Technical Tip: How to view authenticated users on FortiProxy and how to deauthenticate

1) Create a User Monitor widget under Dashboard.

2) Once it is added we can see the authenticated users as below.

3) De-authenticating a specific user from GUI.

Select a specific user to get 'Deauthenticate'.

Once, 'Deauthenticate' is selected, Pop up message will appear to confirm.

Select 'OK' to 'Deauthenticate'.

Deauthenticate a specific user from CLI.

tau-kvm06 # diagnose wad user list

ID: 3, VDOM: root, IPv4: 10.134.9.78
user name : sslvpn2
worker : 0
duration : 575
auth_type : IP
auth_method : Basic
pol_id : 0
g_id : 0
user_based : 0
expire : 586
LAN:
bytes_in=16229 bytes_out=136602
WAN:
bytes_in=1484 bytes_out=1814

ID: 4, VDOM: root, IPv4: 10.134.9.42
user name : sslvpn4
worker : 0
duration : 593
auth_type : IP
auth_method : Basic
pol_id : 0
g_id : 0
user_based : 0
expire : no
LAN:
bytes_in=117457 bytes_out=1258914
WAN:
bytes_in=0 bytes_out=0

tau-kvm06 #

To deauthenticate 'sslvpn4' run the below command.

tau-kvm06 # diag wad user clear 4  10.134.9.42 root

This operation will clear the specified user.
Do you want to continue? (y/n)y

Cleared the user (ID: 4, IP: 10.134.9.42, VDOM: root).

Syntax:

tau-kvm06 # diag wad user clear ?

Usage:

# diagnose wad user clear Clear all proxy users
# diagnose wad user clear <ID> <IP|IPv6> <VDOM> Clear a specified user

Example.

# diagnose wad user clear 1 10.1.1.1 root

Example.

# diagnose wad user clear 1 2001::1 root

Use '# diagnose wad user list' to get <ID> <IP|IPv6> <VDOM> of users.