global
Use this command to configure global settings that affect miscellaneous FortiAnalyzer features.
Syntax
config system global
set admin-lockout-duration <integer>
set admin-lockout-threshold <integer>
set adom-mode {advanced | normal}
set adom-select {enable | disable}
set adom-status {enable | disable}
set backup-compression {high | low | none | normal}
set backup-to-subfolders {enable | disable}
set clone-name-option {default | keep}
set clt-cert-req {enable | disable}
set console-output {more | standard}
set country-flag {enable | disable}
set create-revision {enable | disable}
set daylightsavetime {enable | disable}
set default-search-mode {advanced | filter-based}
set detect-unregistered-log-device {enable | disable}
set device-view-mode {regular | tree}
set disable-module {fortiview-noc fortirecorder | none}
set enc-algorithm {high | medium | low}
set fgfm-ca-cert <certificate>
set fgfm-local-cert <certificate>
set fgfm-ssl-protocol {sslv3 | tlsv1.0 | tlsv1.1 | tlsv1.2}
set fmg-status {enable | disable}
set ha-member-auto-grouping {enable | disable}
set hitcount_concurrent <integer>
set hitcount_interval <integer>
set hostname <string>
set language {english | japanese | simch | trach}
set latitude <string>
set ldap-cache-timeout <integer>
set ldapconntimeout <integer>
set lock-preempt {enable | disable}
set log-checksum {md5 | md5-auth | none}
set log-forward-cache-size <integer>
set log-mode {analyzer | collector}
set longitude <string>
set max-aggregation-tasks <integer>
set max-log-forward <integer>
set max-running-reports <integer>
set oftp-ssl-protocol {sslv3 | tlsv1.0 | tlsv1.1 | tlsv1.2}
set policy-hit-count {enable | disable}
set policy-object-icon {enable | disable}
set policy-object-in-dual-pane {enable | disable}
set pre-login-banner {enable | disable}
set pre-login-banner-message <string>
set private-data-encryption {enable | disable}
set remoteauthtimeout <integer>
set search-all-adoms {enable | disable}
set ssl-low-encryption {enable | disable}
set ssl-protocol {tlsv1.2 | tlsv1.1 | tlsv1.0 | sslv3}
set ssl-static-key-ciphers {enable | disable}
set task-list-size <integer>
set tftp
set timezone <integer>
set tunnel-mtu <integer>
set usg {enable | disable}
set webservice-proto {tlsv1.2 | tlsv1.1 | tlsv1.0 | sslv3 | sslv2}
set workflow-max-sessions <integer>
end
|
Variable |
Description |
|---|---|
|
admin-lockout-duration <integer> |
Set the lockout duration for FortiAnalyzer administration, in seconds (default = 60). |
|
admin-lockout-threshold <integer> |
Set the lockout threshold for FortiAnalyzer administration (1 - 10, default = 3). |
|
adom-mode {advanced | normal} |
Set the ADOM mode (default = normal). |
|
adom-select {enable | disable} |
Enable/disable a pop-up window that allows administrators to select an ADOM after logging in (default = enable). |
|
adom-status {enable | disable} |
Enable/disable administrative domains (default = disable). |
|
backup-compression {high | low | none | normal} |
Set the backup compression level: |
|
backup-to-subfolders {enable | disable} |
Enable/disable the creation of subfolders on server for backup storage (default = disable). |
|
clone-name-option {default | keep} |
Set the cloned object name option:
|
|
clt-cert-req {enable | disable} |
Enable/disable requiring a client certificate for GUI login (default = disable). When both |
|
console-output {more | standard} |
Select how the output is displayed on the console (default = standard). Select |
|
country-flag {enable | disable} |
Enable/disable a country flag icon beside an IP address (default = enable). |
|
create-revision {enable | disable} |
Enable/disable create revision by default (default = disable). |
|
daylightsavetime {enable | disable} |
Enable/disable daylight saving time (default = enable). If you enable daylight saving time, the FortiAnalyzer unit automatically adjusts the system time when daylight saving time begins or ends. |
|
default-search-mode {advanced | filter-based} |
Set the default search mode of log view (default = filter-based). |
|
detect-unregistered-log-device {enable | disable} |
Enable/disable unregistered log device detection (default = enable). |
|
device-view-mode {regular | tree} |
Set the devices/groups view mode (default = regular). |
|
disable-module {fortiview-noc fortirecorder | none} |
Disable module list (default = fortirecorder). |
|
enc-algorithm {high | medium | low} |
Set SSL communication encryption algorithms:
