system device-tracking
Use this command to adjust device tracking settings. 's device tracking feature identifies suspected attackers based on the computers they are using.
For information on device tracking, see the FortiWeb Administration Guide:
http://docs.fortinet.com/fortiweb/admin-guides
To use this command, your administrator account’s access control profile must have either w or rw permission to the admingrp area. For details, see "Permissions" on page 1.
Syntax
config system device-tracking
set block-duration <hours_int>
set cleanup-historical-threat-weight-period {1-week | 3-days | 12-hours | 24-hours | never}
set database-query-timeout <seconds_int>
set delete-inactive-device-interval {days_int}
set fingerprinting-interval <minutes_int>
end
|
block-duration <hours_int>
|
Enter the amount of time (in hours) that will block a device within a single cleanup-historical-threat-weight-period.
|
No default. |
|
cleanup-historical-threat-weight-period {1-week | 3-days | 12-hours | 24-hours | never}
|
Select the amount of time that will store threat weight information for a device. Once threat weight information has been stored for longer than the selected amount of time, will remove that information. |
never
|
|
database-query-timeout <seconds_int>
|
Enter the maximum amount of time (in seconds) that will wait for a response when it queries the database for threat weight information for a device. The default value is 4. The valid range is 1–30. |
3
|
|
delete-inactive-device-interval {days_int}
|
Enter the amount of time (in days) that will store data for an inactive device before removes the data for that device. The valid range is 0–30.
|
0
|
|
fingerprinting-interval <minutes_int>
|
Enter the interval (in minutes) in which will update the device fingerprint of a currently tracked device. The valid range is 60–1440. |
60
|
Example
This example adjusts the device tracking settings.
config system device-tracking
set cleanup-historical-threat-weight-period 1-week
set block-duration 10
set database-query-timeout 15
set delete-inactive-device-interval 3
set fingerprinting-interval 70
end
Related Topics
