FortiAnalyzer 360 Security Report shows devices on unused interface (port6)

Forum|Forum|6 months ago
March 6, 2026
4 replies
304 views

Hi,

I noticed something strange in the built-in 360 Security Report in FortiAnalyzer.

Between two weekly reports the number of detected devices increased from 2690 to 3707. Most of the increase is detected as Windows devices (from about 1398 to 2144).

This does not match reality, because no large number of new Windows machines were added to the network.

Another strange thing is that the report shows 561 devices detected on port6, but port6 is not used at all on my FortiGate.

Versions:

FortiAnalyzer: 7.4.10
FortiGate / FortiOS: 7.4.11

fortianalyzer-report-showing-many-new-devices-v0-bi4qocg9jfng1.jpg

Screenshots from both reports are attached.

Thanks.

Jean-Philippe_P

Staff & Editor

Hello fnspit,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Jean-Philippe - Fortinet Community Team

funkylicious

SuperUser

maybe at some point port6 was connected.

you can check in the logs if this was the case, events for link up/down.

"jack of all trades, master of none"

fnspitAuthor

New Member

I checked logs, link was never up.

farhanahmed

Staff

@fnspit
If you check the report it uses the chart "Asset Count by Interface" and the dataset used to fetch the info its "360-security-Rating-Asset-Count-by-Interface".

Instead of Logs table, this dataset uses the table $ADOM_ENDPOINT.

Screenshot 2026-03-16 165850.png