Fortinet Document Library

Version:

Version:


Table of Contents

Administration Guide

Download PDF
Copy Link

Search settings

The fields listed in the table below are displayed in columns on the user view based on the selections you make in the Settings window, see Configure table columns and tooltips. Most of these fields are also used in custom filters to search for hosts, see Search and filter options. Additional fields that can be displayed on the user view are fields for the host associated with the selected user, see Settings.

You may not have access to all of the fields listed in this table. Access depends on the type of license key installed and which features are enabled in that license.

Field

Definition

Access

Indicates whether host is enabled or disabled

Address

Users's street address.

City

User's city of residence.

Created Date

Date the user record was created in the database. Options include Last, Between, Before, and After.

Email

User's email address.

Expiration Date

Controls the number of days a user is authorized on the network. Options include: next, before, after, between, never, and none. The user is deleted from the database when the date specified here has passed. The date is automatically calculated based on the information entered when aging is configured. See Aging out host or user records.

First Name

User's first name.

Inactivity Date

Controls the number of days a user is authorized on the network. Options include next, before, after, between, never, and none. User is deleted from the database when the date specified here has passed. The date is continuously recalculated based on the information entered in the Days Inactive field. See Aging out host or user records or Set user expiration date.

Inactivity Limit

Number of days the user must remain continuously inactive on the network to be removed from the database.

Last Login/Logout

Date of the last time the user logged into or out of the network or the FortiNAC admin UI. This date is used to count the number of days of inactivity. Options include Last, Before, After, Between, and Never.

Last Name

User's last name.

Mobile Number

User's mobile phone number. Can be used to send SMS messages based on alarms. Requires the mobile provider to send SMS messages.

Mobile Provider

Provider or carrier for user's mobile phone.

Notes

Notes about this user.

Phone

User's telephone number.

Role

Role assigned to the user. Roles are attributes of users and are used as filters for user/host profiles. See Role management.

Security & Access Value

Value that typically comes from a field in the directory, but can be added manually. This value groups users and can be used to determine which role to apply to a user or which policy to use when scanning a user's computer. The data in this field could be a department name, a type of user, a graduation class, a location or anything that distinguishes a group of users.

State

User's state of residence.

Title

User's title, this could be a form of address or their title within the organization.

Type

Type of user. Allows you to differentiate between network users and guest/contractor users.

User ID

Unique alphanumeric ID. If you are using a directory for authentication, this should match an entry in the directory. If it does not, FortiNAC assumes that this user is authenticating locally and asks you for a password.

When using a directory for authentication, fields such as name, address, email, are updated from the directory based on the user ID when the database synchronizes with the directory. This is true regardless of how the user is created and whether the user is locally authenticated or authenticated through the directory. If the user ID matches a user ID in the directory, the FortiNAC database is updated with the directory data.

Postal Code

User's zip code based on their state of residence.

Search settings

The fields listed in the table below are displayed in columns on the user view based on the selections you make in the Settings window, see Configure table columns and tooltips. Most of these fields are also used in custom filters to search for hosts, see Search and filter options. Additional fields that can be displayed on the user view are fields for the host associated with the selected user, see Settings.

You may not have access to all of the fields listed in this table. Access depends on the type of license key installed and which features are enabled in that license.

Field

Definition

Access

Indicates whether host is enabled or disabled

Address

Users's street address.

City

User's city of residence.

Created Date

Date the user record was created in the database. Options include Last, Between, Before, and After.

Email

User's email address.

Expiration Date

Controls the number of days a user is authorized on the network. Options include: next, before, after, between, never, and none. The user is deleted from the database when the date specified here has passed. The date is automatically calculated based on the information entered when aging is configured. See Aging out host or user records.

First Name

User's first name.

Inactivity Date

Controls the number of days a user is authorized on the network. Options include next, before, after, between, never, and none. User is deleted from the database when the date specified here has passed. The date is continuously recalculated based on the information entered in the Days Inactive field. See Aging out host or user records or Set user expiration date.

Inactivity Limit

Number of days the user must remain continuously inactive on the network to be removed from the database.

Last Login/Logout

Date of the last time the user logged into or out of the network or the FortiNAC admin UI. This date is used to count the number of days of inactivity. Options include Last, Before, After, Between, and Never.

Last Name

User's last name.

Mobile Number

User's mobile phone number. Can be used to send SMS messages based on alarms. Requires the mobile provider to send SMS messages.

Mobile Provider

Provider or carrier for user's mobile phone.

Notes

Notes about this user.

Phone

User's telephone number.

Role

Role assigned to the user. Roles are attributes of users and are used as filters for user/host profiles. See Role management.

Security & Access Value

Value that typically comes from a field in the directory, but can be added manually. This value groups users and can be used to determine which role to apply to a user or which policy to use when scanning a user's computer. The data in this field could be a department name, a type of user, a graduation class, a location or anything that distinguishes a group of users.

State

User's state of residence.

Title

User's title, this could be a form of address or their title within the organization.

Type

Type of user. Allows you to differentiate between network users and guest/contractor users.

User ID

Unique alphanumeric ID. If you are using a directory for authentication, this should match an entry in the directory. If it does not, FortiNAC assumes that this user is authenticating locally and asks you for a password.

When using a directory for authentication, fields such as name, address, email, are updated from the directory based on the user ID when the database synchronizes with the directory. This is true regardless of how the user is created and whether the user is locally authenticated or authenticated through the directory. If the user ID matches a user ID in the directory, the FortiNAC database is updated with the directory data.

Postal Code

User's zip code based on their state of residence.