FortiAnalyzer 6.0.3
FortiAnalyzer 6.0.3 includes the following new features and enhancements:
Event Manager
New Default Event Handlers
The following new default Event Handlers have been added for malicious, suspicious, and high risk events:
- Default-High-Risk-App-Detection
- Default-Malicious-Code-Detection
- Default-Malicious-Destination-Detection
- Default-Malicious-File-Detetion
- Default-Suspicious-File-Detection
FortiView
Log ID for long sessions
In FortiView, Log ID = 0000000020 indicates a long session that is not yet closed. A long session has multiple logs but is still considered one session. The sent/received data of long sessions counts all interim traffic data reported by lines with Log ID = 0000000020.
When the session is closed, the Log ID is 13.