|
|
fgfm-ca-cert <certificate> |
Set the extra FGFM CA certificates ("" = default certificate will be used). |
|
fgfm-local-cert <certificate> |
Set the FGFM local certificate ("" = default certificate will be used). |
|
fgfm-ssl-protocol {sslv3 | tlsv1.0 | tlsv1.1 | tlsv1.2} |
Set the lowest SSL protocols for fgfmsd (default = tlsv1.2). |
|
fmg-status {enable | disable} |
Disable FortiManager status. If FortiManager features are enabled in FortiAnalyzer before upgrading to 6.2, it will continue to be available after upgrading, and can be disabled with this variable. This variable is only available on some hardware-based FortiAnalyzer devices. |
|
ha-member-auto-grouping {enable | disable} |
Enable/disable automatically grouping HA members when the group name is unique in your network (default = enable). |
|
hitcount_concurrent <integer> |
Set the number of FortiGates that FortiAnalyzer polls at one time (10 - 500, default = 100). |
|
hitcount_interval <integer> |
Set the interval for getting the hit count from connected FortiGate devices, in seconds (60 - 86400, default = 300). |
|
hostname <string> |
FortiAnalyzer host name. |
|
language {english | japanese | simch | spanish | trach} |
GUI language:
|
|
latitude <string> |
Set the FortiAnalyzer device's latitude. |
|
ldap-cache-timeout <integer> |
LDAP cache timeout, in seconds (default =86400). |
|
ldapconntimeout <integer> |
LDAP connection timeout, in milliseconds (default = 60000). |
|
lock-preempt {enable | disable} |
Enable/disable the ADOM lock override (default = disable). |
|
log-checksum {md5 | md5-auth | none} |
Record log file hash value, timestamp, and authentication code at transmission or rolling:
|
|
log-forward-cache-size <integer> |
Set the log forwarding disk cache size, in gigabytes (default = 0). |
|
log-mode {analyzer | collector} |
Set the log system operation mode (default = analyzer). |
|
longitude <string> |
Set the FortiAnalyzer device's longitude. |
|
max-aggregation-tasks <integer> |
Set the maximum number of concurrent tasks of a log aggregation session (1 - 10, default = 0). |
|
max-log-forward <integer> |
Set the maximum log forwarding and aggregation number (5 - 20). |
|
max-running-reports <integer> |
Maximum running reports number (1 - 10, default = 1). |
|
oftp-ssl-protocol {sslv3 | tlsv1.0 | tlsv1.1 | tlsv1.2} |
Set the lowest SSL protocols for oftpd (default = tlsv1.2). |
|
policy-hit-count {enable | disable} |
Enable/disable show policy hit count (default= disable). The policy hit count is the number of sessions that match to a firewall policy on a FortiGate. When |
|
policy-object-icon {enable | disable} |
Enable/disable show icons of policy objects (default= disable). |
|
policy-object-in-dual-pane {enable | disable} |
Enable/disable show policies and objects in dual pane (default= disable). |
|
pre-login-banner {enable | disable} |
Enable/disable pre-login banner (default= disable). |
|
pre-login-banner-message <string> |
Set the pre-login banner message. |
|
private-data-encryption {enable | disable} |
Enable/disable private data encryption using an AES 128-bit key (default= disable). |
|
remoteauthtimeout <integer> |
Remote authentication (RADIUS/LDAP) timeout, in seconds (default = 10). |
|
search-all-adoms {enable | disable} |
Enable/disable search all ADOMs for where-used queries (default= disable). |
|
ssl-low-encryption {enable | disable} |
Enable/disable SSL low-grade (40-bit) encryption (default= disable). |
|
ssl-protocol {tlsv1.2 | tlsv1.1 | tlsv1.0 | sslv3} |
Set the SSL protocols (default = tlsv1.2). |
|
ssl-static-key-ciphers {enable | disable} |
Enable/disable SSL static key ciphers (default = enable). |
|
task-list-size <integer> |
Set the maximum number of completed tasks to keep (default = 2000). |
|
tftp |
|
|
timezone <integer> |
The time zone for the FortiManager unit (default = Pacific Time). See Time zones. |
|
tunnel-mtu <integer> |
Set the maximum transportation unit (68 - 9000, default = 1500). |
|
usg {enable | disable} |
Enable/disable contacting only FortiGuard servers in the USA (default = enable). |
|
webservice-proto {tlsv1.2 | tlsv1.1 | tlsv1.0 | sslv3 | sslv2} |
Web Service connection (default = tlsv1.2). |
|
workflow-max-sessions <integer> |
This variable does not function on FortiAnalyzer. |
Example
The following command turns on daylight saving time, sets the FortiAnalyzer unit name to FMG3k, and chooses the Eastern time zone for US & Canada.
