Description
This article describes what needs to be enabled and configured to enable automatic Remediation/Quarantine of hosts marked as 'AtRisk'.
Scope
FortiNAC.
Solution
- Verify that ports are members of the 'Forced Remediation' and 'Role Based Access' groups.
- 'VLAN Switching Enabled' needs to be checked on the switch in the Inventory view under the 'Element' tab.
- 'Enable Quarantine VLAN Switching' needs to be checked in System -> Settings -> Control -> Quarantine.
- VLAN for 'Quarantine' is specified on the switch in 'Model configuration'.
- In the case of SSID configuration, specify the Quarantine VLAN by editing the SSID configuration under the SSID tab.
