Skip to main content
jcvm
New Member
December 31, 2021
Question

Scan IP addresses in Fortigate

  • December 31, 2021
  • 2 replies
  • 14401 views

Hello,

 

Is there a way to put scan network segments in fortigate?

Example: I want to scan the segment 192.168.1.1/24 and know of the 254 ips which are in use?

2 replies

Markus_M
Staff & Editor
Staff & Editor
December 31, 2021

Hello jcvm,

 

you cannot scan from the FortiGate. If the FortiGate is directly connected to the network, you would be able to check the arp table to see which client was connected in the past 5 minutes or likely still is.

get sys arp

 

Best regards,

 

Markus

Contributor III
December 31, 2021

Hello jcvm,

 

Also, just to add what Markus suggested, you can also use device detection on FortiGate which will actively and passively scan for the network devices. But, this will only be possible for directly connected networks and not for remote networks.

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-Device-Detection-to-allow-FortiOS-to/ta-p/190901

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.