Technical Tip: Understanding 'user-device-store-max-unified-mem' in FortiGate

The 'user-device-store-max-unified-mem' is a system global setting that defines the maximum amount of memory the user device store can utilize. By capping the allocated memory, FortiGate prevents device and user information from overwhelming system resources, which is particularly important on hardware models with limited memory.

This parameter works alongside other limits, such as:

• user-device-store-max-users: maximum number of users that can be stored.

• user-device-store-max-devices: maximum number of devices that can be stored.

The values are important to user-based firewall policies, device-based security profiles, and IP-to-user and device mappings.

CLI:

config system global
     set user-device-store-max-unified-mem <value>
     set user-device-store-max-users <value>
     set user-device-store-max-devices <value>
 end

The values can vary depending on versions. To get the minimum, maximum, and default values, check the CLI reference guide from the Document Library of FortiGate.