Technical Tip: Hosts with Persistent Agent and virtual adapters are unexpectedly isolated
Description
This article describes an issue when Registered Hosts running the Persistent Agent with virtual adapters are unexpectedly isolated. This can occur when the virtual interface(s) are using a randomized MAC address.
- When a new address is detected, a new adapter record and rogue host record are created.
- The machine is isolated, and the user must re-register.
- Eventually, the maximum number of hosts a user is allowed to register is reached. The user is no longer able to register. To view this setting or for more details, see Allowed Hosts in the Administration Guide.
Scope
FortiNAC v8.8.3/Agent 5.2.4 and lower
Solution
Workaround:
Delete the old host records from the database for the user to register.
Solution:
- Option 1: Addressed in appliance v8.8.5/agent version 5.2.5 and greater. ID 0689275
- Option 2: Ensure an agent is installed, then add the vendor OUI or MAC address of the virtual adapter to the Custom Ignored Adapters list. This will prevent adapter records from being created when a new MAC address for a virtual adapter is detected. For instructions, see related KB article below.
Related articles
