Technical Tip: Manually update Auto-Definition Directory for FortiNAC in airgap environments

[FortiElie]

Description	This article describes the procedure to manually update the Auto-Definition Directory for FortiNACs in Airgap environments, or when the FortiNAC cannot communicate with 'fnac-updates.fortinet.net'.
Scope	FortiNAC, FortiNAC-F (all versions).
Solution	Usually, System Updates are configured under 'System -> Settings -> Updates -> System' to poll updates from 'fnac-updates.fortinet.net'. In this article, a local FTP repository will be used instead to poll these updates. Go to 'https://fnac-updates.fortinet.net/' from any browser. Credentials can be obtained from TAC support. Download the following files to a local machine: bnoui.txt.gz build-version.txt oui.txt.gz And the latest increment of the file which starts with 'AutoDefSynUpDates_*'. In this case, the file 'AutoDefSynUpDates_8.tar.gz' will be used. Add these files to the root directory of the FTP server: On the FortiNAC GUI, go to 'System -> Settings -> Updates -> System': Under 'Host:', provide the IP address of the FTP server. Under 'Auto-Definition Directory:', add '/'. This will correspond to the root directory of the FTP server. Under 'Product Distribution Directory:', add '/'. Under 'Agent Distribution Directory:', add '/'. Under 'User:', add the username of the FTP server. Under 'Password:', add the password of the FTP server. Under 'Protocol:', select 'FTP'. Select 'Test', and confirm that the FortiNAC can communicate with the FTP server. Go to 'System -> Scheduler', select 'Auto-Definition Synchronizer', then select 'Run Now'. Go to 'Logs -> Events & Alarms -> Events' and confirm that the synchronization was successful. Notes: Auto Definitions are updated periodically on 'https://fnac-updates.fortinet.net/', and this procedure should be done regularly by the FortiNAC administrator if the FortiNAC can't poll the updates automatically. Related documents: Airgap Deployment Guide  System Update Settings - FortiNAC-F 7.6.0 administration guide  Technical Tip: How to manually upload the Agent package in air-gap environments where FortiNACOS res...