FortiNAC persisting agent connection

4 replies
1160 views

Hi everyone,

recently I did fortinac enforcement to my environment, first I integrated the NAC with my fortigate, and then I checked that all machines are okay getting the right policy and right VLAN.

After I did the enforcement it starts shows some agent connection errors, and machines getting the wrong vlan policy because of that connection error. how can I do troubleshooting, as before enforcement machine was able to communicate with NAC, after enforcement it was assigned to Reg-VLAN because no connection!

Im sure there is a policy to all all traffic with all services and ports.

Im sure the machine has Agent installed and 802.1X configuration.

other machines in the same branch working fine as you can see on the below screenshot. only some getting that weird error. any advice?

Screenshot 2025-01-25 161220.png

FortiNAC

AEK

SuperUser

Hi Osaleem

Most probable reasons: certificate issue, or client can't reach FNAC server.

From the client try to ping the FNAC server. If it works then try sniffer from NAC side (TCP 4568) to see if the PA traffic is reaching FNAC. If it works then probably a certificate issue.

AEK