In the FortiAnalyzer FortiView, source and destination IP addresses from FortiGate devices are not resolving to a hostname.
How can you resolve the source and destination IP addresses, without introducing any additional performance impact to FortiAnalyzer?
- Resolve IP addresses on a per-ADOM basis to reduce delay on FortiView while IPs resolve
- Configure # set resolve-ip enable in the system FortiView settings
- Configure local DNS servers on FortiAnalyzer
- Resolve IP addresses on FortiGate
Answer(s): D
Reference:
https://packetplant.com/fortigate-and-fortianalyzer-resolve-source-and-destination-ip/
“As a best practice, it is recommended to resolve IPs on the FortiGate end. This is because you get both source and destination, and it offloads the work from FortiAnalyzer. On FortiAnalyzer, this IP resolution does destination IPs only”