Skip to main content
nflnetwork29
Explorer III
May 31, 2024
Question

fortinac keeps logging in to fortigate every few minutes generating too many alerts

we have alerts setup for admin login/logout. since adding to fortinac we have hundreds of alerts being generated. what is the best way to deal with this? can we exclude the fortinac from the event notification somehow?

2 replies

AEK
SuperUser
SuperUser
June 1, 2024

FortiNAC periodically logs in to all network equipment, like to poll L2/L3 devices and so.

But where do you see the alerts? You mean on a separate monitoring solution? If this is the case then all monitoring solutions have a way to disable a specific alert. That's where you should disable them.

AEK
ebilcari
Staff
Staff
June 4, 2024

How is the FGT integrated with FNAC, does it have FSW, FAP or VPN integration configured?

Most of the communication now are done through API (page 67), L3 polling may still use SSH access to get the ARP table. You can also configure the REST API Administrator key as shown in page 10.

Emirjon
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT