FCP_FAZ_AD-7.4 Exam Dumps : FCP - FortiAnalyzer 7.4 Administrator

page 138 of the FortiAnalyzer 7.4 Admin Study Guide. If there is an existing primary device, then this device becomes a secondary device. The default role is Secondary, so that the device can synchronize with the primary device. A secondary device cannot become a primary device unit it is synchronized with the current primary device.

In order to configure IOC, you require the following:

• A one-year subscription to IOC. Note that FortiAnalyzer does include an evaluation license, but it is restrictive and only meant to give you an idea of how the feature works.

• A web filter services subscription on FortiGate device(s)

• Web filter policies on FortiGate device(s) that send traffic to FortiAnalyzer

Compromised Hosts or Indicators of Compromise service (IOC) is a licensed feature.

To view Compromised Hosts, you must turn on the UTM web filter of FortiGate devices and subscribe your FortiAnalyzer unit to FortiGuard to keep its local threat database synchronized with the FortiGuard threat database. See Subscribing FortiAnalyzer to FortiGuard.

Ref : /6.4.0/administration-guide/137635/viewing-compromised-hosts