Chapter 13 Logging and Reporting : Logging and reporting overview : FortiOS features available for logging : Data Leak Prevention
  
Data Leak Prevention
Data Leak Prevention logs, or DLP logs, provide valuable information about the sensitive data trying to get through to your network as well as any unwanted data trying to get into your network. The DLP rules within a DLP sensor can log the following traffic types:
email (SMTP, POP3 or IMAP; if SSL content SMTPS, POP3S, and IMAPS)
HTTP
HTTPS
FTP
NNTP
IM
A DLP sensor must have log settings enabled for each DLP rule and compound rule, as well as applied to a firewall policy so that the FortiGate unit records this type of activity. A DLP sensor can also contain archiving options, which these logs are then archived to the log device.