Technical Note: Modify aging of hosts and users

[FortiKoala]

Description

Host and user records remain in the database indefinitely unless expiration dates are set.  This article provides steps to configure age times in order to apply expiration dates to these records.

See also Best practices for host and user aging in the Fortinet Document Library.

Scope
Version:  8.x
Solution

Guests in Guest Templates

1. Navigate to Users > Guest/Contractor Templates.
2. Select Guest template.
3. Right click and modify Account Duration.
4. Click OK.

Global Aging settings for Users and Hosts

1. Navigate to System > Settings.
2. Open User/Host Management.
3. Select Aging - these values are the Global settings for aging of Hosts and Users.
4. Modify to the desired values for Unregistered Hosts (Days Valid, Days Inactive), Registered Hosts (Days Valid, Days Inactive) and Users (Days Valid, Days Inactive).
5. Click Save Settings.

Modifying age times on this window does not affect those hosts, users or administrators whose Expiration and Inactivity date fields already contain data.  Aging values must be cleared on those existing records in order for the new values to apply.

Clear Registered:  Removes the Age Time Expiration Date and Inactivity Date that appears in the Host Properties for all registered hosts, including hosts with age times set based on group membership or set individually.  The only exception is records set to Never Expire.  If the Global Cleared Registered option is used, individual and group based age times must be set again.

Clear Aging Values for All Users:  Removes the Age Time Expiration Date that appears in the User Properties for all users, except those set to Never Expire.

If removing the age settings for all records is not desired, they can be removed either per group or individually. 

For more details on this view, see section Aging of the Administration Guide in the Fortinet Document Library.

Group Aging for Hosts

1. Navigate to  System > Groups.
2. Select the desired host group.
3. Right click and select Set Aging - Group aging values override the Global aging values for all members of the group.
4. Modify to the desired values for Days Valid and Inactive.
5. Click OK.

For more details on this view, see section Aging hosts in a group of the Administration Guide in the Fortinet Document Library.

Individual Aging for a Host

1. Navigate to  Hosts > Host View.
2. Search and found the desired Host record(s).
3. Select the host.
4. Right click and select Host Properties.
5. Select Set under the Time heading - Host aging values override both Group and Global aging
6. values.
7. Modify to the desired values for Host Expiration and Host Inactivity Limit values
8. Click OK.

For more details on this view, see section Set host expiration date of the Administration Guide in the Fortinet Document Library.