fortinet enterprise firewall

Expression

product = "fortinet enterprise firewall"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-activity	src_ip	Default		✓
	src_port	Default			✓
	additional_info	Default			✓
	service_name	Default			✓
	dest_ip	Default		✓
	dest_host	Default		✓
	src_host	Default		✓
	event_subtype	Default			✓
	dest_port	Default			✓
network-session	severity	Default			✓
	src_translated_ip	Default			✓
	src_interface	Default			✓
	bytes_out	Default			✓
	bytes_in	Default			✓
	dest_interface	Default			✓
	src_country	Default			✓
	action	Default			✓
	src_translated_port	Default			✓
	user	Default		✓
	dest_country	Default			✓