config system global
set daylightsavetime enable
set hostname FMG3k
set timezone 12
end
Time zones
|
Integer |
Time zone |
Integer |
Time zone |
|---|---|---|---|
|
00 |
(GMT-12:00) Eniwetak, Kwajalein |
40 |
(GMT+3:00) Nairobi |
|
01 |
(GMT-11:00) Midway Island, Samoa |
41 |
(GMT+3:30) Tehran |
|
02 |
(GMT-10:00) Hawaii |
42 |
(GMT+4:00) Abu Dhabi, Muscat |
|
03 |
(GMT-9:00) Alaska |
43 |
(GMT+4:00) Baku |
|
04 |
(GMT-8:00) Pacific Time (US & Canada) |
44 |
(GMT+4:30) Kabul |
|
05 |
(GMT-7:00) Arizona |
45 |
(GMT+5:00) Ekaterinburg |
|
06 |
(GMT-7:00) Mountain Time (US & Canada) |
46 |
(GMT+5:00) Islamabad, Karachi,Tashkent |
|
07 |
(GMT-6:00) Central America |
47 |
(GMT+5:30) Calcutta, Chennai, Mumbai, New Delhi |
|
08 |
(GMT-6:00) Central Time (US & Canada) |
48 |
(GMT+5:45) Kathmandu |
|
09 |
(GMT-6:00) Mexico City |
49 |
(GMT+6:00) Almaty, Novosibirsk |
|
10 |
(GMT-6:00) Saskatchewan |
50 |
(GMT+6:00) Astana, Dhaka |
|
11 |
(GMT-5:00) Bogota, Lima, Quito |
51 |
(GMT+6:00) Sri Jayawardenapura |
|
12 |
(GMT-5:00) Eastern Time (US & Canada) |
52 |
(GMT+6:30) Rangoon |
|
13 |
(GMT-5:00) Indiana (East) |
53 |
(GMT+7:00) Bangkok, Hanoi, Jakarta |
|
14 |
(GMT-4:00) Atlantic Time (Canada) |
54 |
(GMT+7:00) Krasnoyarsk |
|
15 |
(GMT-4:00) La Paz |
55 |
(GMT+8:00) Beijing,ChongQing, HongKong,Urumqi |
|
16 |
(GMT-4:00) Santiago |
56 |
(GMT+8:00) Irkutsk, Ulaanbaatar |
|
17 |
(GMT-3:30) Newfoundland |
57 |
(GMT+8:00) Kuala Lumpur, Singapore |
|
18 |
(GMT-3:00) Brasilia |
58 |
(GMT+8:00) Perth |
|
19 |
(GMT-3:00) Buenos Aires, Georgetown |
59 |
(GMT+8:00) Taipei |
|
20 |
(GMT-3:00) Nuuk (Greenland) |
60 |
(GMT+9:00) Osaka, Sapporo, Tokyo, Seoul |
|
21 |
(GMT-2:00) Mid-Atlantic |
61 |
(GMT+9:00) Yakutsk |
|
22 |
(GMT-1:00) Azores |
62 |
(GMT+9:30) Adelaide |
|
23 |
(GMT-1:00) Cape Verde Is |
63 |
(GMT+9:30) Darwin |
|
24 |
(GMT) Casablanca, Monrovia |
64 |
(GMT+10:00) Brisbane |
|
25 |
(GMT) Greenwich Mean Time:Dublin, Edinburgh, Lisbon, London |
65 |
(GMT+10:00) Canberra, Melbourne, Sydney |
|
26 |
(GMT+1:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna |
66 |
(GMT+10:00) Guam, Port Moresby |
|
27 |
(GMT+1:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague |
67 |
(GMT+10:00) Hobart |
|
28 |
(GMT+1:00) Brussels, Copenhagen, Madrid, Paris |
68 |
(GMT+10:00) Vladivostok |
|
29 |
(GMT+1:00) Sarajevo, Skopje, Sofija, Vilnius, Warsaw, Zagreb |
69 |
(GMT+11:00) Magadan |
|
30 |
(GMT+1:00) West Central Africa |
70 |
(GMT+11:00) Solomon Is., New Caledonia |
|
31 |
(GMT+2:00) Athens, Istanbul, Minsk |
71 |
(GMT+12:00) Auckland, Wellington |
|
32 |
(GMT+2:00) Bucharest |
72 |
(GMT+12:00) Fiji, Kamchatka, Marshall Is |
|
33 |
(GMT+2:00) Cairo |
73 |
(GMT+13:00) Nuku'alofa |
|
34 |
(GMT+2:00) Harare, Pretoria |
74 |
(GMT-4:30) Caracas |
|
35 |
(GMT+2:00) Helsinki, Riga,Tallinn |
75 |
(GMT+1:00) Namibia |
|
36 |
(GMT+2:00) Jerusalem |
76 |
(GMT-5:00) Brazil-Acre) |
|
37 |
(GMT+3:00) Baghdad |
77 |
(GMT-4:00) Brazil-West |
|
38 |
(GMT+3:00) Kuwait, Riyadh |
78 |
(GMT-3:00) Brazil-East |
|
39 |
(GMT+3:00) Moscow, St.Petersburg, Volgograd |
79 |
(GMT-2:00) Brazil-DeNoronha |