Fortinet black logo

User Guide

Home FortiNDR Cloud User Guide

Account management

Account management

Use the Account Management page to create new users and manage global settings for your account. You must have Admin privileges for one or more accounts to view the Account Management page.

To view the Account Management page:

Click the gear icon at the top-right of the page and select Account Management.

  • If you have access to only one account, you will see the Account Management page for your account

  • If you have Admin privileges for more than one account, you will see the Account Inventory page. From there, click an account to view it's Account Management page.

The top of the page will display descriptive parameters for the account, namely the account's UUID and sensor code, as well as the number of users and sensors provisioned in the account. The rest of the page is organized into the following sections:

The Account Management page contains the following tabs:

Users Create new users and assign roles.
Subnets

Lists all internal IP address ranges for the account. This list will always include the ranges defined in RFC 1918, link local addresses (169.254.0.0/16), and multicast addresses (224.0.0.0/4).

We recommend adding a public IP space owned by your organization, such as post-NAT, egress, or externally-accessible IP addresses, to this list. Doing so better characterizes the directionality of your network's traffic.

Contact your TSM with any public IP addresses or ranges that you would like to add to this list.

Admin users can add, edit or delete subnets in an account.. See Add or edit a subnet
Device Tracking

Use this page to exclude or delete a device from your account.

Devices in this list will not have any new DHCP device tracking collected. The device tracking information is visible in the DHCP section of the Entity Panel and the Sensor Device View section when viewing by visible devices.

To exclude devices from detections, see Excluding Devices under Detections.

Modules Displays the available integrations for FortiNDR Cloud.
Settings Enable SAML SSO, mulit-factor authentication, and generate PCAP encryption keys.
Billing

Displays the billing summary of the daily and monthly bandwidth usage for an account. Accounts are billed based on the 95th percentile of the aggregate bandwidth usage across all sensors over 10-seconds intervals. The daily and Month-To-Date (MTD) numbers are calculated after the end of each UTC day.

  • The Billing tab displays the:

    • Billing Summary: Your account's bandwidth usage, for the current date, as compared to your available license.

    • Monthly History: The historical data of the bandwidth usage for the chosen date range. You can also compare the bandwidth usage between two or more months by selecting the appropriate date range.

  • The Daily Stats tab displays the daily bandwidth usage for the chosen date range.

For customers with more than one account, the billing summary will display the bandwidth for both the parent and child accounts. Click the arrow next to the account name to toggle between the parent and child views. Use the date picker to view the bandwidth for a previous month in the billing cycle.

Previous
Next

Account management

Use the Account Management page to create new users and manage global settings for your account. You must have Admin privileges for one or more accounts to view the Account Management page.

To view the Account Management page:

Click the gear icon at the top-right of the page and select Account Management.

  • If you have access to only one account, you will see the Account Management page for your account

  • If you have Admin privileges for more than one account, you will see the Account Inventory page. From there, click an account to view it's Account Management page.

The top of the page will display descriptive parameters for the account, namely the account's UUID and sensor code, as well as the number of users and sensors provisioned in the account. The rest of the page is organized into the following sections:

The Account Management page contains the following tabs:

Users Create new users and assign roles.
Subnets

Lists all internal IP address ranges for the account. This list will always include the ranges defined in RFC 1918, link local addresses (169.254.0.0/16), and multicast addresses (224.0.0.0/4).

We recommend adding a public IP space owned by your organization, such as post-NAT, egress, or externally-accessible IP addresses, to this list. Doing so better characterizes the directionality of your network's traffic.

Contact your TSM with any public IP addresses or ranges that you would like to add to this list.

Admin users can add, edit or delete subnets in an account.. See Add or edit a subnet
Device Tracking

Use this page to exclude or delete a device from your account.

Devices in this list will not have any new DHCP device tracking collected. The device tracking information is visible in the DHCP section of the Entity Panel and the Sensor Device View section when viewing by visible devices.

To exclude devices from detections, see Excluding Devices under Detections.

Modules Displays the available integrations for FortiNDR Cloud.
Settings Enable SAML SSO, mulit-factor authentication, and generate PCAP encryption keys.
Billing

Displays the billing summary of the daily and monthly bandwidth usage for an account. Accounts are billed based on the 95th percentile of the aggregate bandwidth usage across all sensors over 10-seconds intervals. The daily and Month-To-Date (MTD) numbers are calculated after the end of each UTC day.

  • The Billing tab displays the:

    • Billing Summary: Your account's bandwidth usage, for the current date, as compared to your available license.

    • Monthly History: The historical data of the bandwidth usage for the chosen date range. You can also compare the bandwidth usage between two or more months by selecting the appropriate date range.

  • The Daily Stats tab displays the daily bandwidth usage for the chosen date range.

For customers with more than one account, the billing summary will display the bandwidth for both the parent and child accounts. Click the arrow next to the account name to toggle between the parent and child views. Use the date picker to view the bandwidth for a previous month in the billing cycle.

Previous
Next