Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Slim2
New Contributor

user name display N/A on forticloud

Hi All,

 

I 'm facing an issue, in the Forticloud report, the user who use the most the bandwidth is displayed as N/A.

We use FSSO as authentication method.

 

Have anyone an explanation ?

Thank you in advance

 

image.png

3 REPLIES 3
nweckel
Staff
Staff

Hello!

The FortiCloud report will take information from FortiGate logs. In those logs, there are two different fields (for user): 'user=' and 'unauthuser='.

So if in the logs you have 'user=XX' and 'unauthuser=xx', the information in the FortiCloud report will be XX(xx). If there is no info in one of those fields (in the logs), it will be displayed as N/A in the report.

Slim2
New Contributor

Hi nweckel,

 

thank you for the explanation

What should I do to resolve it ?

 

 

xshkurti
Staff
Staff

@Slim2 
N/A means that either the log entry itself doesn't track userinfo, or no username was provided.
Even though you have FSSO, i think there might be some servers in your infrastructure that have services without FSSO or that go directly to internet.
N/A is a sum of all N/A servers/services that do not use authentication to reach to internet.

You can check forwarding logs on your fortigate to see how many logs are generated that do not have username on it. From these logs you can track IP address and find which PC/Server is using internet without FSSO and what policy are they using.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors