MAC Address not detected over VPN

FortiNAC

NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.

Article Id 244783

Description

This article describes the behavior where a MAC Address is not detected when a client connects over managed VPN.

This can occur when Agent information is either not received or not processed.

Scope

FortiNAC version 8.x, and 9.x.

Solution

Ensure the agent traffic is reaching the appliance. See the related KB article for troubleshooting steps: Troubleshooting Tip: Connection issues with the Fortinet Persistent Agent
If agent the traffic is reaching the appliance, enable debug for Agent communication. In appliance CLI type:

nacdebug –name PersistentAgent true <----- If using Persistent Agent.
nacdebug –name AgentServer true <----- If using Dissolvable Agent.
tail -F /bsc/logs/output.nessus

Have client connect.
Type Ctrl-C to stop the tail.
Disable debug:

nacdebug –name PersistentAgent false
nacdebug –name AgentServer false

In /bsc/logs/output.nessus output, look for 'PAConnectionStatus'. There should be messages for the MAC address of the remote user.

787

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Troubleshooting Tip: MAC Address not detected over VPN

You are leaving our website