Technical Tip: How to set a maximum number of logged-in administrators

Description

This article describes how to set the maximum number of concurrent administrators that can be logged into a FortiGate.

Scope

FortiGate.

Solution

The maximum number of concurrent administrators that can log in at the same time is 100 by default. The following steps can be used to configure the maximum number of concurrent administrator logins.

In this example, a maximum of 5 concurrent administrator logins will be able to manage the unit at the same time.

FGT# config system global
FGT(global) # set admin-login-max
    please input integer value (1-100)
FGT(global) # set admin-login-max 5  
FGT(global) # end

The user will receive the following message when the maximum number of concurrent sessions has been reached:

If logging in via SSH when the maximum limit is reached, an option to log out an active session is provided:

To list the active admin sessions, execute the following command:

get system admin list

To terminate the active session:

execute disconnect-admin-session <index_number>

For example:

silicon-esx54 # exe disconnect-admin-session ?
<integer> Index of admin to be disconnected
Currently connected admins:
INDEX USERNAME TYPE VDOM PROFILE FROM TIME
0 admin https root super_admin 172.30.160.117 Mon Feb 16 22:22:58 2026
1 admin jsconsole root super_admin 172.30.160.117 Mon Feb 16 22:53:55 2026

Example: To disconnect the HTTPS session initiated by the user admin from 172.30.160.117:

execute disconnect-admin-session 0

Related documents:

• Technical Tip: Control various 'admin' users logging in at the same time

• Technical Tip: Restricting multiple admin sessions from the same admin user.

• Technical Tip : List active admin session of Firewall and disconnect the session via Command Line

• Maximum Values Table