Fortinet black logo

Administration Guide

Add or edit a customer

Add or edit a customer

Selecting Add on the upper right of the Customer List displays a form for adding a new customer (fields in the form are blank). (Hovering over any entry in the Customer List display and selecting the Edit Settings icon displays the Edit Customer form, which is identical to the Add Customer form except that fields are set to the values for this customer.)

To add or edit a customer:
  1. Input the fields, as described in the following sections.
  2. Select Save.

The Customer form comprises a number of panels. The following sections describe the fields in each panel.

Customer Details and Contact Information

These panels contains basic information about the customer:

Settings

Guidelines

Customer Details

Customer Name

Customerʼs business name, which must be unique within this FortiPortal

First Name

Last Name

Email

Name and email of the primary customer contact

Domains

Enter a domain and then select the green + button. The new domain appears in the list below the entry box.

Use this field for the customer domain. To specify a domain for the administrator, see Admin settings.

When using remote authentication, a customer may have users defined in more than one domain.

Use MSSP Locale

Uses the MSSP locale (the language configured in Admin Settings).

Language

If you deselect the Use MSSP Locale checkbox, you can select a language for this customer. When a customer user logs in to the GUI, pages will display in this language. For Administrative users, the system will continue to use the language set in the Admin Settings.

Attach Logo

Download an image file for this customerʼs logo. The maximum file size is 1 MB. The format can be jpg, gif, bmp, or png. The maximum file dimension is 144 pixels wide by 48 pixels tall.

Contact Information

Address1

Address2

City

State

Country

Zip

Phone

Fax

Address fields and phone and fax numbers for this customer

Cloud Properties

NOTE: This panel is only displayed with FortiPortal is running in Collector mode.

This panel contains information about portal and collector storage for this customer.

The settings differ in Collector mode and FortiAnalyzer mode.

In Collector mode, the panel looks like the following figure:

In FortiAnalyzer mode, the panel looks like the following figure:

Settings

Guidelines

Total Storage

Total number of GB of storage that this customer can use. The default value is 5 GB.

Collector/FPC Storage Percentage

Storage ratio for the collector database and portal database. By default, 80% of the storage allowance is allocated to the collector database, and 20% is allocated to the portal database.

Enable Analytics

Enable or disable. If you disable analytics for a customer, the Dashboard, Views, and Reports pages will not be displayed to that customer.

If you disable analytics when adding a new customer, the system allocates less storage space for the customer (1 GB instead of 5 GB).

When Allocated Disk Space is Full

Select one of two options:

  • Overwrite Oldest Logs
  • Stop Logging

Others

This panel allows you to configure other settings.

Settings

Guidelines

Trusted Hosts

Enable or disable trusted hosts for this customer. For additional information about trusted hosts, see Customer Users.

Policy Installation Scheduler

Enables you to schedule automatic policy installation at a particular time (daily or weekly. All the pending policy updates will be installed at the configured schedule. If you select None, the installation scheduler is not invoked for this customer. If you select Daily, select the installation time. If you select Weekly, select the day and time for the policy installation.

Display Storage

Select to display the storage.

Display Site

Select to display the customer site.

Comment-based Filter(s)

Enter text in this field to find comments in a policy that start with that text. Those policies will be hidden from customer users.

For example, if you enter hide_, all policies with comments that start with hide_ will be hidden from this customerʼs users. This feature can be used to hide static routes in a policy from customer users.

Name-based Filter(s)

Enter text in this field to find object names that start with that text. All objects with names that start with the specified text will be hidden from customer users.

For example, if you enter hide_, all objects with names that start with hide_ will be hidden from this customerʼs users.

Policy & Object Edit Permissions

This panel configures the policies and objects that a customer can modify.

NOTE: Policies and objects will not be visible to the customer in the customer web interface unless you select them.

For example, if you select Web Filtering, a web filter object will display in the object tree and a web filter column will display in the Policy tab:

Settings

Guidelines

Policy and Object Permissions

Check boxes for Policies and Objects

You can select edit permissions for All policies and objects or select edit permissions for individual policies and objects:

AntiSpam, Application Control, AntiVirus, DLP Sensor, DLP Filter RegEx, Firewall Policy, Firewall Address, Zone Interface, IPS Sensor, Local Category, Rating Overrides, Schedule, Service, User, User group, Virtual IP, Web Filtering, Web Filter RegEx, and DNS Filter

Policy Tab Permissions

This pane determines which policy tabs are visible in the customer web interface. Select the check boxes for tabs that you want to make visible for this customer. Select All to make all of the tabs visible.

Tab Permissions

This pane determines the tabs that are visible in the customer web interface. Select the check boxes for tabs that you want to make visible for this customer. Select All to make all of the tabs visible.

You must include at least one of the following tabs: Dashboard, Policy, or Objects.

Widget Permissions

The widgets listed in the Available Widgets box differ, depending if the FortiPortal is running in Collector mode or FortiAnalyzer mode.

This pane determines the widgets that are available in the dashboard of the customer web interface.

If you selected Dashboard in the Tab Permissions panel, you must select at least one widget for display in the dashboard.

Use the arrow keys to move the widgets from the left panel to the right panel (these widgets will appear in the dashboard for this customer). The double-arrow keys move the entire list.

ADOM Filter Permissions

This pane determines the devices that will be listed for a customer in drop-down menus of devices.

