Description
Host and user records remain in the database indefinitely unless expiration dates are set. This article provides steps to configure age times in order to apply expiration dates to these records.
Scope
Version: 8.x
Solution
Guests in Guest Templates:
- Navigate to Users -> Guest/Contractor Templates.
- Select Guest template.
- Right-click and modify Account Duration.
- Select OK.
Global Aging settings for Users and Hosts:
- Navigate to System -> Settings.
- Open User/Host Management.
- Select Aging - these values are the Global settings for aging of Hosts and Users.
- Modify Unregistered Hosts to the desired values (Days Valid, Days Inactive), then repeat the same for Registered Hosts (Days Valid, Days Inactive) and Users (Days Valid, Days Inactive).
- Select Save Settings.
Modifying age times on this window does not affect those hosts, users or administrators whose Expiration and Inactivity date fields already contain data. Aging values must be cleared on those existing records in order for the new values to apply.
Clear Registered: Removes the Age Time Expiration Date and Inactivity Date that appears in the Host Properties for all registered hosts, including hosts with age times set based on group membership or set individually. The only exception is records set to Never Expire. If the Global Cleared Registered option is used, individual and group based age times must be set again.
Clear Aging Values for All Users: Removes the Age Time Expiration Date that appears in the User Properties for all users, except those set to Never Expire.
If removing the age settings for all records is not desired, they can be removed either per group or individually.
For more details on this view, see the Aging section of the Administration Guide in the Fortinet Document Library.
Group Aging for Hosts:
- Navigate to System -> Groups.
- Select the desired host group.
- Right-click and select Set Aging - Group aging values override the Global aging values for all members of the group.
- Modify Days Valid and Inactive to the desired values.
- Select OK.
For more details on this view, see the Aging hosts in a group section of the Administration Guide in the Fortinet Document Library.
Individual Aging for a Host :
- Navigate to Hosts -> Host View.
- Search and find the desired Host record(s).
- Select the host.
- Right-click and select Host Properties.
- Select Set under the Time heading - Host aging values override both Group and Global aging values.
- Modify Host Expiration and Host Inactivity Limit to the desired values.
- Select OK.
For more details on this view, see the Set host expiration date section of the Administration Guide in the Fortinet Document Library.
