Skip to main content
nflnetwork29
Explorer III
May 31, 2024
Question

fortinac keeps logging in to fortigate every few minutes generating too many alerts

  • May 31, 2024
  • 2 replies
  • 1021 views

we have alerts setup for admin login/logout. since adding to fortinac we have hundreds of alerts being generated. what is the best way to deal with this? can we exclude the fortinac from the event notification somehow?

2 replies

AEK
SuperUser
SuperUser
June 1, 2024

FortiNAC periodically logs in to all network equipment, like to poll L2/L3 devices and so.

But where do you see the alerts? You mean on a separate monitoring solution? If this is the case then all monitoring solutions have a way to disable a specific alert. That's where you should disable them.

AEK
ebilcari
Staff
Staff
June 4, 2024

How is the FGT integrated with FNAC, does it have FSW, FAP or VPN integration configured?

Most of the communication now are done through API (page 67), L3 polling may still use SSH access to get the ARP table. You can also configure the REST API Administrator key as shown in page 10.

Emirjon
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!