Logging traffic with FortiCloud

Facebooktwittergoogle_plusredditpinterestlinkedinFacebooktwittergoogle_plusredditpinterestlinkedin

This recipe demonstrates how to use FortiCloud, an online logging service provided by Fortinet, to store logs of your FortiGate unit’s traffic. In this example, the log shows sites visited by users on the internal network.

You can access logs using the FortiGate and also through the FortiCloud website.

Find this recipe for other FortiOS versions
5.2 | 5.4

1. Activating FortiCloud

Go to Dashboard and locate the License Information widget. In the FortiCloud row, select Activate. widget showing where to activate FortiCloud
Use an existing FortiCloud account or create a new one. create FortiCloud account
Information about your FortiCloud account now appears in the License Information widget. FortiCloud account information

2. Sending logs to FortiCloud

Go to Log & Report > Log Settings and disable local logging.  Disable local logging
Enable Send Logs to FortiCloud and confirm that Upload Option is set to Realtime. Send logs to FortiCloud 
Select Test Connectivity to verify the connection between your FortiGate and FortiCloud. Test connectivity
Adjust the Event Logging settings as desired and set the GUI Preferences to Display Logs From FortiCloud. Display FortiCloud logs

3. Enabling logging in your Internet access security policy

Go to Policy & Objects > IPv4 and edit the policy that allows connections from the internal network to the Internet. Scroll down to view Logging Options. In order to confirm that logs are being sent to FortiCloud, enable Log Allowed Traffic and select All Sessions. Log all session in policy

4. Results

Browse the Internet. Then, go to Log & Report > Forward Traffic. In the top right corner of the screen, the Log location is shown as FortiCloud.  FortiCloud log report

Go to Dashboard. In the FortiCloud row of the License Information widget, select Launch Portal.

A screen will open in your browser, showing all the devices linked with your FortiGate account. Select the appropriate unit.

You can also access your FortiCloud account by going to www.forticloud.com

FortiCloud device

After you select your device, the FortiCloud Dashboard appears, displaying information about traffic.

From the portal’s top menu bar, you can also access options for FortiView, Drilldown, Reports, and Management.

For more information about using FortiCloud, see the FortiCloud FAQ.

FortiCloud dashboard

For further reading, check out FortiCloud in the FortiOS 5.4 Handbook.

Judith Haney

Judith Haney

Technical Writer at Fortinet
Judith Haney is a Technical Writer on the FortiOS technical documentation team. She graduated with honours from Algonquin College's Technical Writer program in September 2014. In a previous lifetime, Judith earned degrees in Mathematics (B.S.) and French literature (M.A.).
Judith Haney

Latest posts by Judith Haney (see all)

  • Was this helpful?
  • Yes   No
Before you can use FortiCloud, you must register your FortiGate. For more information, see FortiGate registration and basic settings.
It is recommended to use a common FortiCloud account for all your Fortinet logs.
If traffic does not appear in FortiCloud right away, wait 10-15 minutes and try again.
  • Limbad Sagar

    Dear Judith Haney,
    I could activated Forticloud but I’ve faces one problem log & report empty.
    Forticloud log can’t upload. so we are request please given some troubleshooting command.