Fortinet black logo

CLI Reference

system device tracking

system device-tracking

Use this command to adjust device tracking settings. 's device tracking feature identifies suspected attackers based on the computers they are using.

For information on device tracking, see the FortiWeb Administration Guide:

http://docs.fortinet.com/fortiweb/admin-guides

To use this command, your administrator account’s access control profile must have either w or rw permission to the admingrp area. For details, see "Permissions" on page 1.

Syntax

config system device-tracking

set block-duration <hours_int>

set cleanup-historical-threat-weight-period {1-week | 3-days | 12-hours | 24-hours | never}

set database-query-timeout <seconds_int>

set delete-inactive-device-interval {days_int}

set fingerprinting-interval <minutes_int>

end

Variable Description Default

block-duration <hours_int>

Enter the amount of time (in hours) that will block a device within a single cleanup-historical-threat-weight-period.

No default.

cleanup-historical-threat-weight-period {1-week | 3-days | 12-hours | 24-hours | never}

Select the amount of time that will store threat weight information for a device. Once threat weight information has been stored for longer than the selected amount of time, will remove that information.

never

database-query-timeout <seconds_int>

Enter the maximum amount of time (in seconds) that will wait for a response when it queries the database for threat weight information for a device. The default value is 4. The valid range is 1–30.

3

delete-inactive-device-interval {days_int}

Enter the amount of time (in days) that will store data for an inactive device before removes the data for that device. The valid range is 0–30.

0

fingerprinting-interval <minutes_int>

Enter the interval (in minutes) in which will update the device fingerprint of a currently tracked device. The valid range is 60–1440.

60

Example

This example adjusts the device tracking settings.

config system device-tracking

set cleanup-historical-threat-weight-period 1-week

set block-duration 10

set database-query-timeout 15

set delete-inactive-device-interval 3

set fingerprinting-interval 70

end

Related Topics

system device-tracking

Use this command to adjust device tracking settings. 's device tracking feature identifies suspected attackers based on the computers they are using.

For information on device tracking, see the FortiWeb Administration Guide:

http://docs.fortinet.com/fortiweb/admin-guides

To use this command, your administrator account’s access control profile must have either w or rw permission to the admingrp area. For details, see "Permissions" on page 1.

Syntax

config system device-tracking

set block-duration <hours_int>

set cleanup-historical-threat-weight-period {1-week | 3-days | 12-hours | 24-hours | never}

set database-query-timeout <seconds_int>

set delete-inactive-device-interval {days_int}

set fingerprinting-interval <minutes_int>

end

Variable Description Default

block-duration <hours_int>

Enter the amount of time (in hours) that will block a device within a single cleanup-historical-threat-weight-period.

No default.

cleanup-historical-threat-weight-period {1-week | 3-days | 12-hours | 24-hours | never}

Select the amount of time that will store threat weight information for a device. Once threat weight information has been stored for longer than the selected amount of time, will remove that information.

never

database-query-timeout <seconds_int>

Enter the maximum amount of time (in seconds) that will wait for a response when it queries the database for threat weight information for a device. The default value is 4. The valid range is 1–30.

3

delete-inactive-device-interval {days_int}

Enter the amount of time (in days) that will store data for an inactive device before removes the data for that device. The valid range is 0–30.

0

fingerprinting-interval <minutes_int>

Enter the interval (in minutes) in which will update the device fingerprint of a currently tracked device. The valid range is 60–1440.

60

Example

This example adjusts the device tracking settings.

config system device-tracking

set cleanup-historical-threat-weight-period 1-week

set block-duration 10

set database-query-timeout 15

set delete-inactive-device-interval 3

set fingerprinting-interval 70

end

Related Topics