Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Fortiben1
New Contributor II

Created on ‎12-10-2024 04:15 PM Edited on ‎12-10-2024 04:15 PM

Unknown user logs in endpoint logs

Good day Folks!

 

I just wanna ask what is the reason behind this extra logs when remote users is connecting using forticlient (IPSEC-VPN). As per checking the the forticlient ID (that is unique and cant be duplicated) and other info are the same with the user. see attached image (Fortigate 7.2.10)

 

5656.png

90
0 Kudos
1 REPLY 1
Hatibi
Staff
Staff

Created on ‎12-12-2024 03:12 AM

Apparently this is intended in 7.2.X

 

Explained in this article: https://community.fortinet.com/t5/FortiGate/Troubleshooting-TIp-Dial-up-IPsec-shows-Unknown-User-und...

 

UNKNOWN user provide extra information about the overlay tunnel setting itself. This is intended behavior and included by design.

49
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.