Skip to main content
FortiKoala
Staff
Staff
October 1, 2018

Technical Note: Headless Devices Marked as Needing Authentication and Isolated

  • October 1, 2018
  • 0 replies
  • 888 views
Description
Headless Devices Marked as Needing Authentication and Isolated

Scope
Version:   Network Sentry 7 & 8
Solution
Version:  Network Sentry 7 and 8

Issue:  Any Host registered in the Hosts View (including headless devices) can be marked for Authentication and Isolated if the following conditions are met:
1. The host is connected to a network device on which Network Sentry is enforcing authentication.   
  • A wired port that is a member of the Forced Authentication group.
  • A wireless controller or access point whose SSID or Model configuration has Authentication set to Enforce.
2. The affected host matches an Authentication Policy. 


Workaround:
Option 1.  Add the headless devices to the Forced User Authentication Exceptions group or a group nested under Forced User Authentication Exceptions.
Option 2.  Redesign the User/Host Profile for Authentication in a manner to which the impacted headless devices will not match.