Technical Tip: FortiNAC - Hosts are profiled with an improper Device Type

[akanibek]

Description	This article describes a solution for an issue where a host is profiled with an improper device type.
Scope	FortiNAC 9.4.x. FortiNAC-F all branches.
Solution	There could be cases when a host is registered using a Persistent Agent method, however in a Host's view, the host is populated with a wrong device type, precisely as a 'Printer' like in a screen below, which could be found by entering the GUI -> User & Hosts -> Hosts -> filter out the desired host, and double-click (or right click, edit): This may happen for several reasons: There is an active FortiGuard IoT service. Refer to this link (page 15, FortiGuard method). A 'Perform proactive "FortiGuard" method profiling' is enabled under FortiNAC GUI -> System -> Settings -> User/Host Management -> Device Profiler. A 'FortiGuard' fingerprint method is ranked higher than Agent (Refer to this link). Steps to resolve the issue: Rank a 'FortiGuard' fingerprint method lower than a desired fingerprint source. Disable the option 'Proactive 'FortiGuard' method profiling'. Delete the host, and wait until it appears with a proper device type. Related articles: Technical Tip: Track rogue/host profiling data through Endpoint Fingerprints Technical Tip: View DHCP Fingerprint information received by from hosts Technical Tip: Methods used to learn host name and operating system information