Version:

Version:

Version:


Table of Contents

Download PDF
Copy Link

Asset & Identity center improvements

The Assets and Identity Center have been separated into two interlinked views. The device filter is more flexible and additional columns such as FortiClient UUID and Social information were added. Throughout the GUI, the Hostname and Username pop-up windows are hyperlinked to the Assets and Identity Center pages to view drill down information. Log data extraction and processing have also been improved.

To view the Assets and Identity Center pages:
  1. In FortiAnalyzer, go to Fabric View > Identity Center.

    The Identity Center and Assets pages appear as separate tabs. At the top of these pages are the device selector, time period selector, and column settings. Two donut charts display the total number of end users and endpoints.

    The Identity Center page has six columns: User Name, User Group, Endpoints, Social, Source, and Last Update.

  2. To view the endpoint details, click the link in the Endpoints column.

  3. Click the Assets Page.

    The Assets page has nine columns: Endpoint, User, MAC Address, IP Address, FortiClient UUID, Hardware OS, Vulnerabilities, Network Location, and Last Update.

  4. Click the number in the Vulnerabilities column to view the details.
  5. Click the link in the User column to view details about the user.
To access the Identity Center and Assets pages from Log View:
  1. In FortiAnalyzer, go to Log View.
  2. Click an entry in the Source column to display the Endpoint Information pop-up window.
  3. Click the link in the User Name or Endpoints column to go to the Identity Center or Assets page.
To access the Identity Center and Assets pages from SOC:
  1. Go to SOC > Traffic > Top Sources.
  2. Click an entry in the Source column to display the Endpoint Information pop-up window.
  3. Click the User or Endpoint link to go directly to the Identity Center or Asset page.
To access the Identity Center and Assets pages from Incidents & Events:
  1. Go to Incidents & Events > All Events.
  2. Click an entry in the Events column to open the Endpoint Information pop-up window.

  3. Click the user or endpoint link to go to the Identity Center or Assets page.

Asset & Identity center improvements

The Assets and Identity Center have been separated into two interlinked views. The device filter is more flexible and additional columns such as FortiClient UUID and Social information were added. Throughout the GUI, the Hostname and Username pop-up windows are hyperlinked to the Assets and Identity Center pages to view drill down information. Log data extraction and processing have also been improved.

To view the Assets and Identity Center pages:
  1. In FortiAnalyzer, go to Fabric View > Identity Center.

    The Identity Center and Assets pages appear as separate tabs. At the top of these pages are the device selector, time period selector, and column settings. Two donut charts display the total number of end users and endpoints.

    The Identity Center page has six columns: User Name, User Group, Endpoints, Social, Source, and Last Update.

  2. To view the endpoint details, click the link in the Endpoints column.

  3. Click the Assets Page.

    The Assets page has nine columns: Endpoint, User, MAC Address, IP Address, FortiClient UUID, Hardware OS, Vulnerabilities, Network Location, and Last Update.

  4. Click the number in the Vulnerabilities column to view the details.
  5. Click the link in the User column to view details about the user.
To access the Identity Center and Assets pages from Log View:
  1. In FortiAnalyzer, go to Log View.
  2. Click an entry in the Source column to display the Endpoint Information pop-up window.
  3. Click the link in the User Name or Endpoints column to go to the Identity Center or Assets page.
To access the Identity Center and Assets pages from SOC:
  1. Go to SOC > Traffic > Top Sources.
  2. Click an entry in the Source column to display the Endpoint Information pop-up window.
  3. Click the User or Endpoint link to go directly to the Identity Center or Asset page.
To access the Identity Center and Assets pages from Incidents & Events:
  1. Go to Incidents & Events > All Events.
  2. Click an entry in the Events column to open the Endpoint Information pop-up window.

  3. Click the user or endpoint link to go to the Identity Center or Assets page.