Skip to main content
roel_cayme
New Member
June 28, 2019
Question

Fortiview / Sources

  • June 28, 2019
  • 2 replies
  • 3737 views

Hi!

I had a problem viewing all connected users to the FG500D.

I used Fortiview and saw the list of users connected to the firewall, BUT i've noticed only 100 users were displayed and we are sure that it should be more than 100 users.

Where is the settings to expand and view all connected users?

Thanks.

 

 

    2 replies

    Dave_Hall
    New Member
    June 28, 2019

    Top-right side of the window, choose the time-period and set source.

     

    hubertzw
    New Member
    June 29, 2019

    In Fortiview you have top not all sources or destinations. Look at the sql query, there is a limit of 100 built-in: fortiview_request_data()-896: dataset:fv.dest.group tabid:0 _dump_sql()-829: dataset=fv.dest.group, sql:select dstip, max(dstintf) dst_intf,max(dstdevtype) dst_devtype,max(dstmac) dst_mac,group_concat(distinct appid) appid,group_concat(distinct appservice||case when subapp is null then '' else '_'||subapp end) appname,sum(sessioncount) session_count, sum(case when passthrough<>'block' then sessioncount else 0 end) session_allow, sum(case when passthrough='block' then sessioncount else 0 end) session_block, sum(rcvdbyte) r, sum(sentbyte) s, sum(rcvdbyte + sentbyte) bandwidth ,sum(crscore) score, sum(case when passthrough<>'block' then crscore else 0 end) score_allow, sum(case when passthrough='block' then crscore else 0 end) score_block  from grp_traffic_all_dst  where timestamp between 1551397800 and 1551484200 and 1=1 AND ( ft_ipmask(dstip, 0, '91.189.0.0/16') )  AND srcintfrole  in ('lan','dmz','undefined')  group by dstip   order by bandwidth desc   limit 100;

     

    Source: https://docs.fortinet.com/document/fortigate/6.2.0/new-features/411635/fortiview-subnet-filters

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT