Technical Note : Utilization and impact of "other-application-log" on a FortiGate

[Jonathan_Body_FTNT]

Description
This article provides details about the ''other-application-log'' option on the FortiGate.

This parameter determines what action the FortiGate will take for unknown application traffic or supported application traffic which are not configured in the current application control list.
Scope
FortiOS 4.0 and above

Solution

This parameter can be found on both the CLI and GUI of the FortiGate in the following menus:

CLI

config application list

   edit "other"

     set other-application-log disable/enable   

     next

   end

GUI

UTM > Application control > edit <xyz>

NB: This setting is not enabled by default ; enabling this parameter may cause unnecessary CPU and IPS engine overhead. Best practice is set to disable unless specific requirement is needed for monitoring purposes on application traffic.