Hi,
I've got a Fortigate 40F and the source objects you can see on the logs/fortiview they don't match the current user. It's like it's showing maybe the first user that connected with that IP, but it's not updating.
I've got it connected with LDAP.
How can I make it update the names so they are correct on the logs?
Thanks,
Albert
Hey AAguilo,
FortiGate might simply not see different user information through device detection. Any user information via device detection is a guess at best, based on what information FortiGate was passively able to detect.
A somewhat more thorough explanation: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-unauthuser-and-unauthusersource/ta-p/202750
There isn't really a way for FortiGate to forcibly update the user information.
You can delete the device entry via CLI (dia user device del <MAC address>), but that's about it, and FortiGate might start filling in different user information found through device detection.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
