Admin and system events report 2014-07-09-1539

Admin and System Events Report
Fortinet Inc. All Rights Reserved. Created on July 9, 2014 15:40
Report Date: 2014-07-09
Data Range: 2014-07-02 00:00 - 2014-07-08 23:59 IST (FAZ local)

Table of Contents
Admin and System Event Report
Admin Login Summary
System Activity Summary
1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Admin and System Event Report
# Date/Time User Name Login Interface Duration(hh:mm:ss) Config Changes Device
1 2014-07-08 21:51:54 pradeepks https(10.5.2.115) 00:51:27 Xav-FG-01
4 2014-07-08 18:13:33 rrahman https(10.1.246.156) 02:14:15 Xav-FG-01
5 2014-07-08 17:35:00 rrayana https(10.5.2.110) 00:52:41 Xav-FG-01
13 2014-07-08 14:30:51 admin https(10.5.2.115) 00:52:44 Xav-FG-01
14 2014-07-08 13:03:24 Nali https(10.1.246.154) 01:53:20 Xav-FG-01
17 2014-07-08 09:50:10 Nali https(10.1.246.154) 00:50:02 Xav-FG-01
25 2014-07-07 15:19:14 Nali https(10.1.246.154) 00:08:06 Xav-FG-01
29 2014-07-07 10:38:46 Nali https(10.1.246.154) 00:56:50 Xav-FG-01
38 2014-07-04 15:42:06 Nali https(10.1.246.154) 01:44:08 Xav-FG-01
40 2014-07-04 14:51:14 Nali jsconsole 00:50:01 Xav-FG-01
41 2014-07-04 13:55:46 Nali https(10.1.246.154) 00:50:09 Xav-FG-01
44 2014-07-04 11:10:08 Nali https(10.1.246.154) 00:51:33 Xav-FG-01
45 2014-07-04 02:41:51 dpurohit https(10.5.2.107) 00:30:55 Xav-FG-01
Admin Login Summary
Admin and System Events Report - FortiAnalyzer Host Name: FAZ300D Page 1 of 6

# Date/Time User Name Login Interface Duration(hh:mm:ss) Config Changes Device
57 2014-07-03 15:23:22 Nali https(10.1.246.154) 01:24:16 Xav-FG-01
58 2014-07-03 15:23:22 Nali https(10.1.246.154) 00:50:08 Xav-FG-01
64 2014-07-03 12:00:36 Nali https(10.1.246.154) 01:01:02 Xav-FG-01
65 2014-07-03 11:52:53 Nali https(10.1.246.154) 00:56:56 Xav-FG-01
68 2014-07-03 10:15:17 Nali https(10.1.246.154) 01:39:04 Xav-FG-01
73 2014-07-02 17:22:34 admin ssh(10.5.2.115) 00:25:06 Xav-FG-01
80 2014-07-02 14:59:05 admin ssh(10.5.2.115) 01:37:01 Xav-FG-01
86 2014-07-02 13:25:46 Nali https(10.1.246.154) 00:50:56 Xav-FG-01
90 2014-07-02 12:34:44 Nali https(10.1.246.154) 00:34:24 Xav-FG-01
91 2014-07-02 12:34:41 Nali jsconsole 00:32:48 Xav-FG-01
92 2014-07-02 11:33:07 Nali https(10.1.246.154) 01:08:48 Xav-FG-01
94 2014-07-02 09:45:15 Nali https(10.1.246.154) 00:50:02 Xav-FG-01
Admin Login Summary (contd)

# Date/Time Events Device
1 2014-07-08 23:48:24 AD group user failed in authentication Xav-FG-01
2 2014-07-08 23:48:21 FSSO-logon event from FSSO: user MANISHY logged on 10.1.232.1 Xav-FG-01
3 2014-07-08 23:48:21 FSSO-logon event from FSSO: user GAGANDEEPS logged on 10.240.0.37 Xav-FG-01
4 2014-07-08 23:48:21 FSSO-logon event from FSSO: user PRASHANTK logged on 10.1.231.14 Xav-FG-01
5 2014-07-08 23:48:21 FSSO-logon event from FSSO: user MAMIR logged on 10.240.1.173 Xav-FG-01
6 2014-07-08 23:48:21 FSSO-logon event from FSSO: user SQLSERVICEACC logged on 10.5.2.56 Xav-FG-01
7 2014-07-08 23:48:21 FSSO-logon event from FSSO: user SSINGH logged on 10.51.5.163 Xav-FG-01
8 2014-07-08 23:48:21 FSSO-logon event from FSSO: user XAVBOOK logged on 10.5.2.15 Xav-FG-01
9 2014-07-08 23:48:21 FSSO-logon event from FSSO: user CSAXENA logged on 10.240.0.171 Xav-FG-01
10 2014-07-08 23:48:21 FSSO-logon event from FSSO: user VISHALG logged on 10.240.4.83 Xav-FG-01
11 2014-07-08 23:48:21 FSSO-logon event from FSSO: user GPATPATYA logged on 172.16.2.100 Xav-FG-01
12 2014-07-08 23:48:21 FSSO-logon event from FSSO: user PKAMRA logged on 10.240.2.115 Xav-FG-01
13 2014-07-08 23:48:21 FSSO-logon event from FSSO: user BARUNKJ logged on 10.1.246.136 Xav-FG-01
14 2014-07-08 23:48:21 FSSO-logon event from FSSO: user DSHEKHAR logged on 10.240.2.119 Xav-FG-01
16 2014-07-08 23:48:17 User from 10.5.2.46 was timed out Xav-FG-02
20 2014-07-08 23:48:16 FSSO-logon event from FSSO: user SANJEEV logged on 10.240.0.124 Xav-FG-01
21 2014-07-08 23:48:16 FSSO-logon event from FSSO: user AGOYAL logged on 10.5.2.2 Xav-FG-01
22 2014-07-08 23:48:16 FSSO-logon event from FSSO: user AGUPTA3 logged on 10.240.2.44 Xav-FG-01
23 2014-07-08 23:48:16 FSSO-logon event from FSSO: user CSAXENA logged on 10.240.0.171 Xav-FG-01
24 2014-07-08 23:48:16 FSSO-logon event from FSSO: user PMAHARSHI logged on 10.240.0.19 Xav-FG-01
25 2014-07-08 23:48:16 FSSO-logon event from FSSO: user KSUJINI logged on 10.240.0.214 Xav-FG-01
28 2014-07-08 23:48:16 FSSO-logon event from FSSO: user ACHANDRA logged on 10.240.4.102 Xav-FG-01
30 2014-07-08 23:48:16 FSSO-logon event from FSSO: user MTHAKUR logged on 10.51.5.66 Xav-FG-01
31 2014-07-08 23:48:16 FSSO-logon event from FSSO: user RMUSTAFA logged on 10.240.0.23 Xav-FG-01
32 2014-07-08 23:48:16 FSSO-logon event from FSSO: user RKHAN3 logged on 10.51.5.126 Xav-FG-01
33 2014-07-08 23:48:16 FSSO-logon event from FSSO: user RKHAN2 logged on 10.240.2.130 Xav-FG-01
38 2014-07-08 23:48:12 FSSO-logon event from FSSO: user RVOHRA logged on 172.16.2.165 Xav-FG-01
40 2014-07-08 23:48:09 FSSO-logon event from FSSO: user ZSHEIKH logged on 10.240.0.149 Xav-FG-01
41 2014-07-08 23:48:09 FSSO-logon event from FSSO: user NEHAG logged on 10.51.5.154 Xav-FG-01
43 2014-07-08 23:48:06 FSSO-logon event from FSSO: user AVINCI logged on 172.16.2.87 Xav-FG-01
44 2014-07-08 23:48:06 FSSO-logon event from FSSO: user NJHA logged on 10.240.2.138 Xav-FG-01
46 2014-07-08 23:48:06 FSSO-logon event from FSSO: user MDJEELANI logged on 10.240.2.110 Xav-FG-01
48 2014-07-08 23:48:06 FSSO-logon event from FSSO: user SAGARWAL logged on 10.51.5.161 Xav-FG-01
49 2014-07-08 23:48:06 FSSO-logon event from FSSO: user AMISHRA5 logged on 10.51.5.18 Xav-FG-01
System Activity Summary

53 2014-07-08 23:48:06 FSSO-logon event from FSSO: user RRAJPUT logged on 172.16.2.206 Xav-FG-01
54 2014-07-08 23:48:06 FSSO-logon event from FSSO: user BESADMININDIA logged on 10.5.2.50 Xav-FG-01
55 2014-07-08 23:48:06 FSSO-logon event from FSSO: user ZSHEIKH logged on 10.240.0.149 Xav-FG-01
56 2014-07-08 23:48:06 FSSO-logon event from FSSO: user ANILKUMAR logged on 10.240.2.16 Xav-FG-01
58 2014-07-08 23:48:02 FSSO-logon event from FSSO: user DNISHIT logged on 10.1.246.130 Xav-FG-01
59 2014-07-08 23:48:02 FSSO-logon event from FSSO: user SKSINGH1 logged on 10.240.2.5 Xav-FG-01
60 2014-07-08 23:48:02 FSSO-logon event from FSSO: user SANJEEV logged on 10.240.0.124 Xav-FG-01
61 2014-07-08 23:48:02 FSSO-logon event from FSSO: user JZHOU logged on 192.168.180.69 Xav-FG-01
62 2014-07-08 23:48:02 FSSO-logon event from FSSO: user NSINGH2 logged on 10.51.5.70 Xav-FG-01
63 2014-07-08 23:48:02 FSSO-logon event from FSSO: user SAKHAN2 logged on 172.16.2.176 Xav-FG-01
64 2014-07-08 23:48:02 FSSO-logon event from FSSO: user SSHARMA9 logged on 10.5.2.244 Xav-FG-01
65 2014-07-08 23:48:02 FSSO-logon event from FSSO: user PSINGH1 logged on 10.240.4.80 Xav-FG-01
66 2014-07-08 23:48:02 FSSO-logon event from FSSO: user SSHARMA8 logged on 10.1.249.40 Xav-FG-01
69 2014-07-08 23:48:02 FSSO-logon event from FSSO: user KLYADAV logged on 10.2.0.99 Xav-FG-01
70 2014-07-08 23:48:02 FSSO-logon event from FSSO: user ARASTOGI1 logged on 10.1.249.12 Xav-FG-01
72 2014-07-08 23:48:02 FSSO-logon event from FSSO: user AASHRAF1 logged on 10.240.2.22 Xav-FG-01
78 2014-07-08 23:47:56 FSSO-logon event from FSSO: user VJAIN logged on 172.16.2.207 Xav-FG-01
79 2014-07-08 23:47:56 FSSO-logon event from FSSO: user AKUMAR9 logged on 10.51.0.38 Xav-FG-01
81 2014-07-08 23:47:56 FSSO-logon event from FSSO: user ATULKS logged on 10.2.0.108 Xav-FG-01
82 2014-07-08 23:47:56 FSSO-logon event from FSSO: user BDSINGH logged on 10.240.4.70 Xav-FG-01
83 2014-07-08 23:47:56 FSSO-logon event from FSSO: user VPAL logged on 10.2.0.114 Xav-FG-01
84 2014-07-08 23:47:56 FSSO-logon event from FSSO: user EDIMAUNAHAN logged on 172.16.2.50 Xav-FG-01
85 2014-07-08 23:47:56 FSSO-logon event from FSSO: user PRASHANTK logged on 10.1.231.14 Xav-FG-01
86 2014-07-08 23:47:56 FSSO-logon event from FSSO: user PSNEGI logged on 10.51.5.30 Xav-FG-01
87 2014-07-08 23:47:56 FSSO-logon event from FSSO: user SSINGH6 logged on 10.51.5.77 Xav-FG-01
90 2014-07-08 23:47:52 FSSO-logon event from FSSO: user MAMIR logged on 10.240.1.173 Xav-FG-01
91 2014-07-08 23:47:52 FSSO-logon event from FSSO: user KKATARIA logged on 10.240.2.32 Xav-FG-01
92 2014-07-08 23:47:52 FSSO-logon event from FSSO: user AGOYAL2 logged on 10.240.2.39 Xav-FG-01
94 2014-07-08 23:47:52 FSSO-logon event from FSSO: user DSHEKHAR logged on 10.240.2.119 Xav-FG-01
95 2014-07-08 23:47:52 FSSO-logon event from FSSO: user AKUMAR9 logged on 10.51.0.38 Xav-FG-01
97 2014-07-08 23:47:52 FSSO-logon event from FSSO: user SSBISHT logged on 10.51.5.37 Xav-FG-01
98 2014-07-08 23:47:52 FSSO-logon event from FSSO: user SSINGH logged on 10.51.5.163 Xav-FG-01
System Activity Summary (contd)

99 2014-07-08 23:47:52 FSSO-logon event from FSSO: user RHNISAR logged on 10.51.0.33 Xav-FG-01
System Activity Summary (contd)

Appendix A
Devices: Xav-FG-01[Xav-Inside]
Xav-FG-01[roo]
Xav-FG-01[root]
Xav-FG-01[xavient]
Xav-FG-01[xavient_NAT]
Xav-FG-02[Xav-Inside]
Xav-FG-02[roo]
Xav-FG-02[root]
Xav-FG-02[xavient]
Xav-FG-02[xavient_NAT]

Admin and system events report 2014-07-09-1539

Recommended

Recommended

More Related Content

Viewers also liked

Viewers also liked (8)

Admin and system events report 2014-07-09-1539