Skip to main content
HS08
HS08
Visitor III
July 8, 2026
Question

Pesisten Agent Scan

  • July 8, 2026
  • 1 reply
  • 26 views

Ho we can make endpoint enter to isolation network if the persistent agent have fail result? And how often the persistent agent will doing the compliance scan?

1 reply

ebilcari
Staff
ebilcari
Staff
July 9, 2026

You can refer to this article for a quick overview of the Agent deployment:

If Forced Remediation is enforced on the port when a host connects, any host identified as At-Risk will be automatically placed on the quarantine network.

Usually, scans are configured to run only once when hosts connect in the network, but they can also be scheduled to run periodically.

Emirjon
HS08
HS08Author
Visitor III
July 10, 2026

So when the endpoint suddently not in compliance then the persistent agent will mark the host as At-risk automatically or we need to add action ‘mark host at risk’?

ebilcari
Staff
ebilcari
Staff
July 10, 2026

The host can be moved to At-Risk state only after a scan has failed. This type of responsive can be achieved with monitoring like shown here:

or a scheduling a scan to run periodically:

https://docs.fortinet.com/document/fortinac-f/7.6.0/administration-guide/127058/schedule-a-scan

Emirjon
Terms & ConditionsAccessibility statement