Fortinet black logo

Administration Guide

Add or edit a customer

Add or edit a customer

Selecting Create New on the upper left of the Customers tab displays a dialog for adding a new customer (fields in the form are blank). (Hovering over any entry in the Customer tab and selecting the Edit Settings icon displays the Edit Customer dialog, which is identical to the Add Customer dialog except that fields are set to the values for this customer.)

To add or edit a customer:
  1. Input the fields, as described in the following sections.
  2. Select Save.

The Add Customer dialog comprises a number of panes. The following sections describe the fields in each pane.

Customer Details and Contact Information

These panes contain basic information about the customer:

Settings

Guidelines

Customer Details

Customer Name

Customerʼs business name, which must be unique within this FortiPortal.

First Name

Last Name

Email

Name and email of the primary customer contact

Domains

Enter a domain and then select the green + button. The new domain appears in the list below the entry box.

Use this field for the customer domain. To specify a domain for the administrator, see Admin settings.

When using remote authentication, a customer may have users defined in more than one domain.

Use MSSP Locale

Uses the MSSP locale (the language configured in Admin Settings).

Language

If you deselect the Use MSSP Locale checkbox, you can select a language for this customer. When a customer user logs in to the GUI, pages will display in this language. For Administrative users, the system will continue to use the language set in the Admin Settings.

Attach Logo

Download an image file for this customerʼs logo. The maximum file size is 1 MB. The format can be jpg, gif, bmp, or png. The maximum file dimension is 144 pixels wide by 48 pixels tall.

Contact Information

Address1

Address2

City

State

Country

Zip

Phone

Fax

Address fields and phone and fax numbers for this customer

Cloud Properties

This pane contains information about portal storage for this customer.

The pane looks like the following figure:

Settings

Guidelines

Enable Analytics

Select to enable analytics.

If you disable analytics for a customer, the Dashboard, View, and Reports tabs will not be displayed to that customer.

If you disable analytics when adding a new customer, the system allocates less storage space for the customer (100 MB).

Total Storage

Total number of MB of storage that this customer can use. The default value is 100 MB when Enable Analytics is selected.

Others

This pane allows you to configure other settings.

Settings

Guidelines

Trusted Hosts

Enable or disable trusted hosts for this customer. For additional information about trusted hosts, see Customer Users.

Policy Installation Scheduler

Enables you to schedule automatic policy installation at a particular time (daily or weekly. All the pending policy updates will be installed at the configured schedule. If you select None, the installation scheduler is not invoked for this customer. If you select Daily, select the installation time. If you select Weekly, select the day and time for the policy installation.

Display Storage

Select to display the storage.

Display Site

Select to display the customer site.

Comment-based Filter(s)

Enter text in this field to find comments in a policy that start with that text. Those policies will be hidden from customer users.

For example, if you enter hide_, all policies with comments that start with hide_ will be hidden from this customerʼs users. This feature can be used to hide static routes in a policy from customer users.

Comment-based filter also supports exact matching to hide a policy with the comment that matches the text you have entered.

Note: Currently, comment-based filter only works with firewall policies.

Name-based Filter(s)

Enter text in this field to find object names that start with that text. All objects with names that start with the specified text will be hidden from customer users.

For example, if you enter hide_, all objects with names that start with hide_ will be hidden from this customerʼs users.

Name-based filter also supports exact matching to hide an object with the name that matches the text you have entered.

Note: The name-based filter works with objects in the Objects tab.

Policy & Object Edit Permissions

This pane configures the policies and objects that a customer can modify.

Policies and objects will not be visible to the customer in the customer web interface unless you select them.

For example, if you select Web Filtering, a web filter object will display in the object tree and a web filter column will display in the Policy tab:

Settings

Guidelines

Policy and Object Permissions

Check boxes for Policies and Objects

You can select edit permissions for All policies and objects or select edit permissions for individual policies and objects:

AntiSpam, Application Control, AntiVirus, DLP Sensor, DLP Filter RegEx, Firewall Policy, Firewall Address, Zone Interface, IPS Sensor, Local Category, Rating Overrides, Schedule, Service, User, User group, Virtual IP, Web Filtering, Web Filter RegEx, and DNS Filter

Policy Tab Permissions

This pane determines which policy tabs are visible in the customer web interface. Select the check boxes for tabs that you want to make visible for this customer. Select All to make all of the tabs visible.

Tab Permissions

This pane determines the tabs that are visible in the customer web interface. Select the check boxes for tabs that you want to make visible for this customer. Select All to make all of the tabs visible.

You must include at least one of the following tabs: Dashboard, Policy, or Objects.

Widget Permissions

This pane determines the widgets that are available in the dashboard of the customer web interface.

Use the arrow keys to move the widgets from the left pane to the right pane (these widgets will appear in the dashboard for this customer). The double-arrow keys move the entire list.

If you selected Dashboard in the Tab Permissions pane, you must select at least one widget for display in the dashboard.

ADOM Filter Permissions and Alias

This pane allows you to select the devices that will be listed for a customer in dropdown menus of devices.

Select the pen icon to give the device an alias for ADOM/Device/VDOM to prevent customers from knowing the MSSP configuration.

