(13) Fortigate security-DLP Archiving

(13) Fortigate security-DLP Archiving

1. Summary Archiving

   • logs matching traffic ( URL, email header to/from, and so on )
   • Supported protocols:
     • smtp
     • pop3
     • IMAP
     • MAPI
     • HTTP (Get and Post methods only )
     • FTP
     • NNTP
   • enabled on CLI

2. Full archiving

   • logs and archives email messages, attachments, webpages
   • can be useful for short term forensics
     • is resource intensive
     • should be saved to FortiAnalyzer, but can be a local hard disk
   • enabled on the CLI
   • for performance reasons,
     • it's better to use FortiAnalyzer or an external storage device.