Other Traffic
The traffic log also records interface traffic logging, which is referred to as other traffic. Other traffic is enabled only in the CLI. When enabled, the FortiGate unit records traffic activity on interfaces as well as firewall policies. Logging other traffic puts a significant system load on the FortiGate unit and should be used only when necessary.
Logging other traffic works in the following way:
• firewall policy has logging enabled on it (Log Allowed Traffic or Log Violation Traffic) and other-traffic
• packet comes into an interface
• interface log packet is sent to the traffic log that is enabled on that particular interface
• possible log packet is sent regarding a match in the firewall policy, such as URL filter
• interface log packet is sent to the traffic log if enabled on that particular interface
• packet passes and is sent out an interface
• interface log packet is sent to traffic (if enabled) on that particular interface