Technical Tip: Host is scanned multiple times unexpectedly
Description
This article describes an issue where the Host is scanned multiple times unexpectedly.
Scope
FortiNAC.
Solution
This can occur if the host no longer matches the original Endpoint Compliance Policy and matches some other policy. In such cases, a different scan may run.
To verify if multiple scans have been run, do the following:
- Navigate to Hosts -> Host View and search for the affected host record.
- Right-click on the host record and select Host Health.
- Once the extra scan has been identified, check history to see when the scan was last run.
- Once the unexpected scan has been identified, navigate to Policy -> Policy Configuration and review the User/Host Profiles for the two Endpoint Compliance policies to identify the criteria used for each policy.
- Compare the criteria against the host record to determine why the host started to match the new policy.
For more information on profiles, see section User/host profiles of the Administration Guide in the Fortinet Document Library.
See also Endpoint compliance policies of the Administration Guide in the Fortinet Document Library.