The Assets and Identities device identification feature requires an Operational Technology (OT) Security Service license.
Once the license is confirmed, the identification and detection will work as expected.
FortiGate identifies a MAC address by first learning it from network traffic such as ARP, DHCP, or session logs. It then performs a MAC OUI lookup to determine the vendor and collects additional context like DHCP hostnames, DNS queries, and network behavior. This information is matched against FortiGuard device fingerprints to determine the device type and category.
In FortiGate, under the Assets and Identities, some of the learned MAC or devices may be categorized as 'Other identified device'.
This is an expected behavior for the MAC addresses that cannot be identified by FortiGuard.
Even if the vendor name is known, the device may still appear under 'Other identified devices' when FortiGate lacks enough fingerprinting data to confidently classify it.
Useful commands to check the MAC addresses.
diagnose user device list
diagnose sniffer packet <port name> "ether host <mac addr>" 6 0 1
FortiGate can detect Device identification and host information for any device type, only if the device generates traffic that has an identifiable host in it.
If any device does not generate sufficient information to identify its IP address or even the hardware vendor and the FortiGuard IoT database has no entry for it, the category will show as 'Other identified device'.
To check IoT device detection from the FortiGuard service, see IoT Device Detection Service.
If the IoT device cannot be correctly detected, submit a review from the Dispute Device Request Form.
| 
