Technical Tip: At-Risk Hosts Not Moving to Remediation
Description
This article describes that At-Risk Hosts is not Moving to Remediation.
Scope
FortiNAC.
Solution
Hosts marked at risk are not isolated. This affects all hosts.
Ensure Quarantine VLAN Switching is enabled. This feature is enabled by default. In the Administrative UI, navigate to System -> Settings -> Quarantine and select 'Enable Quarantine VLAN Switching'.
Ensure Quarantine VLAN Switching is enabled. This feature is enabled by default. In the Administrative UI, navigate to System -> Settings -> Quarantine and select 'Enable Quarantine VLAN Switching'.
On the other hand, the switch port that the host plugged in should be a member of the 'Forced Remediation' group. Otherwise, FortiNAC will not apply enforcement when the host is marked at risk.
Upon the next evaluation of the hosts, they will be moved to the configured Quarantine/Isolation VLAN. For online hosts, this would be on the next L2 poll of the device to which the host is connected.