Use the arrow keys to move values from the left panel to the right panel.

Add or edit a customer

Selecting Add on the upper right of the Customer List displays a form for adding a new customer (fields in the form are blank). (Hovering over any entry in the Customer List display and selecting the Edit Settings icon displays the Edit Customer form, which is identical to the Add Customer form except that fields are set to the values for this customer.)

To add or edit a customer:
  1. Input the fields, as described in the following sections.
  2. Select Save.

The Customer form comprises a number of panels. The following sections describe the fields in each panel.

Customer Details and Contact Information

These panels contains basic information about the customer:

Settings

Guidelines

Customer Details

Customer Name

Customerʼs business name, which must be unique within this FortiPortal

First Name

Last Name

Email

Name and email of the primary customer contact

Domains

Enter a domain and then select the green + button. The new domain appears in the list below the entry box.

Use this field for the customer domain. To specify a domain for the administrator, see Admin settings.

When using remote authentication, a customer may have users defined in more than one domain.

Use MSSP Locale

Uses the MSSP locale (the language configured in Admin Settings).

Language

If you deselect the Use MSSP Locale checkbox, you can select a language for this customer. When a customer user logs in to the GUI, pages will display in this language. For Administrative users, the system will continue to use the language set in the Admin Settings.

Attach Logo

Download an image file for this customerʼs logo. The maximum file size is 1 MB. The format can be jpg, gif, bmp, or png. The maximum file dimension is 144 pixels wide by 48 pixels tall.

Contact Information

Address1

Address2

City

State

Country

Zip

Phone

Fax

Address fields and phone and fax numbers for this customer

Cloud Properties

NOTE: This panel is only displayed with FortiPortal is running in Collector mode.

This panel contains information about portal and collector storage for this customer.

The settings differ in Collector mode and FortiAnalyzer mode.

In Collector mode, the panel looks like the following figure:

In FortiAnalyzer mode, the panel looks like the following figure:

Settings

Guidelines

Total Storage

Total number of GB of storage that this customer can use. The default value is 5 GB.

Collector/FPC Storage Percentage

Storage ratio for the collector database and portal database. By default, 80% of the storage allowance is allocated to the collector database, and 20% is allocated to the portal database.

Enable Analytics

Enable or disable. If you disable analytics for a customer, the Dashboard, Views, and Reports pages will not be displayed to that customer.

If you disable analytics when adding a new customer, the system allocates less storage space for the customer (1 GB instead of 5 GB).

When Allocated Disk Space is Full

Select one of two options:

  • Overwrite Oldest Logs
  • Stop Logging

Others

This panel allows you to configure other settings.

Settings

Guidelines

Trusted Hosts

Enable or disable trusted hosts for this customer. For additional information about trusted hosts, see Customer Users.

Policy Installation Scheduler

Enables you to schedule automatic policy installation at a particular time (daily or weekly. All the pending policy updates will be installed at the configured schedule. If you select None, the installation scheduler is not invoked for this customer. If you select Daily, select the installation time. If you select Weekly, select the day and time for the policy installation.

Display Storage

Select to display the storage.

Display Site

Select to display the customer site.

Comment-based Filter(s)

Enter text in this field to find comments in a policy that start with that text. Those policies will be hidden from customer users.

For example, if you enter hide_, all policies with comments that start with hide_ will be hidden from this customerʼs users. This feature can be used to hide static routes in a policy from customer users.

Name-based Filter(s)

Enter text in this field to find object names that start with that text. All objects with names that start with the specified text will be hidden from customer users.

For example, if you enter hide_, all objects with names that start with hide_ will be hidden from this customerʼs users.

Policy & Object Edit Permissions

This panel configures the policies and objects that a customer can modify.

NOTE: Policies and objects will not be visible to the customer in the customer web interface unless you select them.

For example, if you select Web Filtering, a web filter object will display in the object tree and a web filter column will display in the Policy tab:

Settings

Guidelines

Policy and Object Permissions

Check boxes for Policies and Objects

You can select edit permissions for All policies and objects or select edit permissions for individual policies and objects:

AntiSpam, Application Control, AntiVirus, DLP Sensor, DLP Filter RegEx, Firewall Policy, Firewall Address, Zone Interface, IPS Sensor, Local Category, Rating Overrides, Schedule, Service, User, User group, Virtual IP, Web Filtering, Web Filter RegEx, and DNS Filter

Policy Tab Permissions

This pane determines which policy tabs are visible in the customer web interface. Select the check boxes for tabs that you want to make visible for this customer. Select All to make all of the tabs visible.

Tab Permissions

This pane determines the tabs that are visible in the customer web interface. Select the check boxes for tabs that you want to make visible for this customer. Select All to make all of the tabs visible.

You must include at least one of the following tabs: Dashboard, Policy, or Objects.

Widget Permissions

The widgets listed in the Available Widgets box differ, depending if the FortiPortal is running in Collector mode or FortiAnalyzer mode.

This pane determines the widgets that are available in the dashboard of the customer web interface.

If you selected Dashboard in the Tab Permissions panel, you must select at least one widget for display in the dashboard.

Use the arrow keys to move the widgets from the left panel to the right panel (these widgets will appear in the dashboard for this customer). The double-arrow keys move the entire list.

ADOM Filter Permissions

This pane determines the devices that will be listed for a customer in drop-down menus of devices.

Use the arrow keys to move values from the left panel to the right panel.