easy way to see how many fortitokens have been assigned?

[Ralph1973]

Hello, I noticed that in the Fortigate gui doesn't show the number of assigned fortitokens mobile; it says Tokens assigned: 0 of 201. Well there have been assigned more than 100. I have tried to find a way to have an overview, or at least a number of Fortitokens that have been given out to users. Anyone who has a suggestion?

Thank you and regards,

Ralph Willemsen

Arnhem, Netherlands

[emnoc]

Try the following;

diag fortitoken infor

show user fortitoken  | grep edit

[Ralph1973]

Hi Emnoc, thanks for the info. I think I will always receive a long list as output, but it is workable by counting the rows in Excel ;)

I tried |wc  but that is not accepted

Kind regards,

Ralph

[emnoc]

I believe there's another means but I don't recall it right off the top of my head. I believe fortimanager also list the counts also iirc.

[xsilver_FTNT]

Hi Ralph1973,

may I ask what's the FortiOS you run ?

We had some issues on 5.2 early versions that GUI did not counted mobile tokens properly, but that should be fixed and my 5.4.4 I did quick check runs and counts correctly.

Alternative way, as emnoc mentioned, is CLI. That can also count HW tokens, not just mobile ones.

So how about that:

----

FGT60D-2 (root) # di fortitoken info FORTITOKEN       DRIFT  STATUS FTK20019PE8E962B 0      active FTK20019PKZUR935 0      active FTK20019PWUX0FCE 0      active FTK20019UI7LZAF9 7      active FTKMOB2C0DEFE5EA 0      provisioned FTKMOB2C2CABCA84 0      new FTKMOB2C4FC45711 0      provisioned FTKMOB2C7DB93525 0      provisioned FTKMOB2C72E70D84 0      new FTKMOB3761CBC50A 0      new FTKMOB3737678AA3 0      new Total activated token: 4 Total global activated token: 4 Token server status: reachable FGT60D-2 (root) # di fortitoken info | grep active FTK20019PE8E962B 0      active FTK20019PKZUR935 0      active FTK20019PWUX0FCE 0      active FTK20019UI7LZAF9 7      active FGT60D-2 (root) # di fortitoken info | grep active -c 4

FGT60D-2 (root) # di fortitoken info | grep provisioned -c 3 Best regards,

Tomas