Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Fortiben1
New Contributor III

Created on ‎12-10-2024 04:15 PM Edited on ‎12-10-2024 04:15 PM

Unknown user logs in endpoint logs

Good day Folks!

 

I just wanna ask what is the reason behind this extra logs when remote users is connecting using forticlient (IPSEC-VPN). As per checking the the forticlient ID (that is unique and cant be duplicated) and other info are the same with the user. see attached image (Fortigate 7.2.10)

 

5656.png

442
0 Kudos
1 REPLY 1
Hatibi
Staff & Editor
Staff & Editor

Created on ‎12-12-2024 03:12 AM

Apparently this is intended in 7.2.X

 

Explained in this article: https://community.fortinet.com/t5/FortiGate/Troubleshooting-TIp-Dial-up-IPsec-shows-Unknown-User-und...

 

UNKNOWN user provide extra information about the overlay tunnel setting itself. This is intended behavior and included by design.

401
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2025 Fortinet, Inc. All Rights Reserved.