• All Files

Home > Online Help

System Events

The System Events console lists security events detected by FortiOS, providing a name and description for the events, an assessment of the event's severity level (Alert, Critical, Emergency, Error, or Warning), and the number of instances the events were detected. This console can be filtered by Event Name and Severity.

Scenario: Viewing Security Events & Security Actions

System Events can be used in conjunction with All Sessions to see what network security events took place, and specifically see what action was taken upon their detection:

• Go to System > FortiView > System Events, to see what and how many network events have taken place, as well as how severe they are in terms of the threat they pose to the network.
• You see that a particular event has warranted a severe rating, and has allowed traffic to bypass the firewall. Note when the event took place, and go to System > FortiView > All Sessions, to see more information pertaining to the security event.
• From this console, you can determine the system event's source, how much traffic was sent and received, and the security action taken in response to this security event. These actions differ, depending upon the severity of the security event. To view these actions, see the table-entry for Security Action in Columns displayed.

 

Only FortiGate models 100D and above support the 24 hour historical data.