Set the lockout duration for FortiAnalyzer administration, in seconds (default = 60).

Set the lockout threshold for FortiAnalyzer administration (1 - 10, default = 3).

Set the ADOM mode (default = normal).

Enable/disable a pop-up window that allows administrators to select an ADOM after logging in (default = enable).

Enable/disable administrative domains (default = disable).

Set the backup compression level: high (slowest), low (fastest), none, or normal (default).

Enable/disable the creation of subfolders on server for backup storage (default = disable).

Enable/disable requiring a client certificate for GUI login (default = disable).

When both clt-cert-req and admin-https-pki-required are enabled, only PKI administrators can connect to the GUI.

Select how the output is displayed on the console (default = standard).

Select more to pause the output at each full screen until keypress. Select standard for continuous output without pauses.

Enable/disable a country flag icon beside an IP address (default = enable).

Enable/disable create revision by default (default = disable).

Enable/disable daylight saving time (default = enable).

If you enable daylight saving time, the FortiAnalyzer unit automatically adjusts the system time when daylight saving time begins or ends.

This variable does not function on FortiAnalyzer.

Set the default search mode of log view (default = filter-based).

Enable/disable unregistered log device detection (default = enable).

Set the devices/groups view mode (default = regular).

Set SSL communication encryption algorithms:

• high: SSL communication using high encryption algorithms (default).
• medium: SSL communication using high and medium encryption algorithms.
• low: SSL communication using all available encryption algorithms.

Set the extra FGFM CA certificates ("" = default certificate will be used).

Set the FGFM local certificate ("" = default certificate will be used).

Set the lowest SSL protocols for fgfmsd (default = tlsv1.2).

Enable/disable automatically grouping HA members when the group name is unique in your network (default = enable).

Set the number of FortiGates that FortiAnalyzer polls at one time (10 - 500, default = 100).

Set the interval for getting the hit count from connected FortiGate devices, in seconds (60 - 86400, default = 300).

FortiAnalyzer host name.

GUI language:

• english: English (default)
• japanese: Japanese
• simch: Simplified Chinese
• spanish: Spanish
• trach: Traditional Chinese

LDAP cache timeout, in seconds (default =86400).

LDAP connection timeout, in milliseconds (default = 60000).

Enable/disable the ADOM lock override (default = disable).

Record log file hash value, timestamp, and authentication code at transmission or rolling:

• md5: Record log file’s MD5 hash value only.
• md5-auth: Record log file’s MD5 hash value and authentication code.
• none: Do not record the log file checksum (default).

Set the log system operation mode (default = analyzer).

Set the maximum number of concurrent tasks of a log aggregation session (1 - 10, default = 0).

Set the maximum log forwarding and aggregation number (5 - 20).

Maximum running reports number (1 - 10, default = 1).

Set the lowest SSL protocols for oftpd (default = tlsv1.2).

Enable/disable show policy hit count (default= disable).

The policy hit count is the number of sessions that match to a firewall policy on a FortiGate. When policy-hit-count is enabled, it collects all hits from all managed FortiGate devices. FortiAnalyzer sums up all hit counts for each policy package from the assigned FortiGate devices, and displays the hit count for each of the firewall rules.

Enable/disable show policies and objects in dual pane (default= disable).

Enable/disable pre-login banner (default= disable).

Set the pre-login banner message.

Remote authentication (RADIUS/LDAP) timeout, in seconds (default = 10).

Enable/disable search all ADOMs for where-used queries (default= disable).

Enable/disable SSL low-grade (40-bit) encryption (default= disable).

Set the SSL protocols (default = tlsv1.2).

Enable/disable SSL static key ciphers (default = enable).

Set the maximum number of completed tasks to keep (default = 2000).

The time zone for the FortiManager unit (default = Pacific Time). See Time zones.

Set the maximum transportation unit (68 - 9000, default = 1500).

Enable/disable contacting only FortiGuard servers in the USA (default = enable).

Web Service connection (default = tlsv1.2).

(GMT+3:00) Nairobi

(GMT+3:30) Tehran

(GMT+4:00) Abu Dhabi, Muscat

(GMT+4:00) Baku

(GMT+4:30) Kabul

(GMT+5:00) Ekaterinburg

(GMT+5:00) Islamabad, Karachi,Tashkent

(GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi

(GMT+5:45) Kathmandu

(GMT+6:00) Almaty, Novosibirsk

(GMT+6:00) Astana, Dhaka

(GMT+6:00) Sri Jayawardenapura

(GMT+6:30) Rangoon

(GMT+7:00) Bangkok, Hanoi, Jakarta

(GMT+7:00) Krasnoyarsk

(GMT+8:00) Beijing,ChongQing, HongKong,Urumqi

(GMT+8:00) Irkutsk, Ulaanbaatar

(GMT+8:00) Kuala Lumpur, Singapore

(GMT+8:00) Perth

(GMT+8:00) Taipei

(GMT+9:00) Osaka, Sapporo, Tokyo, Seoul

(GMT+9:00) Yakutsk

(GMT+9:30) Adelaide

(GMT+9:30) Darwin

(GMT+10:00) Brisbane

(GMT+10:00) Canberra, Melbourne, Sydney

(GMT+10:00) Guam, Port Moresby

(GMT+10:00) Hobart

(GMT+10:00) Vladivostok

(GMT+11:00) Magadan

(GMT+11:00) Solomon Is., New Caledonia

(GMT+12:00) Auckland, Wellington

(GMT+12:00) Fiji, Kamchatka, Marshall Is

(GMT+13:00) Nuku'alofa

(GMT-4:30) Caracas

(GMT+1:00) Namibia

(GMT-5:00) Brazil-Acre)

(GMT-4:00) Brazil-West

(GMT-3:00) Brazil-East