Technical Tip: Sending a syslog message when RADIUS authentication fails

Description

This article describes how to send a Syslog message to an external Syslog server when a Radius Authentication fails.

Scope

FortiNAC, FortiNAC -F.

Solution

1. Configure the Syslog server under the Menu System -> Settings -> System Communication -> Log receivers and set the Facility as 'Internal Syslogd'.
   

2. Enable 'Activity Failure Events' in the GUI under Network -> Radius -> Configuration.

3. Under Menu Logs -> Events & Alarms -> Management, set the 'Radius Authentication Failure' event as 'Internal & External'.

4. Verify that when RADIUS authentication fails, FortiNAC sends a Syslog message to the target Syslog server.