audience and access level 29 Initial setup 29 FortiManager features 29 Next steps 30 Restarting and shutting down 30 FortiAnalyzer Key Concepts 31 Operation modes 31 Analyzer mode 31 Collector mode 32 Analyzer and Collector feature comparison 32 Analyzer–Collector collaboration 33 FortiAnalyzer Fabric 33 Administrative domains 33 Logs 34 Log encryption 34 Log storage 34 Log rolling 35 Log deletion 35 SQL数据库35分析和存档日志36数据策略和自动删除37用于存档和分析日志的磁盘利用率37 Fortiview Dashboard 37仪表板39自定义仪表板40
更改日志12设置Fortianalyzer 13连接到GUI 13 Fortianalyzer设置向导14激活VM许可证20个安全考虑22限制受信任的主机22限制GUI访问22个受信任的平台22自动加密24其他安全考虑24其他安全考虑27 GUI GUI EXERVIEW 27使用ADOMS 30使用ADOMS 31使用ADOMS 31使用ADOMS 31使用ADOMS 31使用ADOMS 31使用右cli 31 Showing and hiding passwords 34 Google Map integration 35 Target audience and access level 35 Initial setup 35 FortiManager features 36 Next steps 36 Restarting and shutting down 36 FortiAnalyzer Key Concepts 37 Operation modes 37 Analyzer mode 37 Collector mode 38 Analyzer and Collector feature comparison 38 Analyzer–Collector collaboration 39 FortiAnalyzer Fabric 39 Administrative domains 39 Logs 40 Log encryption 40 Log storage 40 Log rolling 41 Log删除41 SQL数据库41分析和存档日志42数据策略和自动删除43用于存档和分析日志的磁盘利用率43 Fortiview Dashboard 43
更改日志12设置Fortianalyzer 13连接到GUI 13 Fortianalyzer设置向导14激活VM许可证20个安全考虑22限制受信任的主机22限制GUI访问22个受信任的平台22自动加密24其他安全考虑24其他安全考虑因素27 GUI GUI OPERVIEW 27 pANES 27 PANES 29 pANES 31使用AD 31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31 33 Using the Process Monitor 33 Showing and hiding passwords 34 Google Map integration 35 Target audience and access level 35 Initial setup 35 FortiManager features 36 Next steps 36 Restarting and shutting down 36 FortiAnalyzer Key Concepts 37 Operation modes 37 Analyzer mode 37 Collector mode 38 Analyzer and Collector feature comparison 38 Analyzer–Collector collaboration 39 FortiAnalyzer Fabric 39 Administrative domains 39 Logs 40 Log encryption 40 Log存储40日志滚动41日志删除41 SQL数据库41分析和存档日志42数据策略和自动删除43用于存档和分析日志的磁盘利用率43 Fortiview Dashboard 43
更改日志12设置Fortianalyzer 13连接到GUI 13 Fortianalyzer设置向导14激活VM许可证20个安全考虑22限制受信任的主机22限制GUI访问22个受信任的平台22自动加密24其他安全考虑24其他安全考虑因素27 GUI GUI OPERVIEW 27 pANES 27 PANES 29 pANES 31使用AD 31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31 33 Using the Process Monitor 33 Showing and hiding passwords 34 Google Map integration 35 Target audience and access level 35 Initial setup 35 FortiManager features 36 Next steps 36 Restarting and shutting down 36 FortiAnalyzer Key Concepts 37 Operation modes 37 Analyzer mode 37 Collector mode 38 Analyzer and Collector feature comparison 38 Analyzer–Collector collaboration 39 FortiAnalyzer Fabric 39 Administrative domains 39 Logs 40 Log encryption 40 Log存储40日志滚动41日志删除41 SQL数据库41分析和存档日志42数据策略和自动删除43用于存档和分析日志的磁盘利用率43 Fortiview Dashboard 43
更改日志12设置Fortianalyzer 13连接到GUI 13 Fortianalyzer设置向导14激活VM许可证19个安全考虑21限制受信任的主机21限制GUI访问21个受信任的平台模块支持21自动加密23其他安全考虑26其他安全考虑26 GUI OVEREVIEED 26 GUI ERVIEW 26 pANES 27 PANES 28彩色菜单30 ploess 29 Swithers 29 Switch 30 Swithers 29 Switch 30 Switch of Ad af Possing 29 Switch the and Av and af Possing 29 Google Map integration 31 Target audience and access level 31 Initial setup 31 FortiManager features 32 Next steps 32 Restarting and shutting down 33 FortiAnalyzer Key Concepts 34 Operation modes 34 Analyzer mode 34 Collector mode 35 Analyzer and Collector feature comparison 35 Analyzer–Collector collaboration 36 FortiAnalyzer Fabric 36 Administrative domains 36 Logs 37 Log encryption 37 Log storage 37 Log rolling 38 Log deletion 38 SQL数据库38分析和存档日志39数据策略和自动删除40用于存档和分析日志的磁盘利用率40 Fortiview Dashboard 40设备管理器42 ADOMS 44
