All Release Notes Reporter for FortiGate 1.0.1.73 (2023-07-14)

Added FortiClient EMS Support (Experimental)

• FortiClient EMS support: Use EMS to configure FortiClients to send UTM and Security logs to FortiAnalyzer (see Fortinet EMS System Settings, and configure FortiAnalyzer to forward logs to Fastvue Reporter.
• Known Issues
  
  No size: No ‘size’ values are logged with FortiClient data so you will likely not see the data in any widget sorted by Size, such as Bandwidth reports, especially when normal FortiGate data is also being imported.
  
  No searches or videos: FortiClient does not log query strings in URLs therefore Fastvue Reporter is unable to extract or report on web searches or YouTube videos.
  
  Incomplete Categories: Some categories are not logged with their full name, for example, the URL category ‘Global Religion’ is just logged as ‘Global’, and ‘Real Estate’ is just logged as ‘Real’. We have mapped these truncated categories to the full category name where possible, however some categories such as ‘Web’ category could potentially mean Web Analytics, Web Chat or Web Hosting. ‘Personal’ could potentially mean Personal Privacy, Personal Vehicles or Personal Websites and Blogs. In these cases, we have added a new Category called ‘Web’ and ‘Personal’ and added them to the ‘Acceptable’ Productivity group. Not ideal, but the best we can do based on the data FortiClient supplies.

General

• Fixed issue where log data will stop importing if the IP sending the syslog data changes. When adding syslog sources by a hostname / FQDN, Fastvue Reporter will now re-resolve the Source’s hostname to an IP when they detect they are no longer receiving syslog data from the IP the hostname last resolved to. The hostname to IP resolution previously only occurred when a Source is added, or when the Fastvue Reporter service is started.
• Fixed issue where users logged with their UPN instead of their sAMAccountName would not be aliased to a user object in Active Directory. This meant they would not be displayed with their Display Name, or included in reports on AD Security Groups or Departments, Offices, or Companies)
• Fixed issue where users with the same sAMAccountName from different domains would be aliased to the same user.
• Top downloads widget on the Bandwidth dashboard now handles long URLs by truncating to one line, with the rest of the URL shown in a hover-over ellipsis.

Performance Improvements:

• Further optimized the data import pipeline.
• Reduced the performance impact of source host resolution by increasing the TTL for cached entries and reducing resolution attempts for failed resolutions.

Download Latest Update