Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

AliHaider
New Contributor

Duration of website visits

Hello All,

Is there a way to calculate the duration or time spent on a website by a user/Source IP.

This is more from an UEBA perspective and how productive our remote access users are (how evil I know).

BR,

Ali.

1 REPLY 1
FSM_FTNT
Staff
Staff

Hi Ali,

HTTP being stateless will mean that you will see the time of the connection, but you will not be able to see the time spent on site unless there is a continuous call back. You can do something like this to show the time between the first and last seen event for a Source IP address

Thanks

Dan

UploadedImages_Jd8kpmRfT1LMlJkRKPvk_timeDiff.png


------------------------------
Daniel
FortiSIEM Product Manager
------------------------------
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.