Fnac mac address discovery filter

[vincenzo]

Hi Forticollegues,

I'm implementing a Fortinac solution to manage dynamic vlans via unique WiFi SSID.

The wifi networks and all wired networks are managed by Fortigate.

In Fnac inventory I see all Fortigates ports mapped and FNAC learn all client mac address from wired and wireless ports.

There is some methods to instruct the Fnac to learn mac address only by wireless networks? I don't need to manage all wired networks and I see a lot of rogue devices from Fortigate wired ports.

Thank you

Vincenzo

[AEK]

Hi Enzo

One the three pillars of FortiNAC is visibility. If you remove it then you are like bling in your network and your FortiNAC is like useless.

[vincenzo]

Hi Aek,

I don't wont remove Fnac, but in this case i don't need visibility of wired network. I collect a lot of rogue devices learned by wired net, but my single point of access is the SSID managed by Fortinac.

[AEK]

I mean if you remove visibility (even partially), not FNAC.

[scitlak]

Hi,

Unfortunately, it is not possible to exclude a port or SSID in FortiNAC for L2 Polling. You may disable L2 polling for your FortiGate in FortiNAC but in this case, you will lose also visibility for WIFI clients.