• Support
  • Forums
  • Blogs

Issue in Integration of OSSIM with Fortigate FW

shaghafshaghaf

New Life Form
Hi,

I am trying to integrate our Fortigate to OSSIM. i have followed bellow steps:

1. Enable syslogs on fortigate for OSSIM.
2.Configured /etc/rsyslog.d/fortigate.conf file with fortigate IP address 
if ($fromhost-ip == ‘192.168.0.1’) then /var/log/fortigate.log
& ~

3.Restarted /etc/init.d/rsyslog services 

4 And ENABLE THIS PLUGIN

But unfortunately i getting following errors (Data not receiving ) and unable to get the FW logs on OSSIM.


I will appreciate if someone any help me in resolving the issue.


OSSIM Capture
titios

Share post:

Comments

  • Hi,
    I have the same issue with Fortigate 5.6.4, but it work fine with 5.4.
    did you find any solutions for this issue please ?
Sign In or Register to comment.