FortiSwitch - features clarification

Question

Hello,Could someone explain the differences from the FortiSwitch Feature Matrix for Device Detection vs Network Device Detection and the use cases for NAC Device Telemetry - is it only related to https://docs.fortinet.com/document/fortigate/7.2.0/new-features/612369/track-device-traffic-statistics-when-nac-is-enabled-7-2-4 , since I didnt find that much info that would give me a good understanding of the diff.We were thinking of implementing on a bunch of FSW 148F-POE w/ FortiLink (for which the 2 above features are not available) and use NAC Lite with EMS Tags for the policies but then saw the possibility of also using Device Patterns for Device Category such as Hardware Vendor, Device Familiy, Type, OS etc and would like to know if it would work w/o those 2 features on that model or should reconsider something in the 200 series.Thanks.

gbales · Answer

Device Detection - The FortiGate provides passive device detection on the interface it is configured on. (in this case, FortiLink)Network Device Detection - FortiSwitch helps provide L2 level information for device detection. This helps with anything that mainly talks within the sameVLAN or between VLANs that do not traverse the FortiGate.If you have a specific concern that you need to identify devices that will not traverse the FortiGate then Network Device Detection can be helpful.Reference Docs:https://docs.fortinet.com/document/fortiswitch/latest/fortilink-guide/801195/enabling-network-assisted-device-detection Network-assisted device detection allows the FortiGate unit to use the information about connected devices detected by the managed FortiSwitch unit.https://docs.fortinet.com/document/fortigate/latest/administration-guide/574723/interface-settings Device Detection Enable/disable passively gathering device identity information about the devices on the network that are connected to this interface.https://docs.fortinet.com/document/fortigate/latest/cli-reference/515445176/config-switch-controller-lldp-settings device-detection Enable/disable dynamic detection of LLDP neighbor devices for VLAN assignment. Default: enablehttps://docs.fortinet.com/document/fortigate/latest/cli-reference/245771094/config-switch-controller-network-monitor-settings network-monitoring Enable/disable passive gathering of information by FortiSwitch units concerning other network devices. Default: disable

Sign up

Login with SSO

Login to the community

Login with SSO