Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Jimmy
New Contributor

100 logged in admin sessions

We run a Fortigate cluster of 2x 100E with version 5.6.2 but the last few days when I try to log in I need to disconnect a few users first as apparantly there are already 100 sessions.

 

According to the session logs the user admin would have been logged in 100 times already from 127.0.0.1 on HTTP, which is rather strange as we don't even have HTTP enabled, let alone that it says logged in from 127.0.0.1.

 

Anyone seen this before? I could reboot them during a maintenance window but would rather find the cause as to why first so it does not happen again.

4 REPLIES 4
emnoc
Esteemed Contributor III

Yes this is probably normal but I would guess yoru jsconsoel connections are left open. Next time execute  a cli-cmd diag sys admin list  or get system admin  and look for any  jsconsole.

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
cjw
New Contributor

I've seen the same thing too. I can assume your are running the FortiAnalyzer (FAZ) ?

 

In my case, I only saw this happen during the following conditions:

1. Using multiple VDOMs

2. The admin profile for the FAZ user (I keep them separate) has read-only permissions

3. The FAZ is running v6.0

 

My resolution was to grant the faz user the super_admin profile.  Apparently if your FGT is running 6.0 as well, there is a single permission that it needs read/write but that doesn't exist in <=5.6. 

 

I hope this helps... 

Jimmy
New Contributor

We're still running 5.6 on both Faz and FGT but it seems this was as one time thing for now as we rebooted the master FGT and the issue went away.

menayoub
New Contributor

Hello;

 

I had the same issue once .

The solution was to remove the admin user and password used for the first conncetion between the FAZ and the FGT.

 

 

 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors