Fortinet black logo

Administration Guide

User monitor

User monitor

The User Monitor tab in Monitoring displays all the logged-in users along with information such as their role, logged-in IP address, the duration they have logged in for, traffic volume, timestamp of when they logged in last, and the location from where they have logged in. It is a helpful tool for monitoring the overall activities of the users on FortiPAM. For example, if the administrator sees an unusual amount of traffic from a specific user. It could indicate that a risky operation is being performed, and the administrator may deauthenticate the user if the administrator deems the user is a malicious actor.

For every login; username, role, IP address, duration, traffic volume, the last login date and time, and location are displayed.

The User Monitor tab contains the following options:

Terminate

From the dropdown, select from the following options for a selected user:

  • Deauthenticate User: Kick out a logged in FortiPAM user.

  • Disconnect Launched Sessions: Terminate all the launched secret sessions associated with the user.

  • Deauthenticate & Disconnect: Kick out a logged in FortiPAM user and all the launched secret sessions associated with the user.

Search

Enter a search term in the search field, then hit Enter to search the user monitor list. To narrow down your search, see Column filter.

Refresh

To refresh the contents, click the refresh icon.

User monitor

The User Monitor tab in Monitoring displays all the logged-in users along with information such as their role, logged-in IP address, the duration they have logged in for, traffic volume, timestamp of when they logged in last, and the location from where they have logged in. It is a helpful tool for monitoring the overall activities of the users on FortiPAM. For example, if the administrator sees an unusual amount of traffic from a specific user. It could indicate that a risky operation is being performed, and the administrator may deauthenticate the user if the administrator deems the user is a malicious actor.

For every login; username, role, IP address, duration, traffic volume, the last login date and time, and location are displayed.

The User Monitor tab contains the following options:

Terminate

From the dropdown, select from the following options for a selected user:

  • Deauthenticate User: Kick out a logged in FortiPAM user.

  • Disconnect Launched Sessions: Terminate all the launched secret sessions associated with the user.

  • Deauthenticate & Disconnect: Kick out a logged in FortiPAM user and all the launched secret sessions associated with the user.

Search

Enter a search term in the search field, then hit Enter to search the user monitor list. To narrow down your search, see Column filter.

Refresh

To refresh the contents, click the refresh icon.