Technical Tip: The device shows the status Offline on the section User & Devices of the GUI Dashboard

[tonylin1]

Description	This article describes why the device shows the status Offline on the section User & Devices of the GUI Dashboard.
Scope	FortiGate.
Solution	Offline, it shows 'seen 6167s': diagnose user device list | grep b7:22 -A 6 vd root/0 e2:ec:15:57:b7:22 gen 105075 req 0 created 2865980s gen 11641 seen 6167s TWTAC gen 54658 ip 110.110.110.2 src mac hardware vendor 'Apple' src dhcp id 4670 weight 130 type 'Mobile Generic' src dhcp id 4670 weight 130 os 'iOS' src dhcp id 4670 weight 130 vd root/0 00:34:3f:ec:be:5a gen 80188 req OHUSA/3e Online, it will show 'seen 4s': diagnose user device list | grep b7:22 -A 6 vd root/0 e2:ec:15:57:b7:22 gen 105412 req 0 created 2866028s gen 11641 seen 4s TWTAC gen 54877 ip 110.110.110.2 src mac hardware vendor 'Apple' src dhcp id 4670 weight 130 type 'Mobile Generic' src dhcp id 4670 weight 130 os 'iOS' src dhcp id 4670 weight 130 vd root/0 00:34:3f:ec:be:5a gen 80188 req OHUSA/3e Conclusion: 'seen' indicated in the debug command 'diagnose user device list' is the timer that FortiGate saw the packet from the device (MAC). If seen is <= 300s, the status is Online. If seen is > 300s, the status is Offline.