Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
podvarka
New Contributor

FortiNAC 9.4 Repeated event – different behaviour for next events

Hello,

did anybody solved next problem, please ?

 

When FortiNAC detects device whch is not compliant, it has configured action; in our case it is disable port, send email; with release port after some time (5 minutes), recheck device

 

if non compliancy is not false positive, it send email every time; but it would be nice to send second and each next email to another set of email addresses (due to automatic creation of cases in ticketing system)

 

                is there any possibility how to treat it with scripting ?

 

Best regards,

 

Petr

3 REPLIES 3
AEK
SuperUser
SuperUser

Hi @podvarka 

I don't have direct response for your case but I think the more natural way is to put a non compliant device in remediation (instead of shutdown port) so it can download patches, updates, or anything that helps making it compliant again.

AEK
AEK
podvarka
New Contributor

Hello aek,

 

agree that in some cases putting non compliant device in remediation is better solution. But in others is better to shut down port and block device from access to network.

 

Petr

ebilcari
Staff
Staff

Technically it can be done but the script should contain the logic to remember the first request and to send the email only after being called for the second action. The tool that can be used to send the email from the script is sendemail:

> sendemail -subject 'mail test' -to 'gimi@eb.eu' -message 'This is a mail test.'

...

250 Ok
DEBUG SMTP: message successfully delivered to mail server
QUIT
221 bye
Connected to 10.1.1.10 on port 25
Sent email to gimi@eb.eu

- Emirjon
If you have found a solution, please like and accept it to make it easily accessible for others.
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors