To wrap up this section on the fundamentals and introduction to using 40 Analy
zer,
I'd like to pose a customer scenario and here it is. The customer is
considering using a 40
Analyzer in their Fortinet based network. They have a few questions for us
before they pull the trigger.
So here's the questions. How does the 40 Analyzer, I'll put Faz for short there
,
how does the 40 Analyzer store the log and event data? And then secondly, does
the 40 Analyzer
reduce duplicate log and event entries and how does it do that? So here's what
I love you to do.
I'd like you to pause the video at this point, give those two questions some WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
I'd like you to pause the video at this point, give those two questions some
thought. And then
when you're ready, click on resume and let's review that together.
All right, so regarding how does the 40 Analyzer store the log and event data?
It uses a flavor of SQL, structured query language, effectively a database to
sort and keep track of
all the log entries that it receives. And then secondly, does the 40 Analyzer
reduce duplicate
log and event entries? And if so, how? Well, the way it does that is if we have WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
log and event entries? And if so, how? Well, the way it does that is if we have
a group of 40
gate firewalls that are part of the same security fabric. And by doing that, it
can logically treat
those 40 gates as like one grouping or family, and it will reduce the duplicate
entries. So Firewall
2 is doing IPS functions and Firewall 1 is doing filtering based on application
types or categories
of websites. All that information regarding what's happening is going to be
consolidated here at
the 40 Analyzer to give us a better picture and reduce all the duplicates. So WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
the 40 Analyzer to give us a better picture and reduce all the duplicates. So
that way, if it's
just traffic, for example, going from this Windows computer out to the public
internet. And let's
imagine that traffic is allowed by all the firewall policies in place. The 40
Analyzer,
because these devices are on the same security fabric is going to reduce
unnecessary duplicate
entries. And that's how it does it by leveraging the 40 gate security fabric.
So thanks for joining
me in this set of videos as we've taken a first look at this wonderful tool
called the 40 Analyzer.
And I look forward to seeing you, my friend, in another set of videos very,
very soon. Until then,
I hope this has been informative, and I'd like to thank you for viewing. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
I hope this has been informative, and I'd like to thank you for viewing.