更改日志12设置Fortianalyzer 13连接到GUI 13 Fortianalyzer设置向导14激活VM许可证20个安全考虑22限制受信任的主机22限制GUI访问22个受信任的平台22自动加密24其他安全考虑24其他安全考虑因素27 GUI GUI OPERVIEW 27 pANES 27 PANES 29 pANES 31使用AD 31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31套装31 33 Using the Process Monitor 33 Showing and hiding passwords 34 Google Map integration 35 Target audience and access level 35 Initial setup 35 FortiManager features 36 Next steps 36 Restarting and shutting down 36 FortiAnalyzer Key Concepts 37 Operation modes 37 Analyzer mode 37 Collector mode 38 Analyzer and Collector feature comparison 38 Analyzer–Collector collaboration 39 FortiAnalyzer Fabric 39 Administrative domains 39 Logs 40 Log encryption 40 Log存储40日志滚动41日志删除41 SQL数据库41分析和存档日志42数据策略和自动删除43用于存档和分析日志的磁盘利用率43 Fortiview Dashboard 43
更改日志5安全驱动的网络7 SD-WAN 7 FORTIANALYZER SD-WAN监视仪表板7增强的SD-WAN报告13安全SD-WAN评估报告6.4.2 15动态云安全性18公共云 28 IAM 29 SAML Fabric SSO 29 AI-driven Security Operations 34 SOC automation 35 Attach reports to incidents 35 Automation Playbooks 39 Add comments to incidents 46 Expanded incident analysis page 48 FortiSOC dashboards 52 FortiOS Connector 53 EMS Connector 57 Normalized Fabric logs 63 Incidents with multiple endpoints and users 6.4.2 67 Default playbook template improvements 6.4.1 68 Incident page improvement 6.4.1 71本地报告操作的过滤器6.4.2 77 SOC订阅许可6.4.1 78尝试将其输出Fortisoc 6.4.2 6.4.2 80来自EMS连接器的脆弱性和软件清单数据6.4.2 82 Fortimail Connector 6.4.2 86归一化日志上的固定日志的警报6.4.3 89报告6.4.3 89正常的日志6.4.3 92 fortig fortor 6.4.3 fortor 6.4.3 94 fortor 6.4.3 94 fortor 64 fortor 6.4.3 94 fortor 64 fortor 64 fortor 64 fortor 64 4. 34 4.服务6.4.6 98高级威胁保护102 IOC重新扫描事件102 fortideceptor记录106事件处理程序的独特计数6.4.2 108
版权所有©2025 Fortinet,Inc。保留所有权利。fortinet®,fortigate®,forticare®和fortiguard®以及某些其他商标是Fortinet,Inc。的注册商标,此处的其他Fortinet名称也可以注册和/或Fortinet的普通法商标。所有其他产品或公司名称可能是其各自所有者的商标。的性能和其他指标,实际绩效和其他结果可能会有所不同。网络变量,不同的网络环境和其他条件可能会影响性能结果。Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet's SVP Legal and above, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall对Fortinet有约束力。为了绝对清晰,任何此类保修都将仅限于与Fortinet内部实验室测试相同的理想条件下的性能。Fortinet完全根据明示或暗示的任何盟约,代表和保证。Fortinet保留更改,修改,转让或以其他方式修改本出版物的权利,恕不另行通知,最新版本的出版物应适用。
Lubinski的团队随时随地使用Fortimanager安全管理平台来推出新设备。Fortianalyzer是Fortinet安全结构,分析,报告和响应平台,该报道说Lubinski团队用来了解其Fortinet网络上发生的任何安全事件。和Fortisiem安全信息和事件管理被部署为SaaS解决方案。它从Alleima的所有安全数据源中收集数据,包括其他Fortinet解决方案,检测事件并在必要时生成警报。“我们从Fortianalyzer和Fortisiem开车很多,” Lubinski说。“我们与外部SOC [安全操作中心]一起,提醒我们需要处理的问题。我们还从Fortiguard Labs收到了有关新威胁的报告,以及Fortisiem的报告有关网络上异常行为的报告。当我们获得这些警报中的任何一个时,我们会使用Fortisiem和Fortianalyzer进行调查。”
Change Log 14 Setting up FortiManager 15 Connecting to the GUI 15 FortiManager Setup wizard 16 Activating VM licenses 21 Security considerations 23 Restricting GUI access by trusted host 23 Trusted platform module support 23 Self-encrypting drives 25 Other security considerations 28 GUI overview 29 Panes 30 Color themes 31 Side menu open or closed 31 Switching between ADOMs 31 Using the right-click menu 31 Avatars 32 Showing and hiding passwords 32 Google Map integration 33 FortiAnalyzer Features 33 Enable or disable FortiAnalyzer features 34 Initial setup 35 Restarting and shutting down 35 FortiManager Key Concepts 36 Communication through protocols 37 FortiGuard 38 Device Manager 38 FortiAnalyzer features 38 Configuration through Device Manager 39 Direct device database editing 39 Indirect device database editing 39 Model devices 40 Zero-touch and low-touch provisioning 40 ADOM和设备41全局ADOM层42 ADOM和策略层42设备管理器层42操作42安装设备设置仅43快速安装(设备DB)43安装策略包43重新安装策略44导入配置44检索配置44