How to get incactive list of users from Fortigate 200E Version v6.2.5 build1142 (GA)

[Athul_madhav]

Hi,

as per checking my user list included some resigned staff ids too and i am planning to deactivate the VPN User ids based on a not logged in since last 3 Months how can extract the list from 200E. is possible?

Regards,

Athul Madhav.

[Alivo__FTNT]

Hello, What exactly you need to extract? List of configured users from FortiGate?

Thank you.

Best Regards,

Alivo

[xsilver_FTNT]

It heavily depends on where are your users (stuff ids) defined!

From FGT point of view check Firewall User Monitor dashboard or User Events on Log&Report and then compare reported data of live accounts. FortiAnalyzer might help as well.

Or better, get the list of resigned users and disable those accounts wherever you have them enabled.

No matter if those are defined directly on FGT (then do so on FGT), or on AD (so LDAP and so disable them there), etc.

Best practice is still to disable accounts immediately once they resign !!!