Add or edit a customer

Selecting Create New on the upper left of the Customers tab displays a dialog for adding a new customer (fields in the form are blank). (Hovering over any entry in the Customer tab and selecting the Edit Settings icon displays the Edit Customer dialog, which is identical to the Add Customer dialog except that fields are set to the values for this customer.)

To add or edit a customer:
  1. Input the fields, as described in the following sections.
  2. Select Save.

The Add Customer dialog comprises a number of panes. The following sections describe the fields in each pane.

Customer Details and Contact Information

These panes contain basic information about the customer:

Settings

Guidelines

Customer Details

Customer Name

Customerʼs business name, which must be unique within this FortiPortal.

First Name

Last Name

Email

Name and email of the primary customer contact

Domains

Enter a domain and then select the green + button. The new domain appears in the list below the entry box.

Use this field for the customer domain. To specify a domain for the administrator, see Admin settings.

When using remote authentication, a customer may have users defined in more than one domain.

Use MSSP Locale

Uses the MSSP locale (the language configured in Admin Settings).

Language

If you deselect the Use MSSP Locale checkbox, you can select a language for this customer. When a customer user logs in to the GUI, pages will display in this language. For Administrative users, the system will continue to use the language set in the Admin Settings.

Attach Logo

Download an image file for this customerʼs logo. The maximum file size is 1 MB. The format can be jpg, gif, bmp, or png. The maximum file dimension is 144 pixels wide by 48 pixels tall.

Contact Information

Address1

Address2

City

State

Country

Zip

Phone

Fax

Address fields and phone and fax numbers for this customer

Cloud Properties

This pane contains information about portal storage for this customer.

The pane looks like the following figure:

Settings

Guidelines

Enable Analytics

Select to enable analytics.

If you disable analytics for a customer, the Dashboard, View, and Reports tabs will not be displayed to that customer.

If you disable analytics when adding a new customer, the system allocates less storage space for the customer (100 MB).

Total Storage

Total number of MB of storage that this customer can use. The default value is 100 MB when Enable Analytics is selected.

Others

This pane allows you to configure other settings.

Settings

Guidelines

Trusted Hosts

Enable or disable trusted hosts for this customer. For additional information about trusted hosts, see Customer Users.

Policy Installation Scheduler

Enables you to schedule automatic policy installation at a particular time (daily or weekly. All the pending policy updates will be installed at the configured schedule. If you select None, the installation scheduler is not invoked for this customer. If you select Daily, select the installation time. If you select Weekly, select the day and time for the policy installation.

Display Storage

Select to display the storage.

Display Site

Select to display the customer site.

Comment-based Filter(s)

Enter text in this field to find comments in a policy that start with that text. Those policies will be hidden from customer users.

For example, if you enter hide_, all policies with comments that start with hide_ will be hidden from this customerʼs users. This feature can be used to hide static routes in a policy from customer users.

Comment-based filter also supports exact matching to hide a policy with the comment that matches the text you have entered.

Note: Currently, comment-based filter only works with firewall policies.

Name-based Filter(s)

Enter text in this field to find object names that start with that text. All objects with names that start with the specified text will be hidden from customer users.

For example, if you enter hide_, all objects with names that start with hide_ will be hidden from this customerʼs users.

Name-based filter also supports exact matching to hide an object with the name that matches the text you have entered.

Note: The name-based filter works with objects in the Objects tab.

Policy & Object Edit Permissions

This pane configures the policies and objects that a customer can modify.

Policies and objects will not be visible to the customer in the customer web interface unless you select them.

For example, if you select Web Filtering, a web filter object will display in the object tree and a web filter column will display in the Policy tab:

Settings

Guidelines

Policy and Object Permissions

Check boxes for Policies and Objects

You can select edit permissions for All policies and objects or select edit permissions for individual policies and objects:

AntiSpam, Application Control, AntiVirus, DLP Sensor, DLP Filter RegEx, Firewall Policy, Firewall Address, Zone Interface, IPS Sensor, Local Category, Rating Overrides, Schedule, Service, User, User group, Virtual IP, Web Filtering, Web Filter RegEx, and DNS Filter

Policy Tab Permissions

This pane determines which policy tabs are visible in the customer web interface. Select the check boxes for tabs that you want to make visible for this customer. Select All to make all of the tabs visible.

Tab Permissions

This pane determines the tabs that are visible in the customer web interface. Select the check boxes for tabs that you want to make visible for this customer. Select All to make all of the tabs visible.

You must include at least one of the following tabs: Dashboard, Policy, or Objects.

Widget Permissions

This pane determines the widgets that are available in the dashboard of the customer web interface.

Use the arrow keys to move the widgets from the left pane to the right pane (these widgets will appear in the dashboard for this customer). The double-arrow keys move the entire list.

If you selected Dashboard in the Tab Permissions pane, you must select at least one widget for display in the dashboard.

ADOM Filter Permissions and Alias

This pane allows you to select the devices that will be listed for a customer in dropdown menus of devices.

Select the pen icon to give the device an alias for ADOM/Device/VDOM to prevent customers from knowing the MSSP configuration.