Random question - Firewall log sizes

[mdrabble]

Currently going through quotes for firewall/filtering and interesting question came up and that was what size of log files would be generated daily?

 

Reason for asking was for FortiAnalyzer and do we go with a 5gb option or scale up to 10gb?

 

Approx 1300 users, 500ish Devices plus any number of BYOD

 

Currently have Smoothwall, so have no idea how to find that info....... plus I supposed it depends on what you are logging etc.

 

We could go with 5gb and then scale up at a later date but would rather get it right first time if possible.

 

For those who have Fortinet/FortiAnalyzer, what you say you sizes are?

 

Cheers

[OLPTech]

I won't be much help with the Fortinet but on Smoothwall you can find out, the total storage, amount used, and usage estimates of logs by logging into the Smoothwall Admin page > Reports > Settings > Datastore settings then from there view the current usage and usage estimates tab

[SchoolsBroadband]

It all depends how much you turn on and how many policies you have. We've some large MATs using 10GB a day with circa 50 schools in them so 5GB i suspect would be enough. You can start at 5GB and add more as you go though which is what i'd suggest.

 

Thanks

 

Dave

[Wave9_Lee]

Currently going through quotes for firewall/filtering and interesting question came up and that was what size of log files would be generated daily?

 

Reason for asking was for FortiAnalyzer and do we go with a 5gb option or scale up to 10gb?

 

Approx 1300 users, 500ish Devices plus any number of BYOD

 

Currently have Smoothwall, so have no idea how to find that info....... plus I supposed it depends on what you are logging etc.

 

We could go with 5gb and then scale up at a later date but would rather get it right first time if possible.

 

For those who have Fortinet/FortiAnalyzer, what you say you sizes are?

 

Cheers

Large secondaries, we see between 3-5GB per day, subject to what's logged, qty of devices etc. You'd ideally want to keep a years worth. If using Fastvu, you would use your own VM, so no restriction really..

[pete]

We're (5 schools, 2100 users, 1000+ devices plus ~300-ish BYOD) averaging 3.32 GB/day or 103GB/month. 3 of those schools are primaries though.

[PaddyNewman]

I was supporting a site that used 2GB a day. You can probably work out a way to syslog the majority from FortiAnalyzer and compress heavily though for future investigation but I'd think about what you actually need the logs for, then work out if its worth it