Device Identity over IPSec

[wedda]

Hi All

I've been trying to identify devices over IPSec Tunnels, but have found the "set device-identification enable" command does not exist in 5.2.3 from the CLI  nor the Detect and Identify Devices tick box not on the IPSec Interface. The device type is not found in the "Device Definitions" screen just the MAC address of upstream router. Does anyone know is it possible to do this and if so what do I need to do.

Device Registration works, but I'm looking to apply policies by device type for home workers who never come into the office on different device types.

Thanks

[emnoc]

FWIW

The set device -id does exists but not for certain virtual interfacs ( i.e loopback, tunnels,etc......)

[KM_FTNT]

This post should be under FortiGate/FortiOS Forums, not FortiClient.

This post will be better answered in FortiOS forum.  Please post it there.

Thanks,