Technical Tip: FortiNAC - Hosts are profiled with an improper Device Type

There could be cases when a host is registered using a Persistent Agent method, however in a Host's view, the host is populated with a wrong device type, precisely as a 'Printer' like in a screen below, which could be found by entering the GUI -> User & Hosts -> Hosts -> filter out the desired host, and double-click (or right click, edit):

This may happen for several reasons:

1. There is an active FortiGuard IoT service. Refer to this link (page 15, FortiGuard method).
2. A 'Perform proactive "FortiGuard" method profiling' is enabled under FortiNAC GUI -> System -> Settings -> User/Host Management -> Device Profiler.
3. A 'FortiGuard' fingerprint method is ranked higher than Agent (Refer to this link).

Steps to resolve the issue:

1. Rank a 'FortiGuard' fingerprint method lower than a desired fingerprint source.
2. Disable the option 'Proactive 'FortiGuard' method profiling'.
3. Delete the host, and wait until it appears with a proper device type.

Related articles:

• Technical Tip: Track rogue/host profiling data through Endpoint Fingerprints
• Technical Tip: View DHCP Fingerprint information received by from hosts
• Technical Tip: Methods used to learn host name and operating system information