0

I need to analyze the traffic of a Fortigate Firewall in my program.

Currently, I can read the overall traffic using SNMP.

The problem is that I need to analyze the type of traffic (HTTP, video streaming etc.) too.

Is this possible using SNMP or do I need to use another protocol like NetFlow, Packet Sniffer or xFlow and what do I need to look for(e.g. what OIDs)?

I am using the Firmware Version v5.2.13,build762 (GA).

Does anybody know a protocol that I can use for this?

Improve this question
6
  • The Fortigate specifically provides information about that through Fortiguard - by protocol, source, destination, application, ... Also, 5.x firmware is ancient.
    – Zac67 ♦
    Apr 21, 2020 at 7:31
  • I know that the version is old but I have that firewall to test it. I may be able to update it if it is required but I am not sure. Can I read that information automatically in my program?
    – dan1st
    Apr 21, 2020 at 7:43
  • You'd need to add the developer API to your subscription, sadly it's not public. FortiAnalyzer should also be able to export what you need. Another option is to log externally (via syslog) and analyze that (that's what we do). We also use sFlow (on the core switch) for a quick overview.
    – Zac67 ♦
    Apr 21, 2020 at 8:20
  • What can I use that is available publicly?
    – dan1st
    Apr 21, 2020 at 8:43
  • 1
    There is an option netflow-sampler in config system interface so I guess.
    – dan1st
    Apr 21, 2020 at 12:15

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.