Technical Tip: Configure Security Fabric with FortiNAC & Fortigate

[khoffman]

Description	This article describes how to quickly set the Security Fabric between FortiNAC and FortiGate to use Dynamic Address Tags.
Scope	FortiNAC-F 7.2 and FortiGate FOS 7.
Solution	Dynamic Address Tags Configuration: FortiGate must already be in inventory View. FortiNAC needs read/write access to FortiGate via API. Create Connector in FortiNAC: Network -> Service Connector. Enter the IP address of the FortiGate. Authorize FortiNAC on the root FortiGate. In the FortiGate UI, navigate to Security Fabric -> Fabric Connectors.   Verify that FortiNAC has been added to the Fabric.   In the FortiGate UI, navigate to Security Fabric -> Fabric Connectors: 'right click' on Security Fabric Setup and select 'Edit'. In the Device Authorization section, select edit to verify the FortiNAC server is authorized.   Ensure 'Allow downstream device REST API access' Is enabled in the FortiGate, Security Fabric Settings view.  In FortiNAC, define the SSO Address Objects and Tags: Navigate to the FortiGate in Network -> Inventory. Select the Virtualized Devices tab & access the Model Configuration for the applicable VDOM. Add applicable Addresses group objects to 'SSO Addresses' and add Tag values for each logical network tag that should be applied. In FortiNAC, complete a Resync Interfaces. 'Right-click' on the firewall in the inventory view and select Resync Interfaces.  Related documents: Fortinet Security Fabric/FSSO Integration  Connection Process