FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Not applicable
Article Id 194436

Article

Description This article describes the relationship between active-active HA virus scanning, log messages, and the Recent Virus Detections list on the System Status page.
Components FortiOS v2.80 HA clusters.
Steps or Commands

An active-active HA cluster load balances antivirus sessions among all cluster units.

If the cluster units are configured to log to disk, each cluster unit records log messages to disk only for the antivirus sessions processed by that individual cluster unit. Similarly, if the cluster units are configured to log to memory, each cluster unit records log messages to memory only for the antivirus sessions processed by that individual cluster unit.

 

It is possible to go to Log&Report -> Log Access and select the serial number of each cluster unit to view log messages recorded by the cluster unit.

 

The Recent Virus Detections list on the System Status page of the web-based manager displays information about viruses recently detected by the FortiGate unit.

 

The information on the Recent Virus Detections list comes from polling log messages stored to disk.

 

If an active-active HA cluster is configured to record log messages to disk, the Recent Virus Detections list displays information about viruses detected by the primary unit only.

 

If the cluster is configured to record log messages to memory the Recent Virus Detections list does not display any information.

 

Contributors