Admin
This section describes the options that are available in the Admin section in the FortiInsight UI.
Endpoints
The Endpoints page (Admin > Endpoints) displays the endpoints that are currently deployed, along with their latest activity. You can select the information that is displayed on the page, such as Endpoint ID, Latest IP Address, and Last Activity.
The following image shows an example of the Endpoints page:
Unlicensing endpoints
To unlicense old endpoints, click the Unlicense endpoints option. You can select this option to replace old endpoints with new ones.
You can unlicense endpoints in bulk by using the search bar and calendar filters to specify the group of endpoints you want to unlicense. For example, to unlicense a group of endpoints that have not been active past a certain date, select the date in the To: calendar field and leave the From:Oldest calendar field as is. Once the endpoints are filtered to the desired group, click the Unlicense endpoints option.
Hiding unlicensed endpoints
To hide unlicensed endpoints, first create a NOT modifier by typing "not" into the search bar and pressing Enter. Then, create a search pill that says "Licensed = no".
The following is an image of how the search pill should look:
Accounts
The Accounts page (Admin > Accounts) displays user accounts that have access to the FortiInsight UI. You can create new user accounts, disable accounts, and change account passwords.
To create a new user, click New User.
The following role options are available:
-
Administrator: Full access, including performing administrative tasks.
-
User: Partial access, minus the ability to create users.
-
Readonly: Not allowed to do any change actions, such as updating policies or the dashboard. The user is limited to viewing the collected data.
Account passwords must be at least eight characters. Fortinet recommends that you use a long, randomly generated, string as your password and record it in a password manager.
The following image shows an example of the Accounts page.
License
The License page (Admin > License) displays details about the current FortiInsight license, including an endpoint count and the license validity period.
One month before your license is due to expire, a license expiry warning is displayed in a ribbon at the top of the FortiInsight UI. If you do not renew your license, FortiInsight stops working one month after the expiration date.
If you have questions about your FortiInsight license, contact your account manager.
The following image shows an example of the License page.
Preferences
To set FortiInsight UI preferences, click the username icon in the top right of the FortiInsight UI and select Preferences.
|
Setting |
Description |
|---|---|
|
|
Add or change an email address. |
|
Notifications |
Select the notifications that you want to turn on. If you want help bubbles to appear in the FortiInsight UI, select the Hover Help Bubbles option. |
|
Badges Refresh Time |
Set the refresh time for delta badges. Delta badges appear on the left menu in the FortiInsight UI and show you the number of events (Threat Hunting pages) or alerts (Policy pages) that have been generated since you last visited these pages. Badges show you a quick overview of what is going on across your network. After you visit the page, the badge disappears, and FortiInsight resets the event count. The following image shows an example of a delta badge.
|
The following image shows an example of the Preferences page: