To prevent logs from being tampered with while in storage, you can add a log checksum using the config
system global command. You can configure FortiAnalyzer to record a log file hash value, timestamp, and
authentication code when the log is rolled and archived and when the log is uploaded (if that feature is
enabled). This can also help against man-in-the-middle only for the transmission from FortiAnalyzer to an
SSH File Transfer Protocol (SFTP) server during log upload.
FortiAnalyzer_7.0_Study_Guide-Online page 149
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit