FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
skabbara
Staff
Staff
Article Id 302271
Description The article describes how to configure the Idle timeout for admin logs in FortiManager/FortiAnalyzer.
Scope FortiManager, FortiAnalyzer.
Solution
  1. By default, all admin logins to FortiManager/FortiAnalyzer will have an idle timeout duration of 900 seconds. A user can change the Idle timeout duration on both the GUI and CLI.

 

In GUI, the user will be able to configure the idle timeout options.

  • Idle Timeout (CLI/SSH).
  • Idle Timeout (API).
  • Idle Timeout (GUI).

 

For FortiManager/FortiAnalyzer v7.2.X and below, go to System Settings -> Admin -> Admin Settings:

 

skabbara_0-1709270510612.png

 

For FortiManager/FortiAnalyzer v7.4.X, go to System Settings -> Settings:

 

skabbara_1-1709270510617.png

 

 

  1. In CLI, an additional Idle Timeout for SSO is included which can only be configured in CLI.
  • Idle Timeout (CLI/SSH).
  • Idle Timeout (API).
  • Idle Timeout (GUI).
  • Idle Timeout (SSO).

 

conf system admin setting
  set idle_timeout <60-28800, default = 900>
  set idle_timeout_api <1-28800, default = 900>
  set idle_timeout gui <60-28800, default = 900>

  set idle-timeout_sso <60-28800, default = 900>
end
Contributors