Monitor; Firewall User Monitor List - Fortinet FortiGate Series Administration Manual
Hide thumbs
Also See for FortiGate Series:
- Administration manual (60 pages) ,
- Install manual (51 pages) ,
- Quick start manual (14 pages)
Table of Contents
Advertisement
Monitor
Monitor
Firewall user monitor list
676
To configure authentication setting options, go to User > Options.
Figure 421: Authentication Settings
Authentication Timeout
Protocol Support
Certificate
Apply
You can go to User > Monitor to view lists of currently authenticated users, active SSL
VPN sessions, activity on VPN IPSec tunnels, authenticated IM users, and banned users.
For each authenticated user, the list includes the user name, user group, how long the
user has been authenticated (Duration), how long until the user's session times out (Time
left), and the method of authentication used. VPN tunnel information includes user name,
IP address of the remote client, connection type (IPSec), Proxy ID source/destination
(IPSec), and start time of the sessions (SSL). The list of IM users includes the source IP
address, protocol, and last time the protocol was used. The Banned User list includes
users configured by administrators in addition to those quarantined based on AV, IPS, or
DLP rules.
The following lists are available:
•
Firewall user monitor list
•
IM user monitor list
•
NAC quarantine and the Banned User list
In some environments, it is useful to determine which users are authenticated by the
FortiGate unit and allow the system administrator to de-authenticate (stop current session)
users. With the Firewall monitor, you can de-authenticate all currently authenticated users,
or select single users to de-authenticate. To permanently stop a user from re-
authenticating, change the FortiGate configuration (disable a user account) and then use
the User monitor to immediately end the user's current session.
To view the list of authenticated users (Firewall), go to User > Monitor > Firewall.
Enter a length of time in minutes, from 1 to 480. Authentication
Timeout controls how long an authenticated firewall connection can be
idle before the user must authenticate again. The default value is 30
Select the protocols to challenge during firewall user authentication.
If using HTTPS protocol support, select the Local certificate to use for
authentication. Available only if HTTPS protocol support is selected.
Apply selections for user Authentication Settings.
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903
http://docs.fortinet.com/
•
Feedback
User
Advertisement
Table of Contents
