FortiAnalyzer incorrect Report

[Silver]

Dear All,

We have noticed an anomaly in the reports generated by the FAZ. Wrong IP address mapped to Username. However user has never logged on that device IP and browse the internet. We are using FSSO in our environment. Device Identification are not enable on any of the interfaces. Moreover we have applied a filter to display traffic only from the internet line but we are also getting local IP address in the top 10 destination report.

Thanks

Silver 

(India)