FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes how to fetch the list of active firewall admin including the login type and the source IP of the administrator and how to terminate the unwanted admin session via the command line
Scope
FortiGate.
Solution
In order to list the active admin session, the following command can be executed:
# get sys admin list
username
local
device
vdom
profile
remote
started
admin
ssh
lan:192.168.0.1:22
root
super_admin
192.168.0.112:56831
2022-11-18 16:30:36
admin
https
lan:192.168.0.1:443
root
super_admin
192.168.0.112:56918
2022-11-18 16:33:51
To terminate the active session:
# exe disconnect-admin-session ?
Currently connected admins:
INDEX
USERNAME
TYPE
VDOM
PROFILE
FROM
TIME
0
admin
ssh
root
super_admin
192.168.0.112
Fri Nov 18 16:30:36 2022
1
admin
https
root
super_admin
192.168.0.112
Fri Nov 18 16:33:03 2022
# exe disconnect-admin-session <index_number>
Example: to disconnect HTTPS session initiated by the user admin from 192.168.0.112,
