FORTINAC - PUT REGISTERD HOSTS IN ISOOLATION VLAN

[Partisan44]

Hi 

I want to achieve this :

When a registered host is connected ,its first put in isolation vlan until it passes endpoint compliance ,is this possible? I have set the default vlan as isolation ,however when a registered host connects ,its moved from isolation -> production then isolated.

Thanks 

[ebilcari]

That will depend on the method used for registration. In order to directly isolate (quarantine VLAN) before registering the host, the registration should be handled by the Persistent Agent. A endpoint compliance and a dedicated Scan should be created with the following condition:

[Partisan44]

Hi 

Thats there 

[ebilcari]

In case of PA there is a note: Persistent Agent always registers and marks at risk. Make sure that the hosts are registered only through the agent (no registration through DPR, dot1x, portal etc.) and the remediation is configured and enforced while the host is still in the rogue state.