FortiAnalyzer GUI
You can use the GUI to configure most FortiAnalyzer settings, such as the date, time, and the host name. You can also use the GUI to reboot and shut down the FortiAnalyzer unit.
Connecting to the GUI
For more information on connecting to your specific FortiAnalyzer unit, read that device’s
QuickStart Guide
.
To connect to the GUI:
1. Connect the FortiAnalyzer unit to a management computer by using an Ethernet cable.
2. Configure the management computer to be on the same subnet as the internal interface of the FortiAnalyzer unit: l
IP address: 192.168.1.X
l
Netmask: 255.255.255.0
3. On the management computer, start a supported web browser and browse to https://192.168.1.99.
4. Type admin in the User Name field, leave the Password field blank, and click Login.
5. If ADOMs are enabled, the Select an ADOM pane is displayed. Click an ADOM to select it.
The home page of tiles is displayed.
6. Click a tile to go to that pane.
If the network interfaces have been configured differently during installation, the URL and/or permitted administrative access protocols (such as HTTPS) may no longer be in their default state.
For information on enabling administrative access protocols and configuring IP addresses, see
Configuring ports and administrator access on page 30
.
If the URL is correct and you still cannot access the GUI, you may also need to configure static routes. For details, see
Adding a static route on page 31
.
After logging in for the first time, you should create an administrator account for yourself and assign the
Super_
User profile to it. Then you should log into the FortiAnalyzer unit by using the new administrator account. See
Configuring administrator accounts on page 52
.
GUI overview
When you log into the FortiAnalyzer GUI, the following home page of tiles is displayed:
Administration Guide
Fortinet Technologies Inc.
25
FortiAnalyzer GUI GUI overview
26
Select one of the following tiles to display the respective pane. The available tiles will vary depending on the privileges of the current user.
Device Manager
FortiView
Log View
Event Monitor
Reports
System Settings
Add and manage devices and VDOMs. See
Devices on page 67 .
View summaries of log data in graphical formats. For example, you can view top threats to your network, top sources of network traffic, top destinations of network traffic and so on.
For each summary view, you can drill down into details for the event. See
FortiView on page 131
.
This pane is not available when the unit is in Collector mode. See
Operation modes on page 17
View logs for managed devices. You can display, download, import, and delete logs on this page. You can also define Custom Views and create Log
Arrays. See
Log View on page 141
.
This pane is not available when the unit is in Collector mode. See
Operation modes on page 17
Configure and view events for managed log devices.See
Event Monitor on page 120
.
This pane is not available when the unit is in Collector mode. See
Operation modes on page 17
Generate reports. You can also configure report templates, schedules, and output profiles, and manage charts and datasets. See
Reports on page 91 .
This pane is not available when the unit is in Collector mode. See
Operation modes on page 17
Configure system settings, such as network interfaces, administrators, system time, server settings, and others. You can also perform maintenance and firmware operations. See
System Settings on page 151 .
The top-right corner of the home page includes an admin menu, as well as a Notification button, and a Help button.
Administration Guide
Fortinet Technologies Inc.
GUI overview FortiAnalyzer GUI
Admin
Notification
Help
Click to change the password or log out of the GUI.
Click to display a list of notifications. Select a notification from the list to take action on the issue.
Click to open the FortiAnalyzer online help or view the About information for your device (Product, Version, and Build Number).
Panes
In general, panes have four primary parts: the banner, toolbar, tree menu, and content pane.
Banner
Tree menu
Content pane
Toolbar
Along the top of the page; includes the home button (Fortinet logo), tile menu, ADOM menu (when enabled), admin menu, notifications, and help button.
On the left side of the screen; includes the menus for the selected pane. Not available in Device Manager.
Contains widgets, lists, configuration options, or other information, depending on the pane, menu, or options that are selected. Most management tasks are handled in the content pane.
Directly above the content pane; includes options for managing content in the content pane, such as Create New and Delete.
To switch between panes, either select the home button to return to the home page, or select the tile menu then select a new tile.
Administration Guide
Fortinet Technologies Inc.
27
FortiAnalyzer GUI GUI overview
Switching between ADOMs
When ADOMs are enabled, you can move between ADOMs by selecting an ADOM from the ADOM menu in the banner.
ADOM access is controlled by administrator accounts and the profile assigned to the administrator account.
Depending on your account privileges, you might not have access to all ADOMs. See also
Administrator Accounts on page 50 .
Using the right-click menu
Options are sometimes also available by using a right-click menu. You can right-click items in the content pane to display a menu and access the options.
In the following example on the
Reports pane, you can right-click a template, and select Create New, View, or
Clone.
28 Administration Guide
Fortinet Technologies Inc.
Restarting and shutting down FortiAnalyzer GUI
Restarting and shutting down
Always use the operation options in the GUI or the CLI commands to restart and shut down the FortiAnalyzer system to avoid potential configuration problems.
To restart the FortiAnalyzer unit from the GUI:
1. Go to System Settings > Dashboard.
2. In the Unit Operation widget, click the Restart button.
3. Enter a message for the event log, then click OK to restart the system.
To restart the FortiAnalyzer unit from the CLI:
1. From the CLI, or in the CLI Console widget, enter the following command: execute reboot
The system will be rebooted.
Do you want to continue? (y/n)
2. Select y to continue. The FortiAnalyzer system will restart.
To shutdown the FortiAnalyzer unit from the GUI:
1. Go to System Settings > Dashboard.
2. In the
Unit Operation widget, click the Shutdown button.
3. Enter a message for the event log, then click OK to shutdown the system.
To shutdown the FortiAnalyzer unit from the CLI:
1. From the CLI, or in the CLI Console widget, enter the following command: execute shutdown
The system will be halted.
Do you want to continue? (y/n)
2. Select y to continue. The FortiAnalyzer system will shutdown.
To reset the FortiAnalyzer unit:
1. From the CLI, or in the CLI Console widget, enter the following command: execute reset all-settings
This operation will reset all settings to factory defaults
Do you want to continue? (y/n)
2. Select y to continue. The device will reset to factory default settings and reboot.
To reset logs and re-transfer all logs into the database:
1. From the CLI, or in the CLI Console widget, enter the following command: execute reset-sqllog-transfer
WARNING: This operation will re-transfer all logs into database.
Do you want to continue? (y/n)
2. Select y to continue. All logs will be re-transferred into the database.
Administration Guide
Fortinet Technologies Inc.
29