Override Security Fabric Logging on Security Fabric Fortigate

Problem:

On Fortigate devices that are connected to other Fortigate devices via security fabric, logging settings are usually inherited from the fabric root. This stops you from being able to manipulate firewall policy logging on downstream Fortigates.


Solution:
There are some commands you can run to override fabric logging settings:

Commands:

config system csf

set configuration-sync local

Once configuration-sync is set to local, you will be able to override logging settings on firewall policies.

Leave a Reply

Your email address will not be published. Required fields are marked *