I am using FortiAnalyzer 5.4.
for daily bandwidth report, eg Top Application Users by Bandwidth, why is it that under User (or IP) column it always shows the administrator account instead of the user login?
currently the report shows my windows domain administrator account login.
same for Top Application Users by Sessions
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Is that account logged in to each machine? Are you running FortiClient on the machines?
Mike Pruett
we used this account to join the computer to domain during initial setup or during installation of software.
the clients on the bandwidth report are not installed with forticlient.
the report basically shows all users who have internet access using Internet bandwidth
Probably best to have a look at the FortiGate first.
What does your FortiGate show the users as in it's own logs? The individual usernames or Administrator?
Is it possible that you have some scripts running under Administrator account frequently on the machines?
I saw a situation when a special account was listed all the time and the admin said that there is an account that checks the antivirus software udpate several times during the day.
We put this account into FSSO ignore list and the problem disappeared.
AtiT
the only thing i can think of is the sophos anti-virus definition updates.
we do not use FSSO.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1502 | |
1011 | |
749 | |
443 | |
